Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File: B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier: L6889sCJs168hMp9m6qE5sSEJ/ThoqMTx9IoM6esH5w=
Subject key identifier: 5E:A7:B3:A9:BB:70:75:43:1A:6A:8A:54:AA:07:11:A0:C2:0E:54:B1
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer: /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial: 0197B5FC6A32C8628FBF8734319AC5CE794C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 10:01:47 +0000
Manifest this update: Sat 28 Jun 2025 10:01:47 +0000
Manifest next update: Sun 29 Jun 2025 10:01:47 +0000
Files and hashes: 1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: v3VntqNiaC9fGvWJfgTrcYRlX/Yt0WXTUVVNwavXOyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:6a:32:c8:62:8f:bf:87:34:31:9a:c5:ce:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Validity
Not Before: Jun 28 10:01:47 2025 GMT
Not After : Jun 29 10:01:47 2025 GMT
Subject: CN=5ea7b3a9bb7075431a6a8a54aa0711a0c20e54b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:f1:20:30:19:72:a1:d5:da:cb:b2:ff:83:
7f:12:03:11:f1:fb:67:05:2d:b0:71:42:ce:d8:c9:
e7:4a:8b:3e:64:e8:6c:66:ad:f4:03:99:de:83:7c:
09:5b:ea:bf:a2:29:54:93:96:3f:00:a4:b6:e9:7d:
2d:70:28:0c:c0:7c:06:15:7d:39:be:56:70:09:ae:
c3:54:d3:2a:12:20:ae:d6:61:ca:77:1e:fc:41:e8:
0e:5c:84:f0:d5:1f:ba:bd:e8:f8:e1:b8:e1:8c:f7:
23:5b:20:23:ca:27:37:4b:57:42:41:8f:18:90:c1:
fd:b2:43:a5:45:1d:58:f1:eb:f6:ac:a0:f9:18:ac:
9f:08:b1:04:a8:0c:3f:1f:63:77:19:8a:35:41:9e:
2b:05:c6:0d:70:d8:c9:33:2a:3a:78:35:a8:42:4b:
c0:32:2b:77:db:58:15:f2:e7:05:06:02:c7:0e:22:
ca:84:f5:ce:95:c4:60:dd:9f:dc:2a:a0:13:6a:f8:
e6:81:6a:07:7f:81:63:1b:bd:12:95:86:57:d7:84:
27:01:36:8f:63:3b:f5:89:a8:55:0a:57:06:a9:01:
e8:61:e6:fe:2d:a5:cf:34:a6:ee:f7:b8:0d:4e:cf:
1c:16:56:2d:88:94:64:ef:c2:17:f5:72:ad:64:f1:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:B3:A9:BB:70:75:43:1A:6A:8A:54:AA:07:11:A0:C2:0E:54:B1
X509v3 Authority Key Identifier:
keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:18:32:c7:1d:04:3e:09:c8:57:71:32:cc:ee:4a:9c:46:
07:2e:0d:79:0e:a9:d5:b9:de:7f:c2:ae:d8:26:f7:57:01:fd:
cc:8b:ab:10:3c:7c:ce:e6:c1:33:29:8e:8c:ac:45:9f:74:7b:
de:d1:6f:d8:54:74:c7:c2:b8:eb:f6:1b:a7:d7:07:d0:32:a4:
46:b6:c7:d1:e3:62:be:ff:3a:fe:95:0e:69:cd:ac:d3:73:e7:
0d:48:62:42:51:6c:b6:7c:82:91:8c:20:e4:9b:85:3f:1c:f5:
ef:ac:78:e4:0b:a1:f9:1b:3d:66:c2:28:1a:78:df:b0:ae:fa:
90:f1:ed:f9:c0:c5:3c:11:21:57:8c:58:02:10:ec:3f:e0:3c:
07:1a:4a:a6:2c:38:ea:77:f6:da:4d:b4:83:03:56:ba:7a:46:
f9:89:a6:36:37:c7:1e:ba:2b:52:de:cd:3a:cb:8a:12:37:d9:
c1:50:92:f6:18:7c:42:f1:03:1d:b1:1e:26:a4:22:14:53:b0:
cd:0e:50:c5:88:8b:ee:dd:c2:78:3a:a1:2a:4c:a1:0c:d0:6d:
43:a9:10:c2:94:ba:67:1f:68:dd:d9:1f:44:5a:90:e0:38:5c:
ca:92:8b:2f:60:56:1e:11:37:78:90:bc:1e:ff:ee:b4:9d:cb:
3d:6d:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:17 2025 by rpki-client