Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: iHVk9Dxe+L8UN5bkbh5fGdVLnJYtiiFVBdC97NwHORo=
Subject key identifier: 28:3A:FA:6A:1C:45:68:F5:18:B9:99:1E:D4:47:11:15:FE:44:C7:B8
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019748FA59506FE431EC53A8E067E40F37FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 06:00:55 +0000
Manifest this update: Sat 07 Jun 2025 06:00:55 +0000
Manifest next update: Sun 08 Jun 2025 06:00:55 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: UbWCHHgaK+JYqsDbLo3yOZwRMVtExlSGCNs2aD8cBnQ=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:59:50:6f:e4:31:ec:53:a8:e0:67:e4:0f:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jun 7 06:00:55 2025 GMT
Not After : Jun 8 06:00:55 2025 GMT
Subject: CN=283afa6a1c4568f518b9991ed4471115fe44c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:27:7c:fb:5d:5c:db:29:2e:63:e2:5b:0f:
38:41:93:78:f1:11:d5:2e:b9:5a:2a:e0:59:4c:5b:
0f:8b:ba:ae:90:45:bd:2d:cd:39:ec:2b:ca:1a:3d:
b0:db:41:ea:a8:a2:a4:1a:c4:e7:ce:0b:f0:2d:fe:
95:cf:94:96:7c:a5:d1:39:8b:c5:c6:60:a6:fa:11:
ca:30:d5:55:db:6f:3f:fe:14:7a:71:29:5b:df:d4:
7c:0d:cd:c1:02:e4:25:ac:39:d0:0d:bf:67:dc:19:
5e:8f:b5:30:01:87:c5:e4:04:b5:62:ab:e1:b4:ef:
8e:b6:0f:77:5f:03:bf:e0:73:44:ef:03:e5:8e:62:
d7:43:a4:45:c7:1b:87:dd:cd:60:f4:a2:6f:80:db:
a5:8f:89:6f:a4:bf:ac:39:15:ae:20:89:da:82:61:
1f:b2:bb:f5:1b:8c:79:73:43:f8:18:7a:e2:fb:88:
0e:83:d2:da:cf:f8:23:93:19:5a:5f:8f:56:cf:8a:
ff:32:e3:93:9c:b9:0c:b9:ed:4c:d4:b5:c9:ee:0b:
b5:33:8c:f2:e8:a2:10:d4:0e:45:cf:fe:3b:23:52:
c2:c2:b5:c7:4f:b6:59:ba:ec:ab:91:98:f5:eb:2a:
a1:ff:80:60:a4:bf:5f:c4:87:f4:0b:f7:df:1f:23:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:FA:6A:1C:45:68:F5:18:B9:99:1E:D4:47:11:15:FE:44:C7:B8
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:9b:0c:7d:9f:08:3d:7c:10:46:07:2d:64:97:99:db:bc:
1c:8f:67:c7:f3:32:ce:60:93:54:ce:7d:ab:cf:4b:4e:c8:91:
1b:3d:cd:c5:0f:51:e9:f0:29:fc:a7:93:89:05:11:20:84:70:
73:3b:60:be:39:be:d1:79:51:60:99:2b:7e:64:b8:9c:d4:26:
27:4b:56:3b:03:f5:3f:a4:34:8e:e2:5d:d2:12:2d:16:20:54:
ad:1a:86:e7:0e:e4:79:ae:d7:60:1c:40:37:40:bb:77:9f:f5:
93:28:14:fa:d3:e0:03:36:3a:7d:a4:1f:34:4e:67:ca:af:60:
0d:26:84:44:fd:55:f8:df:17:4c:c1:8c:9d:5c:9a:4e:9a:d0:
68:07:f6:3c:c6:24:64:ee:99:0b:33:8e:e7:e6:6c:76:aa:ff:
e2:01:92:c9:0d:bc:f3:a3:d7:3d:33:9b:77:b1:17:cc:a4:a0:
d5:b8:6c:08:97:56:31:fb:88:ef:1c:37:fb:0c:63:fb:d5:9c:
e9:fc:f2:95:09:37:ae:f0:04:ab:97:c5:ce:14:e0:77:60:58:
0e:0e:78:ff:25:08:67:8a:be:ee:1c:49:c5:49:af:fe:e8:f5:
76:8e:fc:3a:50:9e:38:76:51:41:4e:9f:81:0b:60:6f:4d:19:
55:b9:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:32 2025 by rpki-client