Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: 9UOV/HC0lNMCo5jqvTBZ1OXJxalCOiAQWNwkAz1a9mI=
Subject key identifier: 4A:FF:53:48:12:DE:27:17:9A:9F:6D:A1:91:A0:26:CD:CA:3E:97:09
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 01975E6F5F1846338032C012CB89A5B54C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 04EB
Signing time: Wed 11 Jun 2025 10:00:46 +0000
Manifest this update: Wed 11 Jun 2025 10:00:46 +0000
Manifest next update: Thu 12 Jun 2025 10:00:46 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: Ds58zcVEtYx7AUw0sdkp5s9uDr4mCYKJAwCHVZhXhUo=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:5f:18:46:33:80:32:c0:12:cb:89:a5:b5:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jun 11 10:00:46 2025 GMT
Not After : Jun 12 10:00:46 2025 GMT
Subject: CN=4aff534812de27179a9f6da191a026cdca3e9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ab:da:81:0d:26:b0:8d:d3:9b:0c:1b:6a:61:
04:14:52:df:d1:70:a6:cd:42:db:29:3a:00:9d:57:
37:c9:73:a5:ee:cd:c0:db:26:f0:22:f4:9e:07:62:
1b:3e:b8:02:58:77:ef:5e:4a:20:46:e8:39:24:f8:
1e:d6:28:d3:fa:a6:5b:b6:2a:2a:40:40:ab:2a:18:
bc:5a:86:e4:61:08:ac:47:06:f2:7e:6b:c2:f1:9e:
3b:60:67:7d:a8:7f:2a:d8:b4:6b:eb:da:ff:1e:23:
76:6a:ce:5d:4a:8f:85:5e:1e:c6:0a:53:e9:67:34:
43:4a:4b:50:90:4d:79:6e:1a:be:5c:5c:39:9b:10:
97:83:d8:6c:c1:7a:61:eb:0a:08:02:13:b9:6a:b0:
3a:0e:8e:d5:5c:41:3d:2d:79:9d:f5:de:d9:ac:d3:
ec:c7:31:b9:6e:12:7a:80:73:1c:08:6d:fb:03:14:
24:4b:c2:aa:28:8e:7e:cc:a5:2c:95:ff:49:aa:78:
81:8c:be:7b:14:63:ea:3a:d0:89:b3:73:de:13:2d:
a4:8f:91:30:24:96:48:13:5e:2b:09:62:ea:41:31:
f4:45:d4:c0:d8:2f:d2:68:03:c7:cc:0f:cc:39:79:
03:35:02:7c:95:68:54:df:e5:7f:44:15:27:8c:f8:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:53:48:12:DE:27:17:9A:9F:6D:A1:91:A0:26:CD:CA:3E:97:09
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f3:df:7a:1a:5d:25:a8:80:9e:7b:cb:a3:62:58:27:4f:f1:
04:96:10:26:b8:ff:1c:29:4b:7a:c5:14:bf:7b:db:96:6e:cc:
b9:da:ab:26:8c:de:e6:91:ce:4a:9c:b9:22:5b:3b:62:66:e3:
ae:8c:17:c5:74:23:31:c2:47:ff:c1:3f:71:33:e4:56:0c:d2:
e5:ac:9c:b2:2d:a4:20:3d:21:62:10:a0:99:92:00:2e:0d:4c:
fe:f4:47:7f:ae:5f:48:04:3a:93:9b:cc:9b:a8:77:d0:64:77:
41:b3:c0:5c:36:d9:c6:ea:67:ff:75:7a:9b:06:03:4a:e4:42:
c1:0e:09:ff:51:ce:80:88:83:8d:32:e2:b3:1f:15:32:b0:77:
88:53:91:37:a1:11:89:2b:e3:c4:1a:a3:1b:8d:f6:7c:0b:d6:
b3:18:44:36:d2:3b:c4:fa:ae:75:74:69:9f:8f:19:a3:44:45:
d8:a3:ce:28:57:d3:fc:57:99:36:47:14:d4:6d:b5:df:b3:bf:
79:a4:69:68:6e:0d:db:fa:74:9c:a6:e6:90:ca:fd:15:a8:71:
dc:3d:11:c8:97:e4:23:a5:e7:14:9b:4d:aa:8d:aa:8e:a6:0e:
79:d3:eb:af:f4:a5:38:12:14:19:75:15:e7:36:46:fb:cc:2b:
c3:a3:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:36:20 2025 by rpki-client