Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: E2im/ZDX3TnYBzpU7SKdNtuO0ghaZ2vXKieSIbuJX4I=
Subject key identifier: 79:70:03:22:69:1B:72:FA:40:1B:6F:74:1B:2A:CC:83:C5:4B:11:AA
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01974B56A852E28DAF042DE20AAF8081E7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 17:00:59 +0000
Manifest this update: Sat 07 Jun 2025 17:00:59 +0000
Manifest next update: Sun 08 Jun 2025 17:00:59 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: 5ul5cKBgtGfJ5jquw9zVHx8MIzEgmhtiCY5jJGFspNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:a8:52:e2:8d:af:04:2d:e2:0a:af:80:81:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jun 7 17:00:59 2025 GMT
Not After : Jun 8 17:00:59 2025 GMT
Subject: CN=79700322691b72fa401b6f741b2acc83c54b11aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:41:02:44:69:86:31:e6:a5:88:94:51:df:
fe:74:52:e0:73:2b:de:26:70:bb:60:43:81:f8:08:
e3:d8:32:b1:c0:cd:cc:cf:7a:6c:24:d7:53:6b:2f:
22:e7:de:d2:44:5a:42:e8:19:03:ee:d1:f4:47:f3:
93:86:91:0f:ef:51:b1:ed:7f:73:35:c0:35:01:0f:
68:53:15:e3:13:b6:24:b5:a5:30:cb:a5:0d:8c:2d:
af:0d:c3:d2:23:5d:27:f2:1b:4e:de:78:d8:e6:b5:
06:34:76:c6:be:dd:c5:b9:d2:c9:45:0d:00:24:c1:
a7:0f:4a:32:0d:0e:53:09:41:08:1e:14:c7:e7:43:
94:3d:36:ca:bc:e1:b7:e9:cd:84:bf:28:b6:27:7e:
28:a8:e0:e8:06:9b:70:be:28:3f:3d:b0:98:00:68:
dc:59:16:31:a3:66:fa:84:6e:00:d7:76:f0:a8:1c:
2b:eb:82:7c:24:6e:00:b5:e0:a2:f0:01:3c:f2:5e:
a3:35:cd:7b:c4:74:f5:23:4c:4d:96:10:d7:2d:69:
77:15:3a:77:5b:d5:1d:07:da:67:e3:b7:3a:c1:42:
d2:be:5b:29:cd:11:ca:ea:a8:a8:5c:c1:60:89:8f:
7c:07:a5:8d:06:51:80:9e:db:52:2b:53:50:1c:04:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:03:22:69:1B:72:FA:40:1B:6F:74:1B:2A:CC:83:C5:4B:11:AA
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:67:3f:03:7e:93:14:6d:26:9d:e8:f9:ae:0a:d6:a8:81:
05:4f:4b:f3:0b:8f:c2:fb:d3:8b:80:09:bf:cf:fd:6d:42:ff:
2a:10:00:8a:b5:f8:2f:bc:94:cf:54:1b:cf:54:38:19:94:5e:
12:5c:e9:8b:a8:e5:36:80:88:24:04:40:b7:64:5b:68:09:3f:
a8:01:0f:f9:47:27:2a:d2:59:a6:74:e4:f5:2d:38:0f:1b:c8:
d4:a8:32:53:6a:e8:18:b2:31:ba:e9:0f:9c:ba:eb:8a:77:20:
01:fe:b7:f5:c0:e0:53:9e:11:53:7c:16:ea:24:83:c6:2e:a6:
68:7c:40:50:e7:e2:91:bf:dd:ec:31:b7:06:97:f5:02:cd:c6:
88:67:4f:3c:85:21:23:42:9f:20:72:1d:ee:1d:f7:3a:9d:eb:
3a:8a:e2:4d:df:86:08:21:99:4a:79:e6:2c:ad:e0:12:dd:d3:
2c:c6:63:a4:ff:56:73:b4:9f:eb:86:3a:03:f2:1c:1c:fa:ec:
75:42:7c:c5:eb:16:9b:a9:bb:9f:9f:1e:7f:3d:db:2f:56:95:
7b:a0:65:b9:96:70:69:12:e0:d7:de:f5:c7:4a:fe:cb:e1:6e:
a7:33:5d:46:cc:b2:36:e6:93:0a:e1:82:1a:77:8e:84:71:e0:
3f:12:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:35 2025 by rpki-client