Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: QPg899t+eStEoEt16AZfFjKFk3gvopIAFA9zUpIPZHU=
Subject key identifier: EE:C1:D9:3E:8B:2A:11:80:F8:BD:41:15:CA:F8:13:24:C1:E6:2C:BA
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 0197432FA0202E4BD45BF2ADED04BC6DB7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 03:01:23 +0000
Manifest this update: Fri 06 Jun 2025 03:01:23 +0000
Manifest next update: Sat 07 Jun 2025 03:01:23 +0000
Files and hashes: 1: 8kdm1ZAPNcZedXP01TafIjBXKRs.roa (hash: itb59cI824fq1EKKCsVfc6XjwoFA0+TxsZlQLnTiMW4=)
2: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: +mnjTFH1ko5TMI5q+Z0LDPqh4gQ+Dn5ZkFxxXp+vhps=)
3: NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa (hash: 6BsyUuSqs5SSPqJlfjsNi68lsr8Mj9jzzqX6MyZpWe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:a0:20:2e:4b:d4:5b:f2:ad:ed:04:bc:6d:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Jun 6 03:01:23 2025 GMT
Not After : Jun 7 03:01:23 2025 GMT
Subject: CN=eec1d93e8b2a1180f8bd4115caf81324c1e62cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:f3:4e:47:fc:45:34:e1:ae:57:c9:4d:3b:
2b:7d:c5:31:56:11:75:2d:c9:a4:49:46:53:cb:b8:
9d:d8:cd:29:26:3d:ec:d1:cb:a8:40:e9:6d:1c:d4:
c4:21:6b:52:df:80:16:94:d3:3c:fe:a8:7e:ad:63:
9b:19:88:6d:35:3b:17:53:de:e0:8f:41:5d:61:1b:
b4:e2:c1:9f:2f:db:73:2d:22:04:40:8a:26:fa:fa:
f3:63:aa:99:58:8a:6d:af:0a:5b:60:cf:8d:96:3f:
ca:ad:28:11:24:38:04:35:00:78:86:04:d0:a5:b2:
77:0a:e2:d0:55:bd:9d:28:3b:36:2d:6c:75:7e:51:
34:ef:0a:2d:13:60:21:5f:13:a4:5c:6e:6d:1c:00:
43:5a:26:29:05:78:e1:f9:e5:8b:4a:ef:93:5d:60:
bf:7f:c0:44:a5:fa:d4:a5:9c:ba:74:49:59:11:e5:
a0:7a:3b:b0:9a:5a:59:2d:40:d9:b8:b0:19:9f:7b:
8c:e8:3a:d6:23:d9:8b:a5:6f:3d:0d:fa:9e:1a:20:
66:74:b8:8f:32:69:06:16:9a:59:1c:95:39:e8:fe:
e9:52:42:71:c0:c9:92:13:31:09:eb:7f:70:c1:c0:
15:47:35:d4:ba:5a:38:7f:b4:a6:fb:98:81:d9:81:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:D9:3E:8B:2A:11:80:F8:BD:41:15:CA:F8:13:24:C1:E6:2C:BA
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:34:17:f9:fe:0e:5f:2b:81:d8:ec:d7:8b:09:36:79:87:a8:
fa:d6:a0:db:a3:cd:f8:b7:18:fb:11:f5:0b:12:80:91:da:37:
2d:9c:37:8a:f2:b6:d3:81:a2:b1:62:9f:20:ce:e1:1e:37:74:
4a:a3:a8:5b:f0:7e:46:45:4a:1e:5a:3a:4c:f3:62:8c:08:1d:
55:06:47:e8:a8:c4:ef:62:da:32:22:67:2b:c2:ce:80:c7:90:
12:47:f6:56:a2:48:b1:2a:fe:47:68:5f:84:f8:dc:25:64:eb:
13:85:b4:49:86:3a:b3:19:3e:23:dd:d4:ae:d5:97:f6:47:e2:
70:cb:65:52:98:9f:04:c0:5b:13:d2:75:2e:1b:ed:69:35:3c:
1f:17:fd:ee:75:c0:a6:7d:5c:6b:50:a7:4c:fd:08:1b:cf:95:
e1:f2:29:0d:84:9c:10:7b:1f:7a:ae:e0:8e:fd:e6:c2:c6:42:
bc:96:15:ba:e1:94:24:9d:1e:ea:f5:bd:85:35:9f:b9:fb:8a:
25:8e:91:15:5d:d7:56:93:00:0d:eb:2c:60:fa:39:16:9c:75:
0c:8c:4b:b2:30:21:1f:c5:04:be:75:41:d4:8b:f6:88:8f:e0:
66:f8:68:17:cb:29:a2:e2:79:44:b1:b2:95:bd:30:20:cf:38:
c2:97:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:57:14 2025 by rpki-client