Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: +JoJoU0p3pgLRg5LV89hWTcAbO3W71gwcIdADqBCJZs=
Subject key identifier: 67:18:91:79:BA:76:D2:0F:5B:7E:85:BC:5B:C2:47:37:4A:0A:7E:D4
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 0197B5C51696CFE155C1A901B5AD74F8A11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0B6E
Signing time: Sat 28 Jun 2025 09:01:21 +0000
Manifest this update: Sat 28 Jun 2025 09:01:21 +0000
Manifest next update: Sun 29 Jun 2025 09:01:21 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: uBeqGma7KP6iZCGeepTgfimNEr2omfJ2V0JNE6X4j64=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:16:96:cf:e1:55:c1:a9:01:b5:ad:74:f8:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Jun 28 09:01:21 2025 GMT
Not After : Jun 29 09:01:21 2025 GMT
Subject: CN=67189179ba76d20f5b7e85bc5bc247374a0a7ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:3d:f8:db:6b:68:fb:d3:83:90:0d:55:7e:
83:2f:f3:a4:13:a9:b0:11:4d:07:6a:e2:b1:0e:8e:
53:6b:31:69:e9:b8:77:cc:67:59:6b:26:b1:88:b3:
1a:b7:48:04:19:86:cd:11:b3:eb:ea:d0:39:ec:69:
e1:91:4e:93:9c:4f:31:4c:3d:07:4b:f9:bb:8b:bf:
23:2b:8a:4b:3b:90:ec:f1:95:d2:3c:1b:68:84:7e:
85:57:c2:f0:ac:9f:5e:0e:bb:40:ea:ef:46:9a:2a:
31:41:d4:76:2c:3e:e2:58:22:fa:58:55:0a:8f:37:
33:b4:6f:bf:7f:a6:28:ce:60:4b:10:7e:a7:11:2d:
5d:ac:21:dc:1e:69:c9:11:d5:98:8b:5f:e8:a9:f1:
0b:41:3f:bc:eb:b8:1d:45:de:c8:14:56:ef:51:7e:
cc:4f:ac:6b:3d:e3:77:ef:7c:81:e6:cd:ef:e0:1d:
67:5d:9d:84:62:d8:82:fc:ca:87:c5:c2:ea:b9:f4:
05:cf:da:13:11:c9:34:3c:29:f9:bf:69:6f:70:f4:
bc:7f:5a:de:fe:cd:bf:1e:d1:83:63:46:61:d0:2b:
f5:99:4e:94:f5:e3:23:62:67:86:d9:ab:6f:c7:bd:
06:35:30:88:1e:a4:de:f6:dc:ab:24:0f:63:17:ad:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:91:79:BA:76:D2:0F:5B:7E:85:BC:5B:C2:47:37:4A:0A:7E:D4
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:aa:45:5e:c5:b9:dc:8f:d5:ad:f6:44:be:f6:4c:c6:4d:c3:
a8:f3:2e:01:df:cf:fd:85:f3:b9:55:54:74:8c:b5:09:f5:fa:
07:2c:ac:28:26:0c:aa:84:77:dc:d9:7a:7c:5c:64:b0:90:c9:
62:f8:c3:48:81:c8:97:37:ed:f2:34:0d:10:0a:c5:44:67:8c:
a5:24:8c:ae:94:2c:e2:a6:e8:97:7b:64:d9:b6:ac:41:a5:a6:
c9:be:c1:6d:f1:40:bc:45:37:3c:5b:5e:ea:d3:75:ff:9d:bd:
aa:07:03:b2:64:96:53:79:54:a9:68:26:02:93:9d:7d:ba:2e:
3a:6e:7c:0b:60:67:9d:d2:c8:35:a1:5e:6e:be:3e:2a:a6:88:
22:3f:9b:a2:87:b1:a5:7f:c8:2c:c9:2d:3c:86:df:bd:19:17:
9b:46:fa:37:b6:88:09:2b:ef:f1:9e:83:dc:89:1f:32:17:ad:
97:8b:3b:6b:95:32:cd:be:ed:8d:70:a3:2d:e3:69:0d:34:88:
44:d5:66:de:59:a0:45:02:1d:8b:1b:60:3d:0d:94:33:9a:0a:
7c:75:7f:42:0a:2f:e1:1c:d7:76:c0:8a:81:89:db:8f:95:3a:
35:d3:be:06:95:b4:13:41:21:4a:c6:d1:26:67:d7:33:6b:38:
a7:d6:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:14 2025 by rpki-client