Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: jHaIS6omplaWG22u4GvftpklAcqaT4PFCYKLRn+IDMY=
Subject key identifier: 12:DF:5E:77:27:52:4B:96:B2:63:23:0E:98:1D:07:FB:60:B3:CD:36
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 0197B6A1CAD18106ECCFF5B03357DDB955E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 12B9
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: 8FUViee3XBTOwSxyn0TFd7NblN7J8ikHMsTAycg1ESk=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ca:d1:81:06:ec:cf:f5:b0:33:57:dd:b9:55:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=12df5e7727524b96b263230e981d07fb60b3cd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:70:b7:c4:a4:fb:9f:dd:80:b5:84:ff:e1:
8d:38:39:be:b0:d2:20:6e:eb:1c:1f:ed:40:79:2e:
41:55:2b:31:06:eb:08:3c:be:48:99:75:90:ce:e8:
db:f9:51:69:82:8c:11:d6:c5:93:35:c7:f9:2a:10:
0f:f4:d8:65:30:6d:51:84:87:40:98:7a:51:5a:90:
ea:8e:2d:cb:b1:a6:2f:f6:96:86:1b:13:5d:a4:f6:
1f:de:fd:d5:6e:67:63:6b:b8:2d:5d:39:ee:97:19:
5e:1c:30:36:28:bd:83:fa:98:f8:16:a2:c5:53:7e:
6d:48:7c:cc:c4:bd:3e:32:49:84:e2:fa:81:0d:9a:
e6:3c:0d:b7:cb:0e:62:48:01:68:91:2c:0e:bc:a4:
22:1b:df:2a:0c:e6:9f:5b:34:e0:4c:34:67:6b:bc:
af:6e:dc:7b:e5:8c:15:39:6a:9d:bf:46:43:76:73:
54:e3:7d:04:06:97:c9:63:4d:15:eb:ec:c6:00:6e:
53:a8:2f:4c:d4:c1:bb:ec:f9:93:8a:e3:dd:74:27:
29:d3:16:e7:d9:09:b1:bf:65:1b:3b:94:38:bd:eb:
67:28:e3:b1:2e:e7:8c:85:96:50:21:13:bb:68:5f:
57:98:31:01:8d:55:86:ac:19:eb:03:a7:21:fb:61:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:5E:77:27:52:4B:96:B2:63:23:0E:98:1D:07:FB:60:B3:CD:36
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:48:15:3a:39:fd:8c:21:11:6c:a7:17:90:cb:e3:06:9f:3e:
24:78:d4:40:52:78:1f:69:b3:94:c7:46:1d:09:18:6e:b7:35:
91:c0:fb:ed:b1:84:c3:7c:66:0c:1d:cc:0f:9f:62:2e:fb:e2:
50:a1:6a:08:00:50:51:1f:f9:c1:b3:a4:04:fb:19:62:e3:61:
80:c2:11:99:a2:c8:49:3f:1a:4e:7b:5e:da:da:e9:da:da:b9:
75:c7:18:c4:ba:ec:ea:40:b6:f9:f6:bf:87:d5:cb:62:f5:6b:
81:ea:82:94:a2:4b:d3:dd:d2:f3:c4:fc:17:87:33:1e:34:23:
04:3f:45:3a:25:7a:cd:44:0d:3a:a8:48:55:9a:6a:37:39:d3:
6b:be:5a:de:98:d3:0c:64:85:6b:86:ff:0d:59:3e:64:d0:9e:
3b:93:89:7a:47:5a:fc:60:f9:a7:52:ca:f8:c1:a4:c9:cc:0c:
c1:3e:35:77:c9:60:85:ab:c7:9b:f2:44:1f:cc:a8:b2:ed:b2:
cb:e7:c7:98:4a:bf:fd:14:9a:a1:03:31:47:99:d4:16:c2:db:
60:04:53:6d:dd:65:6d:c7:20:7b:77:8a:61:48:ee:d3:a7:ec:
6b:37:19:68:e2:0f:d6:32:84:cd:fe:03:74:c2:b0:be:15:aa:
33:ab:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:31 2025 by rpki-client