Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: GkgZVEcSiiSytKJ725U0n/QT8eGhgQEhETM8GhE4ctk=
Subject key identifier: 17:81:53:7B:94:9B:FB:7E:9C:F8:EF:9B:45:C4:31:B1:60:C6:04:55
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 0197CA955DEEA305D890363760AC6EB63DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 0523
Signing time: Wed 02 Jul 2025 10:01:15 +0000
Manifest this update: Wed 02 Jul 2025 10:01:15 +0000
Manifest next update: Thu 03 Jul 2025 10:01:15 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: edQBYk1yvdKw70SdoW9A/ZeNWy0FSPB2craHwOm8ge0=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:5d:ee:a3:05:d8:90:36:37:60:ac:6e:b6:3d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jul 2 10:01:15 2025 GMT
Not After : Jul 3 10:01:15 2025 GMT
Subject: CN=1781537b949bfb7e9cf8ef9b45c431b160c60455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:5d:a2:58:19:f1:f3:87:df:55:e9:bd:e7:
8f:f0:5a:00:3e:e9:57:64:2e:d5:24:ac:2f:33:11:
b1:50:5c:03:59:b9:8f:db:8a:f5:de:48:c9:f4:14:
0c:93:cd:b6:2c:47:ed:87:a8:5f:a8:3d:83:86:bf:
24:ca:ce:5c:53:30:51:1d:7c:15:c3:e6:67:61:ec:
11:51:84:3d:86:3e:ac:87:f8:9a:4f:93:07:c1:58:
49:cd:78:7f:7d:29:12:76:f0:1e:91:c9:d9:d7:2f:
01:e9:48:a2:b2:ab:c4:c8:4c:ac:0a:84:2b:5b:23:
06:ba:9f:88:87:99:e9:13:b6:99:2c:55:30:7a:eb:
d7:5d:31:0c:ae:2d:eb:04:60:74:5d:a9:38:eb:8f:
1c:44:a0:20:3f:8f:63:39:bb:b5:6a:72:bc:9b:64:
c8:78:bf:2e:3b:e2:e0:46:fe:5c:a4:5e:2a:57:28:
a7:9d:2e:68:6b:af:ba:56:dd:0f:4a:c8:8a:88:ac:
b6:ec:85:0e:14:b4:e0:89:e6:a6:71:8e:0b:85:ac:
1b:6c:1c:78:1d:94:83:42:91:33:56:a6:2d:e5:e9:
e5:52:04:7a:48:b0:58:a6:59:9a:f5:8f:b9:b0:bc:
77:22:26:cc:ab:bb:83:16:64:b2:f7:66:68:91:25:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:53:7B:94:9B:FB:7E:9C:F8:EF:9B:45:C4:31:B1:60:C6:04:55
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:22:a1:44:79:7b:68:b3:2f:86:e4:40:49:7e:66:74:fb:
a7:15:58:7b:57:07:2f:52:b3:9d:42:83:11:6f:04:3d:1e:e8:
e0:d8:ff:ac:96:0d:ee:5c:d2:a7:be:5c:34:35:31:5a:b6:1d:
2e:1c:88:c3:9f:ca:08:fa:65:54:bc:f3:ad:0a:19:78:79:e5:
19:9e:c8:a1:9b:16:d8:61:06:08:6b:05:19:b1:af:a4:2a:b9:
e9:06:3b:70:71:92:6d:cd:bd:d7:d6:43:db:98:e2:c2:93:1c:
23:f2:30:e8:1b:1d:1e:4e:7e:d0:98:f1:4f:af:50:37:ee:92:
dc:f1:6b:9d:3d:20:c8:40:82:ac:17:44:4f:bd:30:84:cf:0a:
1f:00:49:00:69:5e:a5:2d:38:78:1c:c3:0b:4d:56:80:2f:74:
9c:27:7c:71:0e:cf:e1:05:10:a8:eb:d1:cb:1a:2c:10:12:13:
bd:41:17:e7:5e:50:cb:fe:05:97:f7:7b:39:01:91:7f:7b:2b:
08:c8:02:62:9e:63:32:42:e1:12:b8:b9:80:38:3d:aa:c7:35:
09:42:3f:b5:5b:5d:15:35:77:29:fd:06:6e:5c:99:7a:d8:fa:
4c:2e:78:73:be:c0:ab:ec:aa:8b:c6:a2:d5:7b:33:c8:2a:c4:
5e:82:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:08:41 2025 by rpki-client