Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: xUIRfwLl1qOo8gyR9ZlszTQ3m8aW4NVU1zkQ/9bBzSI=
Subject key identifier: DC:3A:EF:91:81:78:43:E5:64:7A:8B:92:6B:F6:F7:CE:D4:18:CF:5E
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 0197B74515B2D66E548D07FEFDF564D164BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 082F
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: i68PeY4hu2jI6YPuIm6Rcbh6A8I58RNDcrR94Zpbbkw=)
2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:15:b2:d6:6e:54:8d:07:fe:fd:f5:64:d1:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=dc3aef91817843e5647a8b926bf6f7ced418cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:58:0d:77:93:39:5b:9d:a5:af:c9:76:bf:
b6:89:fe:0c:df:06:82:23:46:5c:ef:89:e6:0d:3e:
eb:7e:7d:a0:52:7c:c5:48:6f:ba:08:6e:de:a5:bc:
bc:9b:0f:0e:77:99:a3:36:31:da:2a:c6:4e:4e:8a:
40:97:3d:0f:51:b4:22:6c:7b:b6:d4:8c:db:3f:bf:
77:b9:da:28:a2:ea:cf:4e:74:16:b5:4a:c9:58:93:
8f:44:77:38:59:78:73:e2:8f:ca:79:da:47:74:d7:
f6:37:cd:a0:aa:ef:12:13:96:9f:c5:ef:bf:7c:ff:
5d:83:fe:34:41:d7:98:a0:c1:73:bb:59:79:b4:29:
05:fc:60:8b:68:26:7f:44:66:bf:66:f0:79:8b:7f:
82:7b:13:ae:89:92:2a:6e:8c:c7:bb:98:9b:93:ce:
77:a5:73:eb:c9:a2:ba:b7:f3:60:0c:5f:d4:59:43:
6a:4d:69:34:fa:5b:49:19:20:eb:70:8c:8f:c2:fe:
62:a6:cd:7b:fe:39:d4:f1:57:34:93:24:52:47:9d:
5e:1f:73:cb:86:be:e0:79:46:be:1b:3c:cb:ff:ec:
14:02:8a:3b:02:ba:3e:a0:9a:8e:6c:40:9b:0e:5c:
bf:d5:45:a9:0a:57:ce:d0:90:45:5e:55:b5:e3:8d:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:EF:91:81:78:43:E5:64:7A:8B:92:6B:F6:F7:CE:D4:18:CF:5E
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:84:48:e2:d2:e3:01:10:d3:05:60:4c:3c:c9:42:7d:13:
a7:38:50:43:0f:d4:a6:39:28:32:bd:75:cc:b4:07:aa:05:c0:
1c:6d:31:8e:e8:49:7a:4d:42:d1:12:84:07:d5:2d:b9:b3:8b:
a2:f9:67:0f:45:67:91:eb:47:d5:9e:86:5c:25:89:a0:74:21:
f9:8a:92:0a:4a:6a:6b:2f:23:6e:fe:4d:7d:14:2c:a0:68:1a:
39:f9:64:2c:d6:31:27:b4:22:ac:f0:19:dc:e0:fd:97:8c:4d:
69:4e:79:b7:7c:6e:95:54:a4:94:fb:dd:dc:e6:e1:d1:13:68:
63:92:88:b7:cf:98:62:9b:04:b2:cc:db:63:65:7c:12:89:ba:
af:dd:22:48:af:dd:1c:fb:28:33:83:ea:15:11:9d:ae:4c:be:
7b:be:0d:2c:67:40:d3:d1:ec:17:af:b4:53:c3:86:b1:09:1f:
5a:85:93:fe:cd:a3:18:42:5f:6d:70:35:b4:f3:76:15:5c:f6:
b6:ce:0e:fb:a7:cc:75:94:53:35:8f:79:9e:76:a2:b2:ad:ea:
b6:fe:d6:64:41:99:e8:0a:58:c8:fb:cc:71:a2:ce:22:59:4e:
13:97:20:1d:5c:a5:fd:6b:57:14:f3:c1:52:66:6a:25:7e:d5:
7b:a5:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:32 2025 by rpki-client