Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: pjAvCKb9BXj4HtYzzUsX03tluMsuvLMYT2yIdBpuH8I=
Subject key identifier: 67:A6:73:4D:8B:71:5E:F3:D8:55:E2:F3:3A:C6:D4:69:A6:B3:34:75
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 0197B70E4CF1C7F963929C97F9DFA08C8E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 1125
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: WSlK1fU8MFOIH69bpQv6ikBOCe4FTq8mBqMg/8GgOpU=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4c:f1:c7:f9:63:92:9c:97:f9:df:a0:8c:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=67a6734d8b715ef3d855e2f33ac6d469a6b33475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:80:9e:a9:40:1b:b9:b2:05:7d:36:1f:14:
b1:2f:73:d2:cc:23:c0:b4:40:ad:42:a9:d2:be:3b:
57:dc:bb:5c:d9:c2:2b:d1:72:d0:cd:21:22:72:77:
fc:c2:10:a4:e9:55:a9:f7:4a:71:3e:4e:d9:01:a3:
17:2c:e5:50:89:af:1d:7d:a5:0d:98:99:22:90:4f:
c7:74:3a:aa:21:f4:a4:38:96:62:0a:bb:ff:66:3b:
96:6b:64:2d:5a:35:77:2b:16:09:60:b1:1e:68:0c:
3a:fc:aa:f1:48:75:f1:80:1b:9e:cb:26:af:a4:2f:
dd:b9:b2:49:24:0e:29:72:04:3d:22:6c:12:0f:6c:
69:86:ef:89:29:74:49:98:14:07:f0:15:3a:6f:11:
83:34:1a:c9:2f:21:e8:e2:a7:57:3e:8d:73:9c:1b:
e2:d0:92:32:48:34:b7:4e:7c:d9:77:2b:5e:91:e3:
2f:6e:c9:92:b2:5d:97:4b:78:f9:8e:06:57:a6:84:
f1:48:da:c4:7b:bc:e8:93:01:39:d4:d6:83:a6:c1:
27:bf:b4:82:f4:ee:14:63:f6:f8:ba:30:96:50:a7:
c9:a8:07:31:ba:e5:a6:e9:52:86:67:0a:ad:12:6b:
12:63:7c:68:82:74:fc:95:19:17:de:c4:19:32:23:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:73:4D:8B:71:5E:F3:D8:55:E2:F3:3A:C6:D4:69:A6:B3:34:75
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:86:ec:dd:df:49:45:9d:44:17:74:ab:02:ea:d2:64:53:
43:08:bb:86:96:a5:26:bc:d7:00:25:8f:bf:43:eb:31:48:c4:
3a:7b:84:f9:f1:09:3c:a4:57:94:9f:62:49:77:7f:55:59:ee:
8c:83:50:7b:c8:81:df:0a:84:cb:a3:49:50:7e:d1:0b:db:e1:
34:49:21:76:46:b8:2d:67:69:08:4f:cc:1d:e1:04:39:f2:16:
12:aa:b5:f6:96:79:95:80:e2:c1:66:a0:e3:b2:6f:19:11:a2:
b8:d8:49:0a:4b:e4:58:9e:ba:2a:77:bd:a5:7f:2a:71:e6:87:
3b:da:a0:0d:e2:3a:c4:0a:ed:f2:e7:19:1c:87:f8:42:ef:5d:
9f:e9:86:43:3b:4b:d1:e5:7e:47:6e:91:6e:45:e4:ce:46:06:
9b:54:1b:cd:51:42:ee:64:48:54:96:de:11:ad:0d:50:3f:58:
bc:f1:20:56:bf:99:66:c3:aa:28:2e:9d:26:27:e4:85:9c:7f:
12:57:2f:1b:a7:41:e9:f2:22:1d:bd:81:d6:1b:2f:37:7f:ae:
99:18:bb:b8:a3:ab:56:5a:97:86:9e:17:39:d6:68:88:d7:8c:
0c:7b:b4:ae:9f:17:29:54:19:9d:b0:9f:da:55:12:29:0f:62:
2d:2e:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:47 2025 by rpki-client