Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: ALo1RkwwX5yg0h/GKDNGRfRE/Tt6dE6caZRHUvVyJFQ=
Subject key identifier: E0:8A:F3:B2:15:A9:75:78:DE:24:D2:D8:70:2C:DB:64:0B:1B:4F:85
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 0197531054CE14CD75E66AA2BA18228C3883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 05:01:08 +0000
Manifest this update: Mon 09 Jun 2025 05:01:08 +0000
Manifest next update: Tue 10 Jun 2025 05:01:08 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: RNx6ptxee+eErfpvaDEJ+E52qvuoiRgvC8kEUx3KBdw=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:54:ce:14:cd:75:e6:6a:a2:ba:18:22:8c:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jun 9 05:01:08 2025 GMT
Not After : Jun 10 05:01:08 2025 GMT
Subject: CN=e08af3b215a97578de24d2d8702cdb640b1b4f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:fa:c9:c8:de:a1:f5:f0:01:5e:e1:2a:9f:
94:24:b4:bf:8a:03:3f:32:91:e9:6f:b1:f7:b6:1b:
a2:ed:fb:81:98:95:8f:88:0a:b0:76:ee:96:29:28:
ed:68:49:0f:9d:ed:2f:b3:14:30:35:eb:6d:b6:e8:
0d:86:60:81:8b:1d:6a:25:43:bd:c0:3e:80:ee:9c:
df:ef:b6:f0:5b:bf:fa:cc:c7:4f:05:52:34:e7:7f:
ca:4a:65:db:d0:9d:02:28:0c:f5:e5:96:30:14:bc:
bf:b9:89:93:13:5b:74:c3:cf:ae:6a:38:80:89:19:
c5:09:e6:bb:3a:02:e9:c6:fb:0a:2f:df:ea:70:f1:
3e:cd:ec:ad:7f:59:13:f9:b0:93:fc:8a:c5:0c:0e:
7e:58:41:63:9c:5e:be:d8:80:4b:45:da:e5:7c:d2:
df:73:c8:ba:cc:0f:dd:7c:27:28:45:fa:1e:26:2c:
a6:77:a6:46:79:22:f3:49:b7:f0:e2:98:a5:68:d7:
61:cb:8e:dd:66:03:cc:7d:bc:f5:0f:e0:03:62:5e:
69:cc:e2:1a:09:12:d7:0a:ca:3a:69:a5:d9:5f:4c:
d7:2e:3a:3b:51:06:4d:12:f2:df:d8:4d:6b:59:79:
76:c5:1b:02:c0:d1:3d:d1:9d:8a:fe:bc:84:f8:06:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:F3:B2:15:A9:75:78:DE:24:D2:D8:70:2C:DB:64:0B:1B:4F:85
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9c:5e:14:61:6c:8c:79:20:a3:5a:59:bf:44:ff:55:65:e1:
ea:93:46:c4:d9:34:af:55:2d:f0:0f:76:a0:d4:1d:02:d2:c4:
fd:48:22:df:57:49:83:4d:b2:90:07:b2:46:28:ec:2d:7d:7f:
6f:7c:0e:fa:3b:c7:5d:38:b4:10:52:47:56:21:12:d0:ee:26:
c6:f5:37:5a:01:41:28:5e:5b:f9:45:18:d3:e2:55:63:7e:86:
e3:c1:23:1a:a4:79:9d:05:bb:34:7c:fa:4a:40:e9:97:16:c5:
ae:8b:52:5b:0c:4e:09:7f:63:1c:ff:e0:dc:84:50:c7:5d:8b:
f5:a5:93:1d:27:28:81:ae:0f:c6:a1:a8:66:b9:c1:61:a6:52:
30:0d:f4:a0:af:10:a3:c5:cc:8a:8f:8c:d5:33:52:9f:5c:17:
d8:97:fb:14:52:25:20:04:00:51:a0:61:6c:5d:ae:5e:74:e2:
c0:bb:2f:fd:8a:29:56:d0:a7:a3:3e:92:b3:06:71:ac:16:32:
bf:29:ba:ba:b8:cb:7d:de:1a:25:8f:2d:c8:61:a3:38:09:bf:
75:54:da:d2:f8:db:9b:6c:1f:99:ca:07:ca:72:de:cc:fb:86:
98:ec:4d:e2:fc:5a:e5:19:54:d6:88:ae:bf:ef:de:1b:49:32:
53:f1:96:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:32:33 2025 by rpki-client