Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: 329pD8mPaY7spo5N2cH132t5IEgJFRvgqaKFxXlxl+k=
Subject key identifier: 81:BB:8A:4F:A0:0A:F2:B5:08:61:42:5D:62:36:9B:07:CE:7A:13:57
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01974A0CCC5F058CE16AB7577C3D72FB8FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:42 +0000
Manifest this update: Sat 07 Jun 2025 11:00:42 +0000
Manifest next update: Sun 08 Jun 2025 11:00:42 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: ss4jPtl3a7fAVKDaykhmzNdFJuT39G6WsE9cyPPwo4Q=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:cc:5f:05:8c:e1:6a:b7:57:7c:3d:72:fb:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jun 7 11:00:42 2025 GMT
Not After : Jun 8 11:00:42 2025 GMT
Subject: CN=81bb8a4fa00af2b50861425d62369b07ce7a1357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:7e:d4:41:38:59:a8:18:f8:6b:b5:bc:c1:
c3:52:98:cb:6f:1b:ed:59:1e:35:50:d0:56:9d:4a:
9f:99:46:44:8e:87:9b:dc:3c:ae:c4:da:9a:bf:a2:
a1:a0:a2:53:fa:0e:95:9c:4e:31:85:94:32:41:89:
e7:50:52:48:05:1f:cd:7a:2f:ba:fb:2e:3f:1d:ae:
76:e0:65:16:eb:12:f9:6e:22:3e:93:16:71:96:bd:
20:0e:f6:a7:c6:34:14:67:b0:3f:cf:1a:c0:a0:79:
f3:39:0c:a0:0c:7e:fa:0c:fe:5d:1e:82:2e:3e:61:
4e:98:f0:ca:d4:5e:ba:00:f6:42:42:4a:a1:b4:8e:
5c:69:47:52:5b:10:60:38:a6:08:48:7f:60:f2:70:
08:78:21:94:73:08:f0:d8:71:68:c9:29:20:bf:05:
57:61:5c:d4:03:f1:9f:96:ed:e0:17:3f:07:71:2c:
b2:e7:62:fb:b2:b7:03:a1:c0:96:d5:1c:d3:8f:fa:
23:0c:b3:5c:fc:1a:a2:8b:89:f2:7d:95:93:d3:70:
a5:01:c1:27:2b:53:b4:7a:8d:2a:08:2a:27:f2:04:
5b:9b:70:07:e8:dd:ee:a6:31:6d:9b:c1:bb:85:ef:
6f:1c:41:66:bc:53:14:f4:b8:2c:f0:1d:a4:5e:a5:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:8A:4F:A0:0A:F2:B5:08:61:42:5D:62:36:9B:07:CE:7A:13:57
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fc:40:ea:e8:1c:a9:ff:fb:a6:7a:63:1b:8a:79:34:dd:79:
6b:41:65:f4:83:93:ee:d2:7c:dc:8f:90:f7:69:a2:c9:a8:9b:
4a:cd:13:03:be:05:a1:5f:a0:41:87:f7:8d:dd:35:96:98:41:
18:f8:1e:40:76:ee:1e:63:8f:09:78:d3:6c:9e:6c:d4:3c:69:
eb:89:d7:23:f7:ec:bd:2d:26:40:96:5a:85:74:c7:8d:02:ba:
42:4a:b5:2d:8a:09:fc:ed:06:34:07:61:33:99:f9:d4:ee:52:
d5:ad:73:3e:6e:c7:33:e6:c9:9e:ec:4e:40:80:b1:58:14:a5:
1b:5e:b1:da:7e:09:e5:1f:a7:0b:d1:7e:16:12:97:5d:30:ab:
8e:29:25:85:cf:ff:d3:fd:e2:32:c2:37:f7:a8:a2:36:6b:ca:
13:26:e1:55:3e:64:c0:91:06:d4:dc:8d:5d:bb:ef:35:b9:f7:
c1:23:f6:ef:7d:b5:63:0d:8c:f7:58:4f:b5:14:01:1b:61:0c:
1a:63:4d:c0:56:f1:38:96:c6:cc:f0:51:28:e3:b5:f2:b8:79:
a0:dc:02:77:e5:8f:1f:f6:06:cb:11:78:e7:5d:1a:f4:83:0e:
b8:c0:35:1c:e7:56:c5:95:d7:77:97:9f:25:c3:cd:d5:58:72:
87:28:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:38 2025 by rpki-client