Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: IZNSRM12I2Nf5roB0hbXztlwbm3RgtslGh9Uu09sz/g=
Subject key identifier: EE:02:13:D9:51:33:4E:32:B1:2D:A7:0D:8F:F0:9B:11:7A:17:E5:50
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01974779788DDBC22D8A4F0E4121C9561FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:32 +0000
Manifest this update: Fri 06 Jun 2025 23:00:32 +0000
Manifest next update: Sat 07 Jun 2025 23:00:32 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: NOWqR1iJqDRwpNF2j2dN5MaMpNnD9Jtoie1xGEyffYA=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:78:8d:db:c2:2d:8a:4f:0e:41:21:c9:56:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Jun 6 23:00:32 2025 GMT
Not After : Jun 7 23:00:32 2025 GMT
Subject: CN=ee0213d951334e32b12da70d8ff09b117a17e550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:12:4d:58:d0:05:79:d3:89:95:f8:46:4e:
be:b9:c3:95:13:54:0d:2d:49:8b:16:30:b5:d9:70:
6a:33:10:c0:6f:4e:ff:d5:9a:f5:45:32:67:da:e8:
c6:99:4e:74:4b:45:fe:18:7f:7a:fa:a9:cb:47:0c:
91:b7:c5:a1:27:9d:2d:68:a2:28:82:43:be:23:3a:
33:08:c9:05:79:b3:bd:1d:d4:1d:f8:c5:34:c7:e0:
fd:e3:ea:1e:41:90:e1:1f:70:26:38:83:00:37:15:
79:92:91:9a:31:e1:61:5e:21:95:5f:dc:fe:91:7a:
76:71:f3:87:61:d3:50:19:d5:f5:b2:50:1c:61:01:
8a:d6:bc:c3:7b:e7:94:64:29:d1:7a:99:b8:1d:59:
ab:4f:f0:63:b8:c7:db:1a:e7:9c:e6:16:0c:46:c4:
d2:24:71:97:6f:c3:14:d8:4d:de:4d:7b:f9:43:24:
ca:06:12:d8:37:65:02:b6:ed:6d:ed:a8:31:28:fb:
17:e9:10:5a:e9:bf:99:19:4f:04:05:23:4b:0f:23:
e7:2c:11:04:f8:36:dd:cd:88:9d:ec:fb:37:89:71:
4c:03:33:98:ff:6d:25:7d:a6:12:b0:3a:e0:ac:ca:
f4:24:3a:52:85:f0:35:c6:62:22:46:7d:b3:1c:3e:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:13:D9:51:33:4E:32:B1:2D:A7:0D:8F:F0:9B:11:7A:17:E5:50
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:4e:f8:aa:ac:a1:e8:2f:f3:de:d8:10:6c:62:44:69:38:
07:12:0e:40:80:a2:23:73:72:b5:3b:93:de:98:6d:60:1b:0c:
94:90:b5:37:72:c4:d6:a1:c8:18:a7:18:27:91:45:4a:0f:dc:
db:3a:df:48:83:22:1d:57:57:02:19:3c:80:4c:59:8f:41:7a:
b9:9f:a8:49:1b:3f:87:a3:05:0c:e3:39:eb:7e:67:7f:d8:04:
d7:93:bf:48:0c:4c:62:15:72:97:bf:39:f8:86:15:7d:57:30:
cc:ca:0b:a2:2f:b3:34:ae:1e:1c:9c:75:78:ae:d3:18:e8:b4:
82:35:58:20:77:0f:f0:a6:ad:5f:47:e7:96:91:92:92:dd:eb:
fe:51:3a:09:ca:d0:35:b9:6a:c7:88:4c:8e:82:92:19:34:a8:
18:07:c5:15:8f:20:f4:22:cc:bd:92:af:e6:8f:8d:b2:13:33:
4c:54:1b:4c:b5:c5:46:fa:ce:be:df:fa:02:cc:e7:d2:c1:0b:
28:1f:ef:c7:c4:c1:41:21:63:59:50:d4:c7:64:e5:6a:06:5b:
6e:b0:cd:16:fe:86:c2:be:03:e8:58:8d:81:e6:b3:56:2a:d9:
c3:24:be:6c:80:79:26:85:8e:be:8b:7c:62:d8:87:35:c8:31:
05:28:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:29 2025 by rpki-client