Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: 2IzgCBwbcOByVqXus1tGhInn6BUtKRLE5LDaQ4fhqGQ=
Subject key identifier: 2A:A8:7B:46:A8:4C:C0:28:90:F9:6E:FA:C0:CE:18:E8:EF:38:04:F7
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0197B6A087388095A2DAD013C577BFD2CF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: GPoYZ8asIKG/RC66G3SgNio8OeDG2Gd/+pydnXS0gP0=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:87:38:80:95:a2:da:d0:13:c5:77:bf:d2:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=2aa87b46a84cc02890f96efac0ce18e8ef3804f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:7e:41:84:d7:66:3d:66:44:32:14:7e:4b:
cf:c0:34:7e:3a:fe:e7:9e:1d:d8:69:f4:3d:f6:9a:
d4:8d:b5:ec:a1:7b:39:63:c7:83:b5:4b:df:38:1a:
3a:c8:13:93:7f:b9:60:0e:23:e5:84:de:83:1c:6a:
72:d0:1c:b7:a0:75:60:19:ab:0b:34:6f:38:d2:75:
6f:fc:45:48:ec:7e:5d:17:42:16:8a:b5:37:5f:ff:
c9:30:bf:fb:4a:e5:30:2b:a0:fc:27:4e:31:0e:71:
31:56:8f:eb:5a:86:c0:05:5c:6d:67:b1:91:5d:9d:
72:45:af:1a:85:75:41:d4:4a:cf:b8:e2:47:dc:c0:
e0:30:a5:f3:08:b0:c7:54:69:22:31:c4:81:ee:b6:
80:6a:70:3f:25:85:95:31:c2:3c:6d:fd:64:59:fa:
51:1c:13:a6:37:e8:06:99:d9:41:a6:0c:54:a9:e3:
73:7e:bc:8d:57:1b:9c:f8:aa:0f:3d:91:0e:72:14:
fc:68:f0:25:a7:02:ba:ae:70:4e:54:fe:8c:e3:d2:
0d:ef:35:50:49:eb:8c:df:fa:a4:ca:c6:7c:ce:82:
42:26:3c:5f:f0:e6:5c:ce:fa:b0:60:e7:0c:05:e0:
d6:e1:a7:3b:8b:e9:41:89:ba:57:36:c2:08:fe:98:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:7B:46:A8:4C:C0:28:90:F9:6E:FA:C0:CE:18:E8:EF:38:04:F7
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6a:ab:d5:85:28:b9:27:35:61:35:a6:78:ec:5f:bb:47:51:
de:07:39:05:45:63:e2:e0:db:27:d2:b7:fe:73:f7:4f:37:07:
9f:20:4b:ae:e3:45:c7:03:80:42:60:5b:0c:8c:31:59:8a:09:
f8:05:8e:d2:f4:33:a2:05:3c:3d:de:f9:dc:f1:1c:da:2f:ef:
21:3f:22:05:be:8e:0e:3e:f6:45:45:a3:60:0c:ad:f7:51:62:
19:87:c7:4f:80:0e:06:8e:dc:4f:9b:95:3e:a5:c6:39:e8:4b:
34:90:75:a8:2f:5f:88:4d:e3:e9:da:3a:70:65:97:62:62:34:
41:34:f8:7d:1d:5d:d8:d5:3c:91:de:9a:4b:8d:da:fb:67:78:
8a:67:3d:eb:15:a5:03:b7:06:d5:10:31:44:9e:e0:9a:62:9d:
1d:12:0f:98:11:23:51:3d:af:35:18:c0:51:b4:92:18:55:65:
fc:e6:3b:a8:15:6e:db:35:34:c7:00:9b:2e:5a:e1:b8:fa:79:
19:96:ba:89:e9:f7:a1:93:c7:d0:05:0d:83:8e:0b:a7:bf:58:
b3:05:6f:78:6c:aa:19:cb:dd:e5:5d:d7:ef:ab:21:17:c4:9b:
4e:08:d2:1e:08:c6:23:e4:fa:10:5c:40:d9:e4:fb:22:2a:85:
b1:10:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:18 2025 by rpki-client