Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: TabqYh1SeDoEgsuwMFbYTGqr2Ah32OlHVWHIXGraQhE=
Subject key identifier: 54:6F:39:F9:12:32:F9:34:43:AE:C5:C7:24:33:21:93:C9:BD:01:35
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019745F93C0F7B6508DB36D0268CB5AE287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 16:00:51 +0000
Manifest this update: Fri 06 Jun 2025 16:00:51 +0000
Manifest next update: Sat 07 Jun 2025 16:00:51 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: 3aDn0zqti540SjgbtHb9p/tHvDVKm1Yy5p6gtsCpj0M=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:3c:0f:7b:65:08:db:36:d0:26:8c:b5:ae:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Jun 6 16:00:51 2025 GMT
Not After : Jun 7 16:00:51 2025 GMT
Subject: CN=546f39f91232f93443aec5c724332193c9bd0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:6f:01:27:ce:ed:f6:0e:aa:53:ae:02:2c:
39:ce:b6:bf:92:24:5d:64:9f:71:b7:47:e6:35:90:
79:46:c3:fd:d6:2f:61:b6:92:7f:77:74:30:49:27:
12:26:92:f9:17:fe:dd:39:24:d0:d2:82:a3:e0:99:
c0:ad:bd:40:fa:33:f8:fa:73:6d:48:78:86:c5:79:
4e:66:e2:ed:81:24:7c:a5:fc:31:4e:fe:63:4d:60:
07:8c:42:ab:f6:ea:23:68:b3:b0:80:b9:98:14:2c:
02:a3:75:eb:45:6f:72:7a:cf:25:e8:66:1f:69:3d:
d7:7d:c5:62:bd:92:3c:46:cf:fb:e9:e8:ab:3b:89:
3f:6c:3e:aa:ac:63:1c:d6:87:cc:59:da:c1:7a:5e:
38:7e:88:90:8e:6d:1b:6a:15:cc:bd:a5:6a:58:d3:
20:c1:4c:8e:06:c5:8b:7e:3b:7d:98:f9:42:3f:17:
a6:3a:ef:fb:28:30:bd:78:46:7e:4b:65:d6:b6:03:
48:a7:55:fa:23:78:d7:dc:a4:7f:aa:67:f0:bd:c0:
e4:31:76:a0:a5:43:a1:80:ca:90:e8:69:56:5e:89:
5b:48:8e:95:67:06:35:de:2b:78:4d:ec:6e:00:68:
08:3c:54:ac:36:82:1c:97:81:6c:31:33:2c:99:02:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6F:39:F9:12:32:F9:34:43:AE:C5:C7:24:33:21:93:C9:BD:01:35
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:98:06:4e:4c:6b:70:99:4c:b8:d3:c5:db:1f:3a:c1:f5:
3b:41:9a:70:19:62:30:fe:4b:e7:6b:6c:b5:c4:42:39:fb:40:
42:54:a9:37:0e:bf:5a:d6:6d:51:4a:e5:75:ee:fe:e9:d3:37:
02:b8:f5:d9:cc:c9:de:cd:d4:de:30:3b:39:fa:81:e7:b8:a2:
21:4e:c2:9d:99:19:32:96:98:2e:d1:d0:3d:c3:5c:9b:2a:5a:
18:c5:b2:10:f6:9e:87:78:ef:92:e3:8a:10:5d:67:1d:ea:15:
f2:5b:f8:ff:b2:d9:80:7b:6b:a0:ea:57:33:a4:62:02:ae:08:
d5:e4:dd:5c:5c:ce:6d:c0:5e:ae:ee:d3:07:fd:56:65:99:b7:
a8:e4:81:96:38:27:40:ab:4e:58:5e:ed:fb:e1:e0:4c:df:4a:
a8:ae:b8:7b:0e:81:ce:eb:1a:38:92:29:30:66:7a:9e:81:6b:
a5:28:de:7f:21:06:0c:c1:64:46:49:69:71:2a:a2:93:b6:60:
d7:f7:bc:60:f5:35:06:d9:6b:79:3a:d7:dc:96:38:df:cf:ea:
1c:81:cf:f7:84:dc:26:28:44:9c:59:90:d0:75:56:9a:59:5d:
fd:ac:a2:76:7a:58:9c:dd:c7:ee:9e:b1:15:66:de:27:bc:6d:
5c:56:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:11 2025 by rpki-client