Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: J6FoIn2v5D+twqQlFjgXN27zOb6xZg+jUz59rac89RI=
Subject key identifier: 60:98:DC:EE:28:8C:6D:49:4F:CA:DF:70:CA:9C:52:BD:D0:7C:9B:94
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 0197654CDB31EFF60C49F36DB86E88ABEBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 158E
Signing time: Thu 12 Jun 2025 18:00:25 +0000
Manifest this update: Thu 12 Jun 2025 18:00:25 +0000
Manifest next update: Fri 13 Jun 2025 18:00:25 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: wrhbSFiEnXv/KUMF1F2LHIdqh0gyB4Mn3/VQhe+GLYM=)
2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:db:31:ef:f6:0c:49:f3:6d:b8:6e:88:ab:eb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jun 12 18:00:25 2025 GMT
Not After : Jun 13 18:00:25 2025 GMT
Subject: CN=6098dcee288c6d494fcadf70ca9c52bdd07c9b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:8d:33:86:15:24:bc:c0:74:32:42:21:99:
c8:36:bf:8b:3f:8e:e6:f2:ab:01:97:bf:cf:9c:09:
00:e3:81:59:07:50:41:97:48:97:f5:23:cf:f9:a6:
32:f6:0d:a3:bb:f4:d8:41:7a:90:e1:1a:01:db:3f:
27:1f:61:26:63:94:b3:01:e2:5f:49:d9:41:a3:d2:
e9:34:2f:fe:07:55:92:af:d3:4e:b2:0c:c0:ac:90:
41:68:65:fa:7f:6c:33:21:61:61:0a:13:4d:60:10:
be:68:12:d4:d8:04:ab:59:b8:6f:40:17:0c:e7:a0:
7a:25:e6:59:d8:ce:ac:d0:31:0c:77:d5:4d:34:b2:
34:4f:60:1b:4f:2e:9c:7c:fe:a4:c3:62:19:0d:f6:
0c:2f:71:b2:04:52:23:16:9d:c4:13:d1:cc:93:47:
c7:96:70:6f:fa:dc:71:70:73:33:11:51:ef:9b:0b:
c6:38:7b:03:56:05:07:1e:eb:c5:66:ba:17:f2:0a:
f3:63:31:4d:6f:8c:2c:70:19:0d:85:2a:fc:6e:5f:
99:a3:71:8e:bb:41:ed:e9:d0:fe:14:c7:39:63:49:
ce:40:79:ab:51:df:17:17:f5:82:83:9c:6d:46:97:
e6:e9:af:79:a6:ab:b6:63:77:28:8b:c5:de:af:49:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:DC:EE:28:8C:6D:49:4F:CA:DF:70:CA:9C:52:BD:D0:7C:9B:94
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:ff:36:7a:84:d7:57:7b:2c:76:44:8d:92:7a:62:3c:86:
be:cb:3c:82:e0:31:3d:51:79:27:93:3b:42:5b:bd:76:d3:e6:
7d:db:6a:db:3f:8f:9c:1d:a8:0d:19:c9:5d:43:fe:4a:fd:1a:
3e:5b:21:e5:05:5a:8c:16:96:e5:40:6d:56:d5:c2:d6:61:34:
c8:bf:51:03:85:ac:6c:c7:f6:1f:2b:02:54:77:26:29:ee:07:
8a:b5:3d:74:af:3c:01:39:31:db:f4:d0:47:ad:ea:91:4b:94:
26:dd:18:c8:18:2f:ee:c3:14:7d:9f:dd:c5:ad:80:39:17:cb:
0b:62:b1:ed:9e:94:fe:c6:72:24:82:72:33:03:80:e3:3f:e3:
fa:94:c3:81:17:22:25:bc:a2:01:89:be:ce:9d:91:eb:b2:f7:
47:4a:f5:21:8c:a2:94:4d:a7:4d:6a:14:23:40:c5:4f:be:ba:
81:7e:9a:0a:de:d5:9b:bb:a8:10:5e:9b:3c:44:88:08:80:be:
07:38:58:46:68:ed:36:e6:13:5a:e6:36:8c:c6:f3:5c:a9:d9:
d1:be:85:d7:7a:a4:9c:ad:b3:4b:4d:f3:e3:7a:cc:e5:f3:7e:
e6:45:49:de:b9:47:51:35:4a:aa:6a:bb:4f:55:25:42:10:a6:
55:0a:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:46:16 2025 by rpki-client