Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier: jpYHw329eVCRKPkAC9QFVjVOLHSSP3dFDMd8C2PkfWM=
Subject key identifier: 5C:AA:0E:25:E0:6A:A6:E0:D4:3B:6E:A4:67:9B:1D:33:E1:C6:91:69
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 01974EC5F370847A26EEDD3E499D81A53C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number: 0278
Signing time: Sun 08 Jun 2025 09:01:25 +0000
Manifest this update: Sun 08 Jun 2025 09:01:25 +0000
Manifest next update: Mon 09 Jun 2025 09:01:25 +0000
Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: ftRON1F235p9CnN9RY9ApArYKO6YHpNVu4IO0ZQASUQ=)
2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:f3:70:84:7a:26:ee:dd:3e:49:9d:81:a5:3c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Jun 8 09:01:25 2025 GMT
Not After : Jun 9 09:01:25 2025 GMT
Subject: CN=5caa0e25e06aa6e0d43b6ea4679b1d33e1c69169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:14:a3:f9:be:07:ff:89:f7:fc:7c:a0:a2:
49:d5:51:23:72:c8:ab:79:5f:ca:ab:69:71:ae:c0:
f1:d8:f0:83:bc:48:3d:68:2f:50:06:94:bd:93:37:
79:f3:96:65:58:e6:94:23:9a:13:2b:bc:69:1a:9d:
d7:a2:31:8f:d2:ae:f5:97:77:89:9b:e0:a1:a0:ce:
ad:3e:17:8a:11:b9:04:fc:45:90:21:32:fd:6c:7b:
ad:e3:09:39:a3:ae:75:ff:8e:7b:a5:63:18:86:1c:
5f:cd:ea:03:be:cf:d1:d9:77:9e:c0:39:20:b4:87:
30:6c:d8:f6:37:d2:5d:7e:93:91:40:e1:70:a1:ad:
02:70:86:32:d5:03:39:7f:1c:f9:1b:34:29:32:96:
2f:c4:9f:6b:37:1b:de:7f:28:99:9e:63:f1:0d:99:
b0:23:2f:da:47:88:da:84:c1:70:d2:2e:4f:4b:cf:
71:55:4b:17:1e:26:ac:dd:a0:91:9c:30:1e:7e:7e:
c7:f2:05:7a:50:8a:02:6e:25:22:36:30:27:f8:46:
2c:4e:48:d2:bb:38:95:b5:3f:fd:ae:15:9a:af:52:
c8:f4:11:a2:ce:b0:e9:c5:78:0a:54:d9:93:31:7f:
0a:d1:70:b6:3c:92:77:a7:f1:99:31:dc:ae:75:ad:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:0E:25:E0:6A:A6:E0:D4:3B:6E:A4:67:9B:1D:33:E1:C6:91:69
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:f0:bb:d0:69:e7:f7:b9:07:e5:65:61:44:1c:ce:7b:10:
fc:2d:fb:d9:97:5c:50:7d:d4:d6:88:f6:0e:70:c3:14:e4:4f:
23:2d:65:06:03:77:aa:8e:82:b1:6b:88:2d:e9:eb:e5:ff:b0:
8c:6b:52:19:76:a9:08:d2:9f:63:92:73:36:ac:69:66:b1:c9:
cb:f9:36:2a:86:b9:77:38:56:73:07:bf:39:a7:ce:51:78:24:
c8:ad:03:03:82:88:cb:09:cd:dd:51:93:36:68:ff:e2:74:1f:
66:a4:c8:38:6d:c3:22:36:e7:df:d5:8b:fe:38:c2:57:dd:4a:
0e:3d:76:29:4d:b0:8e:f9:63:00:af:f6:af:28:2c:e7:50:f5:
e2:f1:5f:52:03:d0:20:24:dd:6e:83:18:42:5a:11:57:4f:d8:
dd:ea:e8:52:7f:55:52:5e:1c:ae:25:9a:56:6f:0a:7a:d9:05:
7f:6f:a0:f2:45:e6:aa:a1:48:97:3d:9c:5b:f7:5a:02:18:d8:
c0:3e:23:d3:a8:f6:4f:9e:96:a4:b8:f9:8e:24:46:51:37:ac:
8b:9c:80:af:df:b8:37:14:10:f8:a5:6b:b8:e1:96:42:6c:d4:
39:52:31:09:9a:46:6e:c3:d2:43:e3:55:c1:63:4e:ba:25:4c:
7e:e3:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:39 2025 by rpki-client