Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: 6UgcpAPN6T5Bv1mqceOt0oWE+hSCdHB/cpnelvU/KZA=
Subject key identifier: F6:37:30:DB:A8:D8:16:99:11:50:CE:1E:5A:93:B0:48:34:69:66:B2
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019748F9D663AED9918FFD4F74F378BC2CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 0528
Signing time: Sat 07 Jun 2025 06:00:22 +0000
Manifest this update: Sat 07 Jun 2025 06:00:22 +0000
Manifest next update: Sun 08 Jun 2025 06:00:22 +0000
Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: VhesajnzYBsul1Zk6p639ZJf5U64CqCn2V2qMMr+ikc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:d6:63:ae:d9:91:8f:fd:4f:74:f3:78:bc:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Jun 7 06:00:22 2025 GMT
Not After : Jun 8 06:00:22 2025 GMT
Subject: CN=f63730dba8d816991150ce1e5a93b048346966b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:91:99:27:bc:30:65:c2:6b:2a:ca:d7:a5:
ca:04:27:e7:be:20:dc:e3:07:7f:0b:53:13:c0:f1:
59:5e:38:27:fb:95:ad:96:4f:c3:3e:cc:46:ca:66:
56:80:e0:43:2e:e3:b8:c5:3b:98:42:91:81:b6:28:
35:e9:ca:85:2b:2c:2a:06:3b:23:d6:9e:62:ea:77:
c6:bf:b1:5a:e2:e4:6d:9b:2a:2c:24:2a:e4:4c:b5:
c0:da:74:fe:91:15:f6:5f:86:22:3c:10:f3:1a:8a:
45:b4:cc:9a:0a:61:1b:81:21:c1:43:ce:9b:1d:41:
13:23:9d:45:34:69:5e:d1:ef:30:dc:37:86:ab:2c:
3d:55:3d:94:5c:78:b9:af:2b:ab:f2:cd:30:b9:0f:
6c:05:34:ae:03:f3:2c:b1:b2:27:54:84:6e:5f:15:
66:de:4b:ea:f6:7d:c1:e8:ce:34:e0:50:6c:ad:57:
31:ce:67:1a:97:f0:67:67:73:47:87:91:ae:c5:6c:
9e:b6:0b:69:3e:a4:60:1d:b3:d9:af:b3:6e:fd:f4:
79:0c:30:c4:06:39:56:d2:6b:cd:1c:d3:b8:d5:f7:
e1:5d:61:ee:2f:67:1a:a1:32:57:43:87:6c:5c:3f:
6e:b4:be:32:81:68:43:c4:b7:44:dd:88:5c:0d:b8:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:30:DB:A8:D8:16:99:11:50:CE:1E:5A:93:B0:48:34:69:66:B2
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:b9:eb:41:f9:3c:d1:de:fd:20:56:ea:79:8d:7e:1b:97:
24:d9:19:45:e4:6d:5b:e8:72:8c:b6:40:e4:f9:de:0f:97:fe:
1b:83:36:a6:db:e0:32:32:5f:e1:b7:c5:d5:77:d5:90:d6:0d:
1a:1b:00:9f:e5:b0:e8:e7:45:98:59:3a:d3:39:bb:eb:c7:02:
69:64:6c:e5:55:17:6c:e0:a4:42:ba:74:c8:96:a7:d8:2b:80:
fe:9c:40:31:c9:64:8d:07:4d:3d:d6:6e:67:44:be:4e:4d:0c:
69:c6:5f:48:8e:98:a5:c3:3c:1a:bf:52:f7:f1:ed:94:5a:4f:
f2:3e:73:cf:a1:05:6b:7d:38:99:79:3d:0b:2d:cb:56:eb:69:
58:c9:89:f4:7c:0b:c4:c9:94:37:0e:9f:35:d3:a6:b3:e9:6d:
dc:56:75:ed:08:8f:97:fc:e0:1c:f7:94:36:3e:0f:79:08:03:
df:75:54:a8:0c:ce:c3:02:ac:fe:4c:b5:7b:8f:82:39:15:fa:
55:83:0c:c5:31:2e:42:93:cc:ac:04:4c:2c:95:45:e4:b5:8c:
29:17:3d:7a:fc:77:ba:10:9a:99:19:41:15:43:d6:cd:db:7a:
24:05:fa:b5:99:e4:ce:84:e9:f2:c0:96:5b:45:8f:b6:52:ec:
42:e6:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:28 2025 by rpki-client