Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: fzxcO1Jpk5GowslDpyEnpvK6stDWp8bLdRpdsQkoCys=
Subject key identifier: 0E:20:BF:41:D4:AB:43:DC:94:A8:08:93:68:AB:E7:E9:78:EC:96:95
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01974AE88715C79D1B87048C90AA17E1703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0E8B
Signing time: Sat 07 Jun 2025 15:00:42 +0000
Manifest this update: Sat 07 Jun 2025 15:00:42 +0000
Manifest next update: Sun 08 Jun 2025 15:00:42 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: gsiFNwwZNwBb8Di0VlrakOPcpx5aKHGdkFKxez+gjQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:87:15:c7:9d:1b:87:04:8c:90:aa:17:e1:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jun 7 15:00:42 2025 GMT
Not After : Jun 8 15:00:42 2025 GMT
Subject: CN=0e20bf41d4ab43dc94a8089368abe7e978ec9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:b6:e5:1b:70:9b:07:4a:9a:9a:ab:59:2a:
3c:25:da:24:51:df:b8:3e:3a:30:2e:e4:24:93:12:
bb:67:96:f4:51:86:1b:5e:06:7c:81:22:cb:e7:c3:
9d:8e:01:d4:13:d3:34:9d:64:c1:8c:29:ac:c6:72:
b2:e7:f5:a0:82:41:2c:ff:8f:b6:71:55:16:40:68:
3a:2c:a9:3d:e2:37:ff:71:17:ff:81:f8:9d:b6:2a:
61:9c:8d:1c:d8:17:83:9e:91:e2:d9:f2:6c:fc:17:
29:34:12:40:2d:81:f4:77:9d:76:08:e8:c7:b6:15:
04:a3:fb:11:31:5b:a2:64:f0:ab:1c:44:08:e7:75:
9c:35:c8:d4:34:fb:73:8c:37:da:8f:64:02:ef:25:
e5:3c:3c:e9:77:f8:ae:a9:fe:e0:db:a2:25:7b:46:
55:ea:f2:30:b9:6a:41:b6:c7:c8:ee:f4:30:fa:26:
da:36:7d:25:27:94:12:eb:cd:52:40:33:40:e8:94:
87:9e:91:3c:18:fe:cd:86:bc:dd:5d:db:b1:6d:8b:
b8:6f:3b:21:76:38:53:05:cf:4b:ea:8b:7a:d4:7b:
3c:ba:c2:95:04:00:29:3c:39:fb:17:18:55:9d:b8:
be:64:a9:35:f2:84:94:f2:82:04:5c:c4:13:9b:8a:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:BF:41:D4:AB:43:DC:94:A8:08:93:68:AB:E7:E9:78:EC:96:95
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:df:79:5d:78:58:e8:7c:0c:e9:d3:c6:93:ce:c6:60:e5:a9:
80:37:fd:4e:49:25:f0:97:5a:81:63:37:30:d0:80:7e:21:30:
cf:3e:66:0b:10:84:a0:0e:c1:eb:79:fe:44:73:48:08:22:3e:
9e:98:ac:1c:04:49:46:be:c8:c8:a9:7d:34:1c:15:df:93:a0:
6e:50:e0:b6:88:f6:63:87:12:51:0a:6a:a5:5f:5b:60:33:03:
9a:f2:78:68:7c:6e:e4:85:27:bd:a4:b7:95:15:47:1d:31:8f:
8b:3a:c6:68:b6:b2:93:d8:b0:46:0e:8e:d2:6e:b2:31:7f:c4:
03:d1:99:31:d2:e7:f5:23:a8:d1:15:05:9a:7d:ea:81:a1:1e:
93:70:30:2a:c0:a1:c5:76:eb:29:42:f8:24:65:cc:69:64:4c:
5e:80:fa:5f:85:e4:4c:c9:97:cb:6c:fe:7c:41:ee:bb:55:08:
64:a9:56:be:d9:95:a6:dc:80:33:06:f9:69:5f:fe:4d:96:b6:
19:cd:29:0e:eb:5e:e1:05:cc:51:7d:37:37:9d:f2:69:2f:7c:
66:b1:16:6b:9f:e8:54:de:dc:70:71:a9:85:1d:ee:26:ed:9e:
4d:db:b4:23:c9:44:78:18:c8:42:e6:7a:d2:db:b6:df:cf:ee:
a6:78:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:27 2025 by rpki-client