Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: u73LZbT+x7Ptn8GjCs+mUa2EpvlxpWvkP/LjYzNeC7k=
Subject key identifier: 86:37:1F:01:DA:1D:70:50:02:AB:AA:41:A1:B6:38:C7:B0:79:E9:AC
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 01974E2068048A5E68DF9114DD050F7BABA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 09E3
Signing time: Sun 08 Jun 2025 06:00:35 +0000
Manifest this update: Sun 08 Jun 2025 06:00:35 +0000
Manifest next update: Mon 09 Jun 2025 06:00:35 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: 6Okcgln4/wT6/X5Xeu6h5s7nj3r8IfyQTFUZ6IaWh6U=)
2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:68:04:8a:5e:68:df:91:14:dd:05:0f:7b:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Jun 8 06:00:35 2025 GMT
Not After : Jun 9 06:00:35 2025 GMT
Subject: CN=86371f01da1d705002abaa41a1b638c7b079e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:e7:aa:f2:74:58:d7:b3:a5:24:0b:ff:63:
3b:04:1f:0a:a7:37:48:d2:1b:46:d4:2f:45:91:e7:
5f:c0:35:b2:c9:fd:2c:28:01:fe:1d:c1:53:95:14:
41:f2:aa:83:c7:c4:c8:64:de:c3:8d:42:8f:65:2c:
74:2b:3f:86:dc:9c:e5:f1:a7:1e:c6:0b:b0:ca:1a:
29:e8:46:b8:53:8b:10:b1:5a:80:5a:81:0f:93:f4:
ac:d4:47:7c:4d:b8:20:e4:25:69:29:80:46:89:7c:
55:4a:ee:68:bb:22:b6:28:90:0c:04:c5:5d:69:c2:
9b:b5:cd:ba:3b:82:20:93:38:91:79:78:6a:09:d5:
f7:be:5f:9f:2e:c9:77:3d:97:b9:13:57:68:1b:e9:
42:f5:ae:7d:24:5b:e0:3a:dc:69:31:68:ec:5d:d1:
b0:ce:ff:9d:f0:18:ce:34:53:ad:f3:5a:f5:8a:81:
2f:be:6a:b9:e9:a1:86:b0:7e:b1:60:6a:11:18:f6:
af:a2:e2:46:86:41:77:a6:a9:a6:69:f8:86:cc:28:
c8:de:be:f5:58:11:c3:e7:fc:f8:af:d7:c5:79:fa:
eb:63:8c:3b:cd:48:be:97:dd:5d:57:49:69:9a:9a:
a5:51:7d:a0:68:42:02:d4:e6:0b:62:bc:49:ca:2f:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:1F:01:DA:1D:70:50:02:AB:AA:41:A1:B6:38:C7:B0:79:E9:AC
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:2c:ee:1b:f8:c5:0b:10:ef:fd:64:fd:72:a5:da:8c:70:
e3:a9:e6:2c:ee:c2:ad:b2:02:d9:22:e6:82:bc:2c:9b:b7:3a:
4c:a4:12:73:b7:bd:2f:26:cf:22:92:d7:88:82:ef:79:b1:4f:
e3:0f:d3:1e:c8:14:4e:2a:49:67:f0:ee:06:d6:99:db:09:28:
1e:56:3b:21:f9:bc:f5:2c:e8:75:78:a0:96:97:da:d7:5f:d1:
f1:bd:3d:3c:e0:ce:2b:fb:a0:a3:c8:70:5a:2f:fd:f7:d7:38:
d0:6a:4f:f6:cc:89:09:c2:e2:16:b0:4a:f8:d2:f4:69:74:ad:
e5:dd:1a:f9:9a:f4:1d:9a:ce:f2:ba:1b:a1:e9:08:42:23:8f:
67:74:91:77:33:63:67:9c:dc:0a:5a:93:58:1d:7a:f4:c2:7c:
90:4a:e2:fc:7d:16:35:42:2a:6b:22:c6:c5:93:8d:2c:b0:f8:
01:bd:54:38:cd:58:09:9d:8e:01:12:c1:bf:e2:3a:8c:c5:12:
55:ad:fc:ed:38:97:ac:84:66:b5:a7:9b:ac:17:32:10:ef:dd:
58:1d:60:bc:50:8b:f6:12:0f:e6:0a:d2:a2:88:92:16:69:f0:
74:67:65:ff:eb:e6:24:37:5b:3e:a1:73:4f:9e:e6:a5:db:75:
b2:7d:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:01 2025 by rpki-client