Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: lQC0n9RtJ0r8N46FT0bve68vnn6qXNjg4LxtCNIWuo4=
Subject key identifier: 14:EB:5F:A6:9B:51:AF:B3:3D:70:26:16:E2:7D:1C:73:2B:A1:F4:9C
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 01974A0CF10DBDAB61276F2D04A18D62B417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 151B
Signing time: Sat 07 Jun 2025 11:00:51 +0000
Manifest this update: Sat 07 Jun 2025 11:00:51 +0000
Manifest next update: Sun 08 Jun 2025 11:00:51 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: CEgwn7lFD9GeR3MoY9+nApzPI9NQIMezmnf9VesvsWU=)
2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f1:0d:bd:ab:61:27:6f:2d:04:a1:8d:62:b4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jun 7 11:00:51 2025 GMT
Not After : Jun 8 11:00:51 2025 GMT
Subject: CN=14eb5fa69b51afb33d702616e27d1c732ba1f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:fb:65:5d:00:e4:8d:73:d0:84:2b:d1:c3:
ba:83:4b:94:9d:3f:83:97:25:23:7b:dc:21:7c:ba:
38:1e:6b:62:51:bd:74:fa:df:d1:4b:56:9c:22:49:
0f:fe:3f:34:fe:09:03:a5:48:17:74:41:96:f2:b8:
50:ed:f0:19:45:a5:d0:b7:b9:cd:02:61:c1:d3:e8:
e2:69:e6:ac:b7:a8:c1:a6:42:d0:71:50:34:96:41:
cd:c3:4c:1c:ce:4c:19:4c:57:9a:f7:23:6d:43:d4:
89:4a:09:64:63:43:7d:88:14:05:f9:bd:17:6c:25:
14:1c:9c:27:b1:f2:4e:f2:72:5e:08:a0:fa:b3:2a:
42:36:ed:6d:82:bc:17:5d:ad:b7:8c:56:b1:54:18:
2b:10:0b:c0:a2:62:3d:59:fa:ae:42:1c:93:bc:5b:
5d:83:72:c7:7f:a5:d1:24:56:a8:2e:a7:52:e5:f3:
5a:5c:3b:f4:12:63:19:07:5b:ac:70:c5:70:4f:37:
bd:9d:e4:b4:54:de:36:54:bd:f8:55:43:33:19:19:
8f:ff:0c:ad:53:6b:c6:f9:06:d8:6d:81:cb:e6:7f:
e6:d2:bc:e6:94:dc:ae:b8:b9:f7:12:95:83:cf:d3:
c6:99:01:86:3b:71:99:a7:c6:63:58:f0:1f:68:1f:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:5F:A6:9B:51:AF:B3:3D:70:26:16:E2:7D:1C:73:2B:A1:F4:9C
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:24:43:39:62:01:17:33:2f:f3:49:4b:0f:1d:1b:82:9e:
40:58:f1:2c:48:d2:1b:43:1b:10:49:92:70:f8:54:a9:c2:c7:
41:39:11:11:6c:2f:41:a2:89:16:2f:58:f8:19:5a:ac:59:3c:
d3:5c:3d:50:58:63:4a:49:7c:6d:75:e0:15:73:7e:f3:fe:b1:
dd:bc:79:e5:5a:b6:2e:a0:dd:65:a3:f9:eb:a0:0d:50:9c:cf:
5f:a5:a7:4b:fe:73:f4:0b:64:47:52:fc:10:8a:60:96:8f:8a:
cd:0c:dc:12:b2:13:71:a9:2a:a8:d6:eb:7b:d6:98:d7:e0:e7:
eb:23:57:3e:61:b7:4d:4d:c4:74:21:1f:a4:65:b8:7b:9e:a0:
73:44:e9:46:dc:db:f6:05:f8:3d:30:d0:ef:08:cc:33:dd:35:
b0:04:fc:c2:14:4e:c0:12:6e:64:98:63:60:e6:f8:71:fc:85:
fd:e7:17:ed:9e:f1:17:8a:2a:97:76:59:90:8f:4b:d5:4b:a8:
32:9f:c4:16:68:e7:91:cc:22:2c:44:42:f1:0b:97:b7:d4:65:
3d:8b:49:fd:3c:d3:6e:2b:d9:10:91:3a:ab:74:2c:25:6f:0b:
d7:e7:3e:1a:f2:d6:af:9d:9c:f2:1a:aa:1d:27:91:44:7e:39:
7d:6e:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:24 2025 by rpki-client