Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: nFyphsqDOTLJG6tMNw6mD7dB4Zl30pIdgGoQ2iGEEgs=
Subject key identifier: F9:CA:AC:FD:4A:8D:76:05:EE:24:22:86:2A:24:C0:55:DE:87:FF:44
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01974441862818053652163EAD7E1581FF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 08:00:34 +0000
Manifest this update: Fri 06 Jun 2025 08:00:34 +0000
Manifest next update: Sat 07 Jun 2025 08:00:34 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: RDMOEgTJETbFdEw9w4H8HTVXXWEaHt8iPtjFHRNPpbc=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:41:86:28:18:05:36:52:16:3e:ad:7e:15:81:ff:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jun 6 08:00:34 2025 GMT
Not After : Jun 7 08:00:34 2025 GMT
Subject: CN=f9caacfd4a8d7605ee2422862a24c055de87ff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:50:7e:af:e4:c9:27:f1:2a:e5:ce:a7:e2:
66:4a:e0:33:da:b9:3e:b9:40:05:f8:71:e3:07:0a:
87:19:9c:43:4c:aa:ce:0b:a6:8c:f1:b6:01:2f:c1:
95:cc:9c:15:b5:c2:e8:ba:22:ad:0c:c0:53:b2:9a:
7e:32:a8:27:3d:97:83:3f:4b:15:36:75:80:e9:5b:
1b:e5:62:15:f5:c2:27:45:36:9b:4d:6b:13:c7:3d:
16:71:d6:32:bf:78:38:32:ff:d9:bd:73:5d:c4:e9:
1b:8e:ea:3c:64:53:ca:5e:bb:70:b9:27:27:e2:e4:
82:f7:d7:b1:1f:00:cf:32:19:80:da:bb:2b:32:ed:
a7:2b:db:e1:c2:25:e3:e3:63:a5:b2:1a:2f:3e:21:
f9:11:f1:3a:67:cd:b7:c6:08:f9:62:c1:47:88:78:
5c:55:3b:5e:b6:1f:4e:9e:26:d6:05:8d:da:cc:49:
b1:4f:fc:b6:df:90:b2:7a:a3:4a:e3:51:71:b6:2e:
c0:a6:af:b4:d9:ae:6c:e5:f6:8b:be:91:50:94:59:
2e:f8:8f:da:46:91:84:77:97:7d:48:78:77:05:f6:
e3:22:27:03:b2:58:70:9a:da:5d:14:99:dc:4d:c1:
8b:66:0c:eb:1d:35:cd:61:1c:aa:c8:0e:98:94:9d:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:AC:FD:4A:8D:76:05:EE:24:22:86:2A:24:C0:55:DE:87:FF:44
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:24:b1:df:11:b3:0d:6b:5c:bb:f1:8b:e7:56:20:13:fa:
4a:41:52:8e:f8:9b:5c:a0:38:a2:13:de:32:15:c9:4d:52:d9:
eb:78:e4:8e:db:bd:d9:eb:1d:ac:01:16:80:11:a9:a4:ed:0c:
95:3c:6e:eb:0a:54:89:b0:1c:74:9d:6c:8d:82:5d:a3:3c:f4:
18:5a:16:1c:9b:5e:6f:ce:21:e9:d4:b3:68:8d:2d:70:c0:58:
0c:49:9b:e6:28:39:b2:b7:7a:ff:a7:aa:3d:cc:90:cb:4c:69:
22:4a:13:76:7e:ac:3f:49:9a:cb:c4:43:e1:bd:94:98:d2:17:
fd:95:98:a8:f9:c0:92:2e:26:fe:4d:bf:1c:61:7c:a4:f5:d1:
fc:8a:9a:55:60:6a:9b:6f:44:2a:6c:1a:a3:e5:9b:77:68:7e:
85:f4:e3:cb:e5:ba:4b:6b:3c:3a:ef:da:3f:e6:e9:57:a9:24:
fc:ce:41:70:81:cf:72:04:97:3b:7c:ce:4b:fe:a9:3b:f5:03:
89:bf:49:ae:f3:b6:69:95:cb:30:e9:73:07:e8:6c:54:3b:0a:
34:4d:97:9e:75:a3:70:25:fa:5b:c9:45:de:e9:25:5c:75:79:
a9:46:e9:f0:eb:bf:5f:34:f2:f2:e7:3c:d6:e1:2e:c2:9d:93:
62:8d:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:53:00 2025 by rpki-client