Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: hivOWOS2oO1YLj7rFoV+N6ansmJKEFlkxyqy3agMxD4=
Subject key identifier: 75:6D:B2:BF:98:19:26:D8:B1:95:E7:DC:B8:74:8A:DD:FE:D5:02:49
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019749D5C2912A9C577CBCA340DB957C5A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:34 +0000
Manifest this update: Sat 07 Jun 2025 10:00:34 +0000
Manifest next update: Sun 08 Jun 2025 10:00:34 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: HC8crfqQnC8ftTFUTCuKOVfyMk0rHogorg5oq/DU80o=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c2:91:2a:9c:57:7c:bc:a3:40:db:95:7c:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jun 7 10:00:34 2025 GMT
Not After : Jun 8 10:00:34 2025 GMT
Subject: CN=756db2bf981926d8b195e7dcb8748addfed50249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:cb:9f:c3:d5:e0:17:55:ac:e4:87:e3:cc:
52:85:b6:37:2b:e8:b7:d7:7d:2c:cb:64:32:10:85:
d7:18:1d:4b:fb:bf:08:6f:63:a7:98:4b:23:7f:41:
ae:34:c1:1f:37:b8:f3:1d:42:b4:2c:cc:c1:25:84:
5c:db:e3:98:cc:4b:68:e9:17:6e:97:4e:a5:75:96:
ca:18:10:01:0a:b3:f3:54:d9:e8:4c:fc:28:e1:b6:
c9:c6:a1:bd:2c:d5:35:76:d6:7e:ca:4c:d8:03:b0:
a7:d5:c3:22:8f:18:6a:c7:06:71:a8:d0:de:18:02:
57:5d:49:f7:39:bd:bc:35:16:95:58:64:4a:08:80:
e4:e3:e6:0c:81:00:23:c0:98:08:bc:3a:8a:eb:1d:
6c:1b:16:b4:25:59:01:68:89:5d:5e:06:95:42:7e:
1f:1c:f8:34:53:92:50:b1:28:06:e9:1f:e7:37:f6:
bd:03:d3:2b:00:c7:99:16:36:52:13:e6:8a:8b:d9:
55:ce:4e:28:aa:ab:42:95:18:60:2c:61:be:8d:f1:
92:28:1a:bc:27:a5:14:23:98:ce:3a:3a:9d:77:89:
30:3b:03:1f:a3:d8:28:de:47:ad:5e:28:81:df:40:
37:1d:80:c6:7d:9b:ab:e1:ca:c5:8a:e1:1b:0c:0f:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:B2:BF:98:19:26:D8:B1:95:E7:DC:B8:74:8A:DD:FE:D5:02:49
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:08:44:08:bc:26:9f:8a:df:31:ff:ad:03:43:fb:ad:f7:
c0:9b:e2:69:4f:9a:d4:f0:7f:13:26:a3:93:6e:42:60:22:2e:
73:3a:f6:a5:61:08:77:f2:f7:a5:a3:02:77:56:f5:7f:60:61:
c4:07:60:1e:96:24:3f:f5:30:74:21:e5:22:3f:95:5e:af:b7:
e2:f7:a3:61:9f:6d:da:e0:c1:e7:07:fc:f6:b5:a8:8b:64:68:
eb:9d:53:c9:7e:af:fe:76:f6:c0:fa:b3:fd:cb:be:00:fe:bb:
d2:78:f8:8c:59:fc:92:e5:c8:a1:70:27:56:bc:02:d4:e7:3e:
92:90:7c:20:ff:e2:bd:99:61:67:b7:0c:d2:fb:a4:6c:6f:29:
4e:58:41:ff:ea:a4:9a:fc:98:b3:cf:8f:ad:e1:76:19:d9:7f:
0d:6d:3a:11:4b:ea:ff:d5:d6:de:20:95:4d:02:89:19:40:4b:
af:cf:e3:fd:e9:e5:0e:72:7a:0d:47:27:d8:a2:44:95:dd:04:
5a:2b:35:3e:a7:bb:ef:3f:5b:c6:b0:35:36:1e:e2:f0:a4:86:
c0:e3:50:85:e7:b8:3f:fa:74:e7:b4:78:12:92:2c:5f:60:4d:
49:61:95:94:81:0d:6c:ac:7b:96:84:14:c2:40:84:fa:03:b6:
2a:49:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:20 2025 by rpki-client