Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: vNGSbU2GEX6aCnunmhlzfNtC24x5XM7CUx+MC/Nb7l0=
Subject key identifier: 19:12:29:25:FB:09:A5:81:BC:50:80:B9:9F:25:9E:D7:39:2A:EC:1B
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019758DB3FAF016E865D2FE0EA6BD4055679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 08:00:53 +0000
Manifest this update: Tue 10 Jun 2025 08:00:53 +0000
Manifest next update: Wed 11 Jun 2025 08:00:53 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: VcB8i0PSnHPsbkjrdFQnf2sF6gtU0U6JUUBAnuzqbd0=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:3f:af:01:6e:86:5d:2f:e0:ea:6b:d4:05:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jun 10 08:00:53 2025 GMT
Not After : Jun 11 08:00:53 2025 GMT
Subject: CN=19122925fb09a581bc5080b99f259ed7392aec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:a1:aa:ec:5e:5a:3e:5d:87:8f:21:9c:0f:
86:81:31:3b:1f:c5:76:6e:7c:e5:a2:24:f0:c6:81:
88:f2:c5:e7:9b:1d:6d:ca:b3:08:96:b2:13:7e:d2:
ab:72:e2:f7:be:e6:57:ba:71:b7:db:fd:17:41:b1:
01:27:64:19:2f:fa:ba:ac:6a:99:d7:93:58:86:3e:
9c:9d:7b:d2:6a:67:af:99:bc:e7:22:0f:fb:49:d9:
e7:ba:48:27:87:5a:16:03:ed:64:87:1e:6f:77:c1:
e9:8d:4c:19:44:82:14:96:cd:3d:2f:86:5a:05:7e:
f0:df:fa:84:59:c9:22:c4:94:32:a7:1c:09:aa:84:
b5:68:53:1d:f8:c5:e3:e0:16:f9:1d:f8:44:f6:ab:
c9:69:7f:e7:36:a3:be:06:59:a5:1a:eb:53:29:1b:
e6:48:3d:49:fd:9c:ec:63:fe:74:00:0e:c0:29:de:
2b:ba:e9:d2:b8:59:40:9b:8d:4c:6d:7e:43:88:4f:
d3:77:18:e1:b7:f1:f4:7a:6c:fa:c9:a0:96:bb:b1:
88:c5:01:41:3a:76:39:d8:aa:db:b0:1b:3a:7a:24:
6f:95:8a:66:c2:bb:0d:2b:5f:d8:3d:1c:ff:e9:b9:
e6:c2:d5:31:42:69:c1:05:64:e2:4e:f7:97:2e:30:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:29:25:FB:09:A5:81:BC:50:80:B9:9F:25:9E:D7:39:2A:EC:1B
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:7b:ca:f6:d7:36:28:49:04:af:eb:07:fb:27:00:58:16:44:
64:84:83:12:a9:bf:2d:62:94:02:10:4e:0d:11:ac:21:f2:60:
56:88:f6:be:be:57:a5:3f:11:81:f2:76:41:70:a3:ef:4f:aa:
26:62:24:93:47:74:9d:a3:38:9e:55:7e:80:38:3b:f4:b3:28:
de:8c:01:c5:72:ae:88:e2:2d:05:75:8e:30:22:b5:f4:02:87:
78:b1:ff:51:e7:63:7b:13:9d:52:bd:58:ce:54:62:3e:78:74:
7b:b2:c8:87:b7:76:5e:43:18:8f:64:bc:d4:8d:ce:19:b5:27:
88:26:7f:be:36:d9:cc:53:61:0e:c2:33:83:eb:b0:34:b7:b4:
80:d8:34:77:82:4d:10:e0:d0:a3:30:0e:68:78:86:78:ff:36:
6f:ef:52:aa:4d:78:2f:89:d2:61:fe:71:6e:78:6d:7e:a3:86:
3e:c6:c9:ae:3a:e2:26:2d:43:36:f8:d5:d0:f2:e2:c9:0a:3f:
8e:82:7a:95:5e:99:4a:fa:c7:47:f8:07:25:d2:38:ca:fc:5e:
cd:85:7b:da:45:b0:20:25:16:af:27:65:3c:a9:f1:7b:52:04:
ec:36:c0:89:c5:20:06:0d:40:50:b1:09:0f:6f:84:62:f7:ec:
d1:fd:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:08:03 2025 by rpki-client