Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: 9OJtuC3aPAm8JYysGq7oUhX8xuCxQt/q/oWhvtG9wZY=
Subject key identifier: 09:D1:A4:F8:8D:21:B4:DA:AD:D4:4B:70:48:01:B7:D8:4D:4E:2B:4D
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 0197B77C71F77C146C30906E2D28B77A8E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: kuuMrC15TvWtonRFaNDb/mdp52lTBnT/Z5i1baqf52A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:71:f7:7c:14:6c:30:90:6e:2d:28:b7:7a:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=09d1a4f88d21b4daadd44b704801b7d84d4e2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:96:ce:77:39:e7:ab:00:ed:26:79:56:6c:
bb:90:60:89:99:db:50:76:e7:6b:f0:90:fe:3c:f9:
57:f2:16:59:23:d6:fb:c6:7e:91:da:07:b4:98:47:
36:6a:f5:94:1f:b5:80:ef:29:18:ef:9b:5c:9b:de:
61:c5:07:6d:9e:49:b2:71:91:17:87:c2:ff:7f:5d:
5b:1f:b8:1a:10:53:83:2e:36:4b:f6:7a:0e:bb:5a:
dd:14:ab:0e:49:f8:2e:e3:2b:f4:8f:1c:1b:2e:4d:
4b:68:fc:e5:03:23:61:d5:21:28:df:34:cb:d2:20:
49:60:fc:10:78:d4:d6:de:aa:14:94:25:53:ae:26:
59:fc:6b:f0:85:9a:11:24:37:c3:c4:a0:9d:d0:26:
63:69:94:d2:55:07:ae:ad:59:c1:32:d7:40:ee:f5:
57:4b:83:fa:3f:34:f4:96:ef:b1:25:53:5a:2d:e1:
59:aa:63:78:49:fe:fd:e9:f4:a1:12:dc:c2:8c:2c:
dc:38:65:56:b9:de:88:74:24:66:3c:5e:b5:e8:b1:
74:97:8b:0c:ab:67:22:f7:0e:8c:ba:92:b3:00:08:
e1:8c:ba:f5:8a:fa:85:49:54:93:30:38:89:f4:2b:
0e:36:39:ac:17:ae:15:38:2a:5f:e5:4f:2f:dd:2d:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:A4:F8:8D:21:B4:DA:AD:D4:4B:70:48:01:B7:D8:4D:4E:2B:4D
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:44:1b:81:3f:0c:f5:8b:ce:53:fa:ab:7c:f2:b0:b2:1c:30:
d1:b6:69:87:85:f1:66:d0:5a:86:e2:cd:a6:92:53:25:91:dd:
08:87:1d:dc:29:16:33:25:be:45:6a:33:da:d3:02:0f:cd:74:
08:67:f7:12:67:02:c5:64:b9:2d:bd:5d:37:47:6c:18:b6:be:
e4:48:b8:fa:3f:2b:36:ed:74:83:2b:85:49:e3:27:0d:2f:df:
f1:2d:09:4a:2f:2a:ff:cb:dd:c8:a8:39:6f:3e:dc:06:73:51:
2e:fd:f8:55:f7:3e:86:7d:36:af:5f:d5:a3:6e:42:c5:44:10:
29:0d:02:60:82:91:f7:a6:41:3a:ac:8f:19:71:af:b9:94:c7:
13:d1:75:82:04:e4:d8:86:cd:40:bf:e0:26:9a:1d:d1:df:8d:
e0:32:a9:2e:11:d2:8a:1d:52:93:86:72:d9:11:b8:be:37:df:
80:be:ec:8f:74:d8:e7:3c:7e:b3:e4:a3:00:75:e8:33:d1:03:
1c:12:b4:e5:90:02:4f:6d:85:98:48:b2:28:44:aa:fa:7b:58:
6a:4d:5c:52:1e:20:34:3d:b0:a5:41:57:f2:a4:60:73:6f:10:
53:76:ab:74:af:94:98:67:d4:9b:a8:d6:8f:ad:eb:dc:88:1d:
53:6e:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:12 2025 by rpki-client