Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: ikpvVSdNJqyObTiwTddXA/Pk1kJwDkv4djIJZe7nIZ4=
Subject key identifier: F7:E8:CB:1A:15:80:6E:64:A0:DF:D1:CA:D9:0A:CE:E6:3D:21:E5:A7
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 01974A437CA3397DBACC941DC2003D8882E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 10EA
Signing time: Sat 07 Jun 2025 12:00:26 +0000
Manifest this update: Sat 07 Jun 2025 12:00:26 +0000
Manifest next update: Sun 08 Jun 2025 12:00:26 +0000
Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: Rwq/0dqnoC6/YbIHTVSDH9hfNMYYssp1/NIZrcndNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:7c:a3:39:7d:ba:cc:94:1d:c2:00:3d:88:82:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Jun 7 12:00:26 2025 GMT
Not After : Jun 8 12:00:26 2025 GMT
Subject: CN=f7e8cb1a15806e64a0dfd1cad90acee63d21e5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:67:84:dd:a0:65:5d:65:66:eb:c8:a6:42:
c5:67:73:1f:f9:a1:ab:be:69:db:33:48:df:9f:60:
44:e4:6f:5d:54:a1:1f:f2:05:1b:42:49:08:77:34:
b1:43:2a:4b:2b:1d:1a:42:70:97:91:8b:6e:f5:87:
e6:31:6f:d5:5b:a4:1f:9b:6d:08:5b:dd:0e:2d:13:
f3:e8:03:93:64:97:5a:50:8a:65:dc:af:c3:45:53:
14:17:e5:01:43:70:a4:49:bc:7c:7d:3c:93:25:0b:
f9:52:3f:7e:c4:18:aa:4b:e9:79:c8:28:48:a2:fd:
3a:56:aa:fa:be:e9:65:93:1d:91:76:a8:98:89:3f:
2c:fe:95:0e:14:ea:15:5f:a7:46:2f:98:70:94:94:
db:7f:de:6a:fd:ab:f0:ab:1c:31:e4:68:3e:71:2c:
4d:3b:02:64:48:1d:01:4d:ec:25:96:42:da:a6:4d:
d9:b4:93:ad:ac:c3:e9:d7:34:60:82:3f:bc:b6:94:
ce:ed:39:4c:6d:d8:ad:14:a0:d3:67:1b:50:84:f6:
d9:44:62:54:d3:35:15:be:4b:16:92:9b:bb:fa:34:
6d:27:a8:ae:4b:1b:ef:2f:79:51:f6:e9:e2:0e:4c:
a1:94:07:af:a0:d1:b5:af:dd:cd:70:ea:8b:ad:85:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:CB:1A:15:80:6E:64:A0:DF:D1:CA:D9:0A:CE:E6:3D:21:E5:A7
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c3:1e:6d:19:c6:97:75:a9:eb:2a:6a:c9:27:32:a4:a0:bb:
0e:d8:3b:d6:f2:36:df:ee:60:3d:47:58:aa:19:64:27:83:1d:
2a:55:81:48:22:61:f7:c4:09:82:db:e8:ec:53:e6:61:36:20:
3d:6b:14:8a:04:5e:e1:4d:55:ee:ef:bc:22:aa:6c:8c:40:a1:
5d:ca:fd:ec:c5:1e:cb:15:11:7f:f7:22:9a:e6:a6:ed:2a:72:
c0:96:7f:48:8f:21:60:fb:c0:b6:99:1d:03:ef:0b:6d:43:cf:
2f:af:ce:4d:77:d6:3b:82:a5:2d:ac:35:e5:5e:f5:4a:42:4b:
48:eb:f1:0d:80:be:33:ed:bf:02:23:e5:48:3c:95:35:47:37:
9d:fd:c3:e4:a6:69:09:5c:b4:ed:b7:b0:a6:92:33:c0:12:e8:
25:42:71:05:d4:bc:b3:79:3f:94:23:b0:32:90:8c:1a:e3:4e:
a6:d5:34:64:1b:99:7e:a2:5f:46:ea:e9:d9:d4:40:eb:c1:99:
29:ac:f7:a2:c8:a8:96:12:c8:91:27:4c:da:68:10:89:5d:6d:
3b:2a:f6:61:a4:ba:3c:c0:00:e3:a3:bf:5a:09:bc:a6:86:e7:
31:99:6d:fc:43:92:52:4e:9a:2d:54:41:e9:f2:74:91:f7:a9:
31:06:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:15 2025 by rpki-client