Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: LRi4UiooSwyf3bxY82wYJuGoD1vMS+FJujzEahmj6PU=
Subject key identifier: E7:D7:E1:B2:D2:1A:89:EB:6F:8F:C8:5D:17:A1:03:41:3E:91:D8:13
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 0197B74569C6AE9A1E2366C828E6632855F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: m36cvj2MhzP92JJdZdlrB2m5xWkjsM8jyTHcgl0tnJs=)
2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:c6:ae:9a:1e:23:66:c8:28:e6:63:28:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=e7d7e1b2d21a89eb6f8fc85d17a103413e91d813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:2a:97:5c:77:8c:50:68:fd:74:67:20:4e:
0f:d1:81:62:d6:fa:e0:2e:c5:d2:95:b7:cb:b0:a9:
c2:77:69:d9:20:68:1f:d7:ec:53:71:0a:16:52:e7:
f0:be:f9:39:ed:3e:b9:6f:d7:39:4b:d1:f4:24:e6:
c1:07:d6:fd:bf:fe:57:a2:23:dd:58:dc:6f:5a:8f:
86:81:3a:91:52:3d:b3:10:da:7c:bb:9c:a2:11:e9:
33:68:a3:96:d1:6e:03:0b:76:b0:f8:8d:4a:af:1f:
57:a0:87:45:04:87:9c:88:c4:ea:4f:e1:18:17:e5:
ea:a1:be:c0:62:2d:cd:4f:1b:7b:61:ce:bd:02:96:
6b:eb:b3:8f:67:9d:b7:d8:1a:a0:63:d9:eb:8b:12:
14:8c:a3:fc:a9:a7:0b:9c:66:bd:4a:e9:f3:65:6d:
f1:8d:80:5e:d6:10:0f:51:85:57:80:90:aa:ee:e4:
26:e2:4d:4e:85:3b:cc:0a:36:6e:6f:ab:17:e4:d2:
5b:8a:26:be:f0:49:3a:c3:60:0d:fa:fa:89:52:44:
88:9e:e7:71:f5:92:c9:c8:55:9f:d8:c3:94:84:e8:
df:db:af:46:a1:bf:e5:0c:da:1c:0e:93:ba:f4:eb:
42:42:47:bb:73:04:c9:d3:63:a8:95:28:89:73:23:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:E1:B2:D2:1A:89:EB:6F:8F:C8:5D:17:A1:03:41:3E:91:D8:13
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d3:8a:83:de:a2:d3:9a:31:a7:3e:71:74:80:e7:19:52:a9:
c0:ca:4f:87:39:f8:00:01:fc:2c:54:b6:24:b4:60:48:fd:cb:
2d:d4:41:ee:07:b1:8d:19:c3:ca:e2:63:f9:7a:06:5f:3b:e1:
42:d4:cb:40:ed:ef:18:68:58:73:8e:06:4d:ff:ae:9a:c8:b5:
53:8e:3b:92:3d:7f:fe:0f:d2:d1:74:f1:4d:1d:65:64:f7:28:
8d:e4:fc:eb:f3:43:3b:42:3b:91:05:68:a9:ac:ab:50:4e:b4:
8a:3f:61:41:fb:7f:b3:46:3d:1e:32:36:1e:d0:e6:8f:11:b8:
1e:81:d7:59:88:c4:75:cb:91:ce:e2:59:37:3f:c2:ea:8b:95:
10:60:1e:97:e0:d3:9a:4c:bc:c1:d6:64:4a:7d:d3:d3:f8:08:
5e:96:a1:d9:60:04:65:be:92:33:a2:a9:60:79:eb:a3:c1:1b:
af:84:7d:db:fd:4c:87:03:b1:c9:79:d0:18:db:1d:54:11:33:
f3:2e:e2:61:e1:3f:31:ed:fa:ba:e0:4e:ed:67:8e:87:17:cf:
12:40:e4:48:0d:d8:3e:21:b4:0f:be:e4:92:1f:06:e9:cc:d8:
01:6b:cc:9c:8a:14:74:e6:a7:dc:6f:2f:a1:15:ad:9d:06:f3:
55:97:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client