Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: NfP/X6OXO+oLW3K28OoYjsEXRR13CP5JqNL/rKEPqc8=
Subject key identifier: 39:D8:A9:85:04:A9:88:C0:BA:FE:5F:88:D4:83:B2:05:09:2A:01:53
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 0197481E7277D4CEEAB81772613BB83BB474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 02:00:44 +0000
Manifest this update: Sat 07 Jun 2025 02:00:44 +0000
Manifest next update: Sun 08 Jun 2025 02:00:44 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: gpaUNmT4Mk9+t+bexg0MTw6Y3QS1qrC53+r6//D1GSA=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:72:77:d4:ce:ea:b8:17:72:61:3b:b8:3b:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jun 7 02:00:44 2025 GMT
Not After : Jun 8 02:00:44 2025 GMT
Subject: CN=39d8a98504a988c0bafe5f88d483b205092a0153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:ff:94:74:e3:f1:86:39:00:92:2f:15:6f:
46:9e:48:5d:99:bb:be:d9:1c:f9:8e:d9:4e:8e:2e:
4c:3b:63:73:86:e0:fe:6c:ea:df:dc:45:13:ac:8d:
de:97:4d:f0:d6:47:c8:77:6a:8e:c1:5a:a3:76:aa:
0b:3e:5c:e8:40:93:c2:2c:99:56:7b:76:60:6f:91:
e7:bd:21:be:b4:70:cd:2f:8a:ab:88:6e:19:f7:11:
dc:55:21:e7:06:9f:49:43:57:1d:10:a6:d9:e9:46:
68:2a:37:86:fb:02:01:f0:c3:5f:d7:42:a4:52:9e:
0e:fe:f9:df:87:9c:0e:e7:3e:39:23:ec:40:2a:cf:
fe:ff:ac:7e:92:ac:5c:91:56:a9:70:20:e4:0f:23:
38:f5:6c:4b:ab:b7:3c:90:a7:65:a8:d9:05:7b:28:
ac:9c:e7:75:81:af:c9:f8:b8:ed:b8:a7:97:2f:58:
f0:69:1c:28:a8:b4:ba:09:67:74:4b:50:2b:16:a2:
6d:bf:42:e1:3b:a6:53:15:a8:e5:b0:70:48:b7:77:
f6:61:38:fb:3b:99:c8:65:eb:29:9f:b7:fc:a4:a9:
8d:ed:46:d9:84:04:69:fe:09:2d:5c:39:6d:9f:56:
81:e2:8a:53:78:25:5a:e1:41:8a:1c:d3:f5:e2:b9:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:A9:85:04:A9:88:C0:BA:FE:5F:88:D4:83:B2:05:09:2A:01:53
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e4:a4:6e:73:40:e3:5d:be:36:7d:f7:bc:cc:68:57:03:19:
69:13:04:f0:97:0f:f7:1b:54:0d:42:78:16:dc:3d:2a:99:d2:
8b:97:e2:c8:25:2b:94:7f:c1:07:3c:18:b5:92:f4:74:19:5d:
65:d9:9d:bb:1f:80:72:85:dc:9c:49:85:44:f0:a6:7d:af:54:
1c:1e:e8:9a:1c:91:a3:e0:50:fd:04:2a:2b:04:68:4d:68:5f:
48:73:08:42:27:1c:72:66:5e:bc:37:8f:35:e0:71:74:f9:f9:
52:99:5b:40:88:8c:9b:01:94:0c:c4:6a:96:6e:7c:e7:80:d2:
65:73:e6:c2:66:76:88:5b:79:2e:bb:a9:74:cc:33:19:d7:9b:
85:71:77:36:40:72:1c:4f:19:ed:c1:e3:09:42:4e:9b:c6:43:
6e:13:da:9a:c1:2c:4f:37:88:d2:c5:d8:84:4f:fa:fc:71:9d:
00:6d:25:55:d0:67:9d:6a:8c:06:fd:51:d1:53:09:09:09:38:
6e:bd:e0:c0:dd:4b:78:07:1b:2a:eb:02:e5:7d:4f:13:0b:1c:
07:2f:06:78:bb:b7:e6:3c:dc:f9:81:bf:f4:93:6b:5b:9f:2e:
30:80:36:3b:b3:46:d3:8f:7d:fe:ca:ab:c2:2a:c5:f8:78:3f:
db:7b:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:41 2025 by rpki-client