Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: 5DMh3NrFWtmbYeHo7lZ6xELxof7Q1a51Y2P+OaCfQSM=
Subject key identifier: BA:81:94:15:A8:DA:FC:F5:2A:08:4A:F6:6D:59:13:4C:F9:10:DF:CB
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019758A42F62A3C55602CA8C0BE1C79C7F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 04E8
Signing time: Tue 10 Jun 2025 07:00:44 +0000
Manifest this update: Tue 10 Jun 2025 07:00:44 +0000
Manifest next update: Wed 11 Jun 2025 07:00:44 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: Qcme8vBYB0vU1FlVKOI1qJdibvWTFpsVmutsi67dFMQ=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:2f:62:a3:c5:56:02:ca:8c:0b:e1:c7:9c:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jun 10 07:00:44 2025 GMT
Not After : Jun 11 07:00:44 2025 GMT
Subject: CN=ba819415a8dafcf52a084af66d59134cf910dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:e9:3a:08:cb:b8:20:ab:c3:ae:a5:9b:76:
e2:48:50:53:f1:6d:0b:61:f9:a8:77:f9:37:a7:bf:
41:df:22:a6:97:65:d4:15:59:80:4d:64:9f:10:87:
43:7d:2f:30:c5:54:91:ef:e9:9a:0d:ff:17:63:fd:
3d:c5:d5:b6:e4:d3:69:04:7c:f9:5e:7e:48:4c:48:
76:03:1c:39:a3:76:32:cb:ed:d8:62:4d:f3:3e:74:
29:7d:a2:14:dd:b2:62:2d:81:81:34:09:67:d0:2d:
d8:ff:bd:a3:ad:0c:91:ef:a8:1c:7b:e2:71:d3:8f:
5e:ed:11:81:16:dd:44:64:c9:f7:58:86:14:8c:d9:
36:b3:79:c7:1a:2a:25:e9:80:0f:30:a8:9b:8d:a1:
3f:ec:26:08:bd:1b:83:43:1a:4b:42:cf:2f:25:8c:
7b:57:2a:27:19:76:a6:91:26:c2:44:bf:f4:df:6b:
8a:42:be:17:6b:73:46:49:5b:bc:57:42:8b:92:34:
7d:50:0f:ee:f5:f0:8a:df:c4:cf:3f:ec:a7:a5:6c:
d3:34:0e:13:f2:06:50:d4:36:a7:f9:53:cb:83:00:
31:70:b2:34:6f:4e:46:62:95:37:c4:fb:5c:1e:f0:
30:fa:e3:09:0a:09:5b:37:1f:e2:23:b7:8e:af:83:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:94:15:A8:DA:FC:F5:2A:08:4A:F6:6D:59:13:4C:F9:10:DF:CB
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e4:68:65:4c:fb:db:d9:60:6b:41:b9:35:ee:d5:b1:94:66:
4e:20:f3:83:aa:10:a9:c8:fe:22:b0:90:1a:f7:c0:ed:c5:2a:
96:57:66:b8:32:56:7f:5f:89:6e:7d:e6:03:c5:44:3c:98:c8:
9b:8a:81:c1:3f:d6:4f:96:15:b3:ea:88:04:82:4e:a7:fe:1b:
0b:e7:b7:2c:c3:34:ed:40:79:89:89:5c:51:88:a6:8c:19:e8:
e3:03:f6:ee:f7:61:a3:36:df:04:e6:a7:d7:48:71:4b:c8:89:
b3:93:df:a8:35:92:94:d7:ea:2a:b1:f9:38:42:e0:da:ae:9e:
ca:79:28:26:11:46:a7:b8:ef:04:85:49:3a:d4:37:d6:f0:dc:
8d:00:6f:da:10:51:7f:05:75:9c:8e:9d:4d:33:0a:b2:91:6d:
fe:b8:94:f0:3e:52:4d:79:a4:74:d9:f3:53:75:3f:65:7b:f1:
43:98:6c:e1:5c:da:69:72:b5:5b:e2:48:a9:39:0c:8c:0f:56:
aa:42:f8:cd:b0:d3:15:8d:c3:34:28:59:84:db:cb:46:3b:c3:
e0:5e:44:8c:09:f0:ec:d3:b8:3e:60:4a:b4:a8:ed:80:ea:03:
a9:05:07:e3:52:ba:32:de:2c:51:d5:f4:68:d6:01:cd:e5:30:
3f:ea:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:41:23 2025 by rpki-client