Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: 4fkOpzl08ichtdJKRVuejFReEPbPL3XpClMy2SS3AfA=
Subject key identifier: 26:FD:04:F9:1E:9D:37:6F:0C:9E:0D:E1:86:DD:C1:0D:3F:15:E2:10
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 0197B820DE0AFEC481936C99C2B70AC9E9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: WZFkTQLkJRYeACJa4rCsoVS/qFY/0ajyyI67E4Hlmtg=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:de:0a:fe:c4:81:93:6c:99:c2:b7:0a:c9:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=26fd04f91e9d376f0c9e0de186ddc10d3f15e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:65:59:07:b5:5f:a5:f3:37:75:48:c4:8b:
d1:bc:02:d4:03:7e:e6:0c:2d:74:99:af:40:5b:d1:
24:5a:1a:84:a0:2f:37:ca:7f:73:11:c1:a6:91:c9:
bb:5c:fc:9b:52:ea:02:fe:48:05:86:80:7f:39:0d:
fc:b4:9c:fd:49:63:33:e2:6a:7c:3a:6f:3d:7a:d9:
6f:67:e0:66:9b:bd:6b:dd:49:94:54:a7:74:66:cf:
64:76:cb:6b:a8:ce:27:f9:63:03:80:8c:31:5b:e0:
5c:f2:1d:cc:c4:39:fb:98:2b:7f:53:7d:5a:cd:d8:
ff:73:25:65:6c:c5:72:32:cf:c8:5f:7a:26:66:4e:
1a:92:26:58:10:05:18:2d:f3:74:b6:10:7f:8d:85:
fa:2f:6a:6e:5c:ed:9c:3d:c6:e5:b2:09:5b:ab:00:
3a:a4:a8:ce:58:31:3f:9b:e0:e6:17:f7:ff:49:74:
84:53:5f:87:4f:8f:d6:86:0d:a6:8b:08:05:05:68:
65:66:0d:62:fa:ba:49:00:72:36:9b:29:13:7a:83:
d2:49:e5:4e:63:56:69:bf:50:3a:7f:b0:3d:a7:50:
cc:56:da:a4:cb:2e:de:01:4f:b0:01:1e:20:85:21:
1a:e6:c2:54:7f:da:8d:a2:1e:d0:58:b9:59:59:71:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:04:F9:1E:9D:37:6F:0C:9E:0D:E1:86:DD:C1:0D:3F:15:E2:10
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:a5:2c:45:d9:71:43:fd:14:a1:58:4d:29:1d:20:11:ff:
15:96:1b:d2:20:a7:9c:b2:1c:d0:93:91:a1:88:eb:00:51:41:
84:5a:c2:1a:37:7d:b3:28:f7:77:0f:b1:48:a6:da:20:e4:2b:
0c:6d:78:be:3f:59:05:3b:9e:f0:7b:a7:03:59:b7:68:fb:09:
90:a9:27:5b:e4:bd:52:ed:0a:5c:7d:9f:34:fa:0b:8a:3c:56:
4a:f7:a1:23:7c:41:0b:32:d9:e3:b3:4b:36:8a:8f:a3:f9:5a:
20:4c:35:53:e9:78:2e:2f:a0:ed:0e:f7:d4:3b:5d:8f:a5:f1:
1b:c9:2d:58:b0:6a:3d:9e:18:51:4f:13:65:fc:ad:9d:18:34:
45:15:f4:27:31:1e:e8:5c:81:65:6a:85:4e:5a:f4:08:96:01:
2b:6a:df:d4:87:22:33:7b:53:09:19:2f:28:56:cf:40:f4:d7:
4e:7f:b2:43:1a:c6:32:21:fc:8c:89:76:62:d6:40:c9:38:46:
17:fe:9b:9b:7c:ae:04:db:0e:ce:ea:59:3a:64:a6:37:2b:e9:
95:2b:9a:2d:78:63:0e:89:f7:97:f7:78:26:48:80:1c:01:5b:
f4:31:50:b1:d2:38:98:cd:fc:a9:1f:68:ab:cd:6a:07:eb:44:
2b:51:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:57 2025 by rpki-client