
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: Lf5eUbrgGV8F1N2sPQ4Y3PFhSnxER5apBKDT5/dXVfQ=
Subject key identifier: 33:94:DE:6A:3D:A5:85:E4:2C:4B:A8:CE:A1:AB:28:56:78:7B:53:1A
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 0197B82146B6C0137A870782CE486B019EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: cQlDu7QDLDSkejltIKyeElMRHob1QXE3AsFlhLVDpwE=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:46:b6:c0:13:7a:87:07:82:ce:48:6b:01:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=3394de6a3da585e42c4ba8cea1ab2856787b531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:8a:8c:e3:8f:8c:f2:66:79:9d:88:d5:ad:
e9:c2:4d:38:d6:29:3a:50:a7:ac:5f:7e:bc:81:20:
a6:2c:f0:bd:79:cd:46:51:5b:f5:57:ac:7e:d3:87:
97:6e:bd:14:b6:d5:25:7b:60:62:5d:9e:3f:2c:86:
a3:3b:d5:15:49:74:00:07:af:a8:34:59:23:83:51:
db:e7:a6:a7:93:9e:a0:51:1c:05:c2:5a:c9:c3:5b:
4a:5f:57:31:ec:1b:36:c4:47:53:f4:4c:0b:26:d6:
a6:b8:7a:1b:38:7a:e9:ce:b6:13:de:b7:f0:02:62:
80:87:39:cb:df:e8:7a:78:6e:20:3b:9e:0f:cb:ce:
31:bb:a1:b7:29:78:cc:cd:a6:d1:13:1b:e5:a8:73:
fb:c6:8a:16:5a:fb:3a:66:29:37:31:63:9b:dd:84:
2e:a7:ca:8d:e7:d0:26:66:e4:b2:10:0e:18:95:a4:
a0:26:81:23:70:5a:57:37:08:6a:97:7e:c7:01:93:
4f:a3:65:6b:45:bc:ac:45:6e:c3:ff:1d:df:a0:45:
87:65:ab:98:25:f0:87:8f:a8:60:5c:93:13:51:0d:
e3:b9:27:1b:b9:01:20:99:d1:e9:9e:c0:b7:6c:71:
73:3a:de:6f:bc:c2:ce:97:9b:90:9c:3e:65:d2:0f:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:DE:6A:3D:A5:85:E4:2C:4B:A8:CE:A1:AB:28:56:78:7B:53:1A
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b2:bd:74:be:ca:5c:3d:f5:af:f4:dc:8d:67:24:30:e6:93:
f7:33:43:eb:b8:fd:71:59:13:56:9d:8c:a8:3d:59:02:7b:5f:
02:fd:bc:29:83:fc:6c:ac:92:72:e6:27:15:2d:16:44:82:9b:
3f:11:b7:0a:5f:99:b1:db:c2:64:2b:7d:8a:90:69:10:f0:24:
75:1a:c5:cb:09:28:fa:23:86:46:17:56:24:14:df:09:70:08:
27:6c:1d:47:f1:50:a6:3a:e7:6c:0f:f3:f0:7f:37:af:7f:67:
b7:bf:1f:25:87:f2:ed:6b:fd:7d:c2:a9:00:96:17:90:1f:df:
e5:73:6b:a7:0f:32:bb:90:5f:3c:d9:c0:95:14:03:16:bf:0c:
45:19:90:3e:2b:20:4e:5a:10:c7:2b:c2:34:71:cc:98:6e:55:
21:a4:af:76:a8:3c:34:23:be:ad:ac:cc:11:5e:f7:8e:c4:11:
1f:49:82:e6:d3:2b:d5:d7:1d:0c:61:ba:a0:76:85:c2:dc:3c:
02:8b:9e:d8:4c:d5:b5:60:f8:83:8c:dd:b2:c1:eb:48:3d:4e:
d9:1b:d6:34:ab:a7:61:f5:6a:26:af:1b:28:77:8d:2f:ab:4b:
4b:0d:c4:1c:38:2a:59:c7:24:8b:07:dd:fb:29:03:e1:66:b4:
b6:4a:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:22 2025 by rpki-client