Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: ZpI3/tGtyqiYiWOQes+RuodrQtAjC74pwFH8qC1kNbo=
Subject key identifier: 32:ED:C3:1A:28:1A:26:18:33:30:BB:80:0B:44:63:AF:2C:51:2D:7E
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 0197B88FE75332A101DCC70DFA602B8F2DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0915
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: WbQXoO44dMKapDhRBIrttHZS5RO2Kn9z70rDdVg28+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e7:53:32:a1:01:dc:c7:0d:fa:60:2b:8f:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=32edc31a281a26183330bb800b4463af2c512d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:89:b1:33:17:9e:e0:be:98:c4:56:a6:6d:
0c:d0:0a:04:61:89:92:65:f3:85:41:7e:bb:a7:5d:
54:51:60:10:87:cb:19:bc:c3:b3:55:85:1b:54:9f:
50:c7:0b:8f:7b:7b:d5:79:a8:05:be:b3:bc:fe:85:
0c:9b:b6:7a:4a:26:d1:ab:65:f0:3a:b6:6b:29:dd:
f9:31:d8:d1:b0:e5:5c:c8:ca:0a:fc:c5:61:20:1e:
09:16:db:8d:a9:18:70:0d:0c:f0:17:f6:cb:b0:ca:
4b:25:5b:bf:fa:cf:b1:ee:bb:33:1f:c4:46:59:2c:
4a:23:ac:20:47:4a:93:9d:56:c4:04:b3:e3:71:5a:
fa:e2:16:d8:d3:2e:d8:cb:ec:52:2e:00:17:a7:d4:
f8:40:ff:33:ae:5b:ef:55:e7:3f:53:05:82:04:40:
72:91:88:e3:08:27:6d:20:f6:23:df:e5:f8:f4:a4:
cd:6f:85:93:b1:81:e4:29:34:67:7e:c1:0a:40:d2:
bf:9e:9d:fc:dc:fd:97:2d:62:10:23:d8:7f:1b:d4:
72:16:e8:a6:b1:a1:29:a9:f8:d6:9a:ed:38:1e:2e:
2e:03:49:78:59:1e:dd:a7:f0:0d:89:e4:81:4f:18:
5c:9f:9f:6c:22:8e:22:b1:23:d9:08:d6:7e:da:ed:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:C3:1A:28:1A:26:18:33:30:BB:80:0B:44:63:AF:2C:51:2D:7E
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:0e:3d:65:cd:9d:3f:cc:ba:2b:e0:6a:3c:db:57:2c:6a:
f5:3d:ca:5c:f1:1a:42:63:bd:ff:d3:72:28:d1:78:9a:d0:54:
31:7e:2a:57:e5:0e:b8:03:d4:69:50:ad:a0:eb:44:9a:27:a7:
47:78:c8:4f:7f:05:37:99:16:17:6f:61:5d:96:38:80:68:7e:
96:f4:e8:90:ee:f5:96:16:af:6a:48:7a:2a:5b:92:3e:98:2c:
98:37:af:87:93:56:3a:dc:20:33:be:a3:a1:79:f8:27:74:33:
6d:89:0a:85:57:b0:58:08:18:f1:1c:e2:a8:a5:f7:8c:9b:11:
98:01:ba:55:b1:33:f5:35:e8:40:1c:ac:ce:c0:97:01:65:bb:
45:a4:3e:fb:65:af:6b:e4:36:47:bf:a4:7c:2c:ce:c8:5f:28:
ff:31:d0:b9:7f:d5:b1:7c:ed:05:58:ae:dc:9e:72:d8:e5:9a:
94:c5:c1:d4:25:1d:81:33:c8:0e:29:9f:2e:9f:1e:d0:42:96:
6c:f1:51:45:e6:d5:eb:78:38:e9:bc:f4:41:f0:15:11:a9:27:
e8:d4:2d:de:c3:81:82:6d:14:74:85:9c:d5:44:2e:9d:29:22:
08:dc:fc:78:80:51:0f:c6:17:02:26:92:bf:1f:dd:36:f9:d5:
bc:65:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:46 2025 by rpki-client