Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: BZvR108GQhv9Ff9gHy6na3fs8xQ03fQrmuxyRW5KR9Q=
Subject key identifier: D0:DC:DA:CE:BA:6D:63:BE:A9:40:04:AB:B3:66:E7:AC:1C:1D:FA:53
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 01974A0CC60C01908F0DAC03C9DF1B5F8BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 127F
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: rTl2WO9Mu+gJrLR4+dBvKI3Mlx2AFo6xtj3rgseJ8OA=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c6:0c:01:90:8f:0d:ac:03:c9:df:1b:5f:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=d0dcdaceba6d63bea94004abb366e7ac1c1dfa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:d6:05:06:4b:87:f9:d1:c3:fd:01:e1:57:
e9:80:e4:ad:bf:bc:5e:1a:22:fc:a1:e6:bf:80:af:
3b:86:42:04:4a:b5:98:04:8e:7f:5a:bc:68:9b:8b:
2b:7b:df:2c:6f:20:fc:00:cf:dc:74:47:55:eb:00:
28:db:35:af:b7:e5:ee:f8:71:0f:d0:b0:41:91:1b:
7f:55:bd:75:bf:a2:c1:e6:30:01:c4:b3:d9:4e:65:
92:ee:95:9e:2b:b2:94:0d:82:63:ac:c6:97:3d:f7:
7a:c8:f8:e1:6c:4d:75:d5:6f:e3:f7:0b:97:cb:db:
92:1a:6e:ac:76:84:0e:ee:c9:48:19:c5:80:97:33:
79:2a:fc:d4:5d:18:fa:13:0b:2e:60:c4:ce:53:cb:
90:0a:cc:21:3d:88:ec:a3:ae:30:08:67:b5:54:b1:
8b:ef:19:48:5e:81:a7:7e:26:78:26:e7:18:fb:60:
04:b6:69:80:fd:18:a4:4d:d6:65:f5:5b:ce:62:ad:
43:24:c4:ad:30:6e:6b:ed:85:61:17:b6:f8:a5:a4:
ea:6b:ab:8d:4a:46:28:e3:3b:0d:72:56:d8:67:2e:
7c:62:26:38:dd:2e:f2:17:d6:38:7b:6f:51:95:02:
23:34:8b:f6:00:a2:14:69:dd:95:d2:8f:60:3b:33:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:DA:CE:BA:6D:63:BE:A9:40:04:AB:B3:66:E7:AC:1C:1D:FA:53
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:2c:3c:09:d9:39:c8:f2:19:ac:a4:68:8d:36:7e:d1:86:
82:16:89:22:9a:97:bc:83:eb:fe:52:c3:05:15:33:39:f6:2d:
d6:ab:b4:99:8c:f9:37:0d:3a:43:2b:c8:4a:8d:cc:3e:3d:b6:
b9:bb:97:5d:e7:ae:bc:5a:ee:d1:b7:06:f5:a1:6a:7e:9f:7f:
44:68:15:dd:7b:71:bc:df:1b:40:99:b4:41:53:dc:22:c8:76:
54:c2:30:cf:c1:51:9b:70:a5:8a:31:32:b9:f3:3a:d7:b9:e1:
fd:43:d1:82:fe:ab:39:4a:39:66:47:6d:a2:b5:f8:ee:88:7b:
ca:6f:5e:e8:7b:34:b5:75:a5:36:0c:64:06:89:95:d8:7f:33:
d4:68:1c:98:81:8c:dd:24:af:6e:d1:99:23:f4:c8:f6:5e:7a:
27:87:f6:f0:9c:db:eb:d5:22:11:ac:fe:6b:dc:45:90:52:bf:
12:76:85:8f:84:ba:c9:60:3a:76:b2:11:22:52:48:3b:2f:1b:
f1:ec:c9:2c:e7:26:6b:d6:78:30:7b:5d:a6:97:4a:84:a8:41:
dd:29:70:ea:45:3c:35:ff:b2:ed:0b:cf:3a:b2:b0:ee:e6:aa:
d1:b2:c9:60:c3:aa:74:88:e5:63:40:12:17:8d:c0:7b:bc:29:
1b:99:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:10 2025 by rpki-client