Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: mj6OwUIjuKCJa+mlKjAqbM3FsTxHeMVduSBsEuszxBM=
Subject key identifier: DB:2C:2C:2D:7C:73:81:0F:95:74:A0:87:C5:EE:19:06:37:09:6B:20
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 0197B5FC13979CF0E6C47AA1069DE76317CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 10:01:25 +0000
Manifest this update: Sat 28 Jun 2025 10:01:25 +0000
Manifest next update: Sun 29 Jun 2025 10:01:25 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 9B9UU0E6HFmEF39NV30jlecvG0VSFutlEDJmqECMX30=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:13:97:9c:f0:e6:c4:7a:a1:06:9d:e7:63:17:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jun 28 10:01:25 2025 GMT
Not After : Jun 29 10:01:25 2025 GMT
Subject: CN=db2c2c2d7c73810f9574a087c5ee190637096b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:d4:47:90:b9:a3:be:9f:17:67:25:d7:e3:
6d:cb:00:35:69:22:e8:fa:b0:7e:00:ea:6b:80:e5:
d8:69:d0:3f:8f:bf:95:40:ff:5d:cc:0e:66:c1:db:
eb:57:42:19:8c:a0:53:01:97:94:9f:0b:0a:e1:09:
60:66:a8:66:81:1e:a5:59:98:8b:43:8d:44:33:24:
36:52:c2:99:1a:aa:52:cf:15:d6:62:16:c1:79:d7:
79:bc:86:e0:c2:76:a7:89:6d:eb:97:f4:eb:a3:c0:
52:dc:7b:4a:35:91:a0:5d:cb:30:db:fc:c0:14:f7:
e6:a9:e9:f0:01:45:68:95:4b:d0:d7:2c:63:cb:e9:
dd:e2:2b:96:96:aa:3f:73:a8:61:fc:ee:21:be:5d:
45:29:aa:af:89:da:e9:18:8a:a2:a7:57:ab:5e:22:
6a:68:8e:7d:83:ac:70:4a:63:68:c7:d9:20:53:7b:
88:9b:bf:8a:7d:24:33:77:34:48:b5:a9:86:f7:5f:
0c:39:28:35:b8:d1:b9:77:63:e6:71:9c:9e:b4:53:
ed:97:a6:48:27:af:e8:68:97:16:09:32:6e:1d:c3:
4b:14:70:11:cf:09:3c:97:55:f0:2a:cb:fb:0a:42:
05:c6:03:93:b6:1d:91:af:d1:da:54:80:c1:c5:d5:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:2C:2D:7C:73:81:0F:95:74:A0:87:C5:EE:19:06:37:09:6B:20
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:d9:1d:38:dd:8c:e8:ac:bd:ce:80:87:4f:44:1e:ea:11:
37:bc:b6:8b:70:08:ca:25:00:10:ed:df:f3:e0:8f:98:56:72:
95:9b:10:6c:c1:e6:5d:b0:53:a2:f0:88:d6:98:a8:09:83:3d:
7b:7a:a8:8f:9b:6e:79:38:dd:2a:eb:af:b7:3f:5a:e6:15:10:
f8:d9:67:ac:1e:c7:d4:ec:0d:ae:83:86:6e:3a:a2:32:8c:23:
6a:90:67:51:03:9a:33:c8:6d:f3:8f:6f:5d:24:ad:3f:1a:ae:
23:9e:c7:06:8f:48:9a:51:65:2e:aa:11:a7:96:6f:fb:b9:b9:
39:00:fe:c6:8e:05:ac:02:6f:11:c1:fe:05:a3:12:48:98:15:
f0:ce:94:b6:29:69:fd:18:b7:15:53:c0:7d:79:3d:e6:77:15:
24:e5:c9:b7:4c:b5:0f:84:d3:1b:05:33:92:de:07:74:66:64:
90:59:34:d0:f5:bd:7f:53:67:ad:99:eb:e3:dc:c1:b0:a9:99:
71:e5:fd:f7:89:36:47:e1:26:2a:d5:34:92:6e:d6:d9:58:35:
30:99:90:6a:68:b9:a3:44:15:de:61:16:ba:0d:e9:b8:96:ec:
f8:37:3c:26:6f:82:e5:89:d0:d1:bd:0f:3a:9e:8e:16:bb:37:
52:d4:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:39 2025 by rpki-client