Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: sCb2cMPy2V+Wwot+TpeB+w2JqqhvmEu+t9rFM9orceo=
Subject key identifier: 70:6A:7E:79:EE:84:6A:88:54:8D:22:3C:70:7F:17:81:B9:54:3B:62
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 01974E5717901F34D9342E03060F0EA7F615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 07:00:19 +0000
Manifest this update: Sun 08 Jun 2025 07:00:19 +0000
Manifest next update: Mon 09 Jun 2025 07:00:19 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: /kCoYQ0Gl9rzvr/LNu1MNMkrH7UuEnDfnHoht09LqmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:17:90:1f:34:d9:34:2e:03:06:0f:0e:a7:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Jun 8 07:00:19 2025 GMT
Not After : Jun 9 07:00:19 2025 GMT
Subject: CN=706a7e79ee846a88548d223c707f1781b9543b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:0c:37:ef:a9:c5:e5:14:07:0f:56:71:62:
32:9a:34:3d:b1:e6:c8:9e:d0:7a:cc:a0:88:99:23:
96:e8:af:63:9f:62:4f:eb:c4:06:4f:47:12:c6:39:
3e:8f:cb:5b:43:56:59:69:df:43:e1:d1:04:97:46:
b4:04:07:f7:a5:8d:e4:bb:cd:a3:0d:e8:67:f7:4d:
a5:e9:aa:98:9c:90:02:8f:83:b5:6b:72:bd:ff:3e:
bd:52:46:00:2d:8c:ce:95:e3:82:86:3c:34:b8:18:
01:33:3c:b4:e5:07:9f:41:fb:03:90:37:66:3a:3e:
84:67:e7:ae:38:8f:74:21:55:04:d3:17:1a:7a:23:
39:7a:3c:e5:3c:df:26:c3:c5:1b:f5:6e:4b:38:03:
ad:ae:85:9f:06:26:74:a2:37:71:57:d6:9f:ce:e5:
66:5c:ac:17:02:a2:a7:60:ec:d7:53:b6:38:69:d7:
99:a3:ac:2d:67:34:55:9d:27:e7:ba:33:1c:ac:56:
f0:c1:ce:66:6a:81:a2:e2:b5:fc:40:4b:6b:f3:5c:
e1:89:74:f0:e2:2c:bd:07:bd:51:a9:f0:0f:95:1e:
a1:4a:c8:b0:7f:e2:77:23:a9:6b:c8:87:30:00:18:
0c:63:81:02:02:52:26:45:d9:6c:a4:82:57:4c:50:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:7E:79:EE:84:6A:88:54:8D:22:3C:70:7F:17:81:B9:54:3B:62
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ec:22:e0:28:3c:f5:41:db:3b:44:28:dd:6c:0a:73:4f:5d:
ec:4f:d5:18:ac:ca:57:a9:ef:20:5f:8c:ec:aa:18:66:42:24:
7c:9b:53:ae:2a:11:08:64:c0:e9:8d:5b:5e:f4:80:63:c2:3b:
3d:ca:f5:2e:66:53:e4:f3:ba:98:77:9b:76:7b:03:58:70:56:
19:ff:10:af:50:a5:78:45:10:ea:ac:c3:30:50:f8:ec:16:ab:
59:f6:be:65:5f:6e:2c:95:e9:85:4b:3e:a0:bc:cf:50:79:81:
9f:cf:7f:d0:82:4c:c6:00:c6:8a:fb:df:e6:3f:59:ae:a7:98:
b1:94:8a:e4:09:47:d9:9f:c2:bd:c4:7f:51:d5:f2:a8:e9:e1:
48:86:3f:b4:0d:16:b4:d9:f5:d4:6a:c2:a8:47:a1:00:67:ef:
f8:60:c1:58:5b:25:65:c0:ad:d9:c4:5f:6f:94:a3:bd:51:84:
4e:c8:f1:48:22:95:d1:30:c5:f7:50:60:40:e2:ca:5e:ae:fb:
c2:48:81:e4:42:4b:49:90:cf:2d:6c:f9:16:22:65:ad:5f:66:
0c:28:d5:07:00:36:a8:fe:1f:40:c2:14:8e:a1:c5:1f:22:43:
1c:90:de:ae:18:e1:bb:e7:f2:ba:27:6a:82:6c:94:d0:62:9d:
7f:7d:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:03:10 2025 by rpki-client