Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: YxZesWGHaPmAlxtVOnA9t327Q9H79rK2lI5Mv7Q4INo=
Subject key identifier: BF:27:43:AB:6B:77:77:27:3C:EB:57:5E:1A:01:CD:0E:4D:FC:4B:4C
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 0197B8C625FDC30FCF2D59DB3FF538DCD314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 23:01:22 +0000
Manifest this update: Sat 28 Jun 2025 23:01:22 +0000
Manifest next update: Sun 29 Jun 2025 23:01:22 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: 6liGEGsFSanZmbcJnOHAPsOI5J2N2OuVV3GMYMQtJxM=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:25:fd:c3:0f:cf:2d:59:db:3f:f5:38:dc:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Jun 28 23:01:22 2025 GMT
Not After : Jun 29 23:01:22 2025 GMT
Subject: CN=bf2743ab6b7777273ceb575e1a01cd0e4dfc4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:27:19:35:a6:c0:b8:31:6b:49:2c:9a:96:
56:98:c9:9c:48:47:b9:5e:20:57:23:1d:f6:ac:92:
54:7a:f4:b1:f7:0a:2a:08:f0:e3:0c:83:cb:72:a8:
6b:d4:d7:49:15:b1:73:32:e4:c5:ab:c2:6c:2b:6e:
b5:1e:70:e7:2d:26:5e:b1:3f:76:45:13:86:fe:fc:
b1:a6:ce:77:6b:f2:01:92:9f:6a:37:54:1c:35:09:
fc:97:e7:4f:0b:bc:34:97:58:aa:07:f7:a8:ac:c7:
e7:55:9d:94:4f:2c:3b:59:62:29:19:b5:ea:c8:bf:
72:37:9e:30:c8:3a:4e:c2:90:ae:fa:ba:c5:f1:c6:
97:c2:94:5f:9d:39:7f:99:69:e9:c4:ea:fe:ec:f0:
ae:11:9b:8a:97:95:44:d3:d0:39:c0:27:87:11:33:
34:ab:b9:41:bc:66:56:e2:20:d0:5e:df:61:7c:69:
da:65:9c:54:d9:68:9c:57:17:df:95:5a:13:5b:17:
bd:99:41:9f:1b:51:a9:22:e1:a7:9b:d0:f2:f1:8a:
ea:67:f0:04:81:28:8a:00:df:fb:a7:45:d3:7a:3c:
f4:3f:5f:91:36:fc:72:55:5b:d0:a9:d5:1c:93:4e:
a9:cc:d0:f6:f0:86:e7:d8:b1:17:fe:ea:ad:6c:99:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:43:AB:6B:77:77:27:3C:EB:57:5E:1A:01:CD:0E:4D:FC:4B:4C
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:49:e4:e2:f3:98:41:2d:ee:c1:88:ef:55:3c:ef:c6:5d:
f3:52:ce:75:86:26:f8:a7:45:62:14:12:02:2f:b6:cd:21:3a:
69:36:9d:97:64:e0:d1:b0:80:1b:83:06:3c:40:3a:39:52:3c:
13:f9:a6:74:72:fd:a6:55:de:d0:0c:04:ef:f4:ab:ab:03:58:
6c:ea:43:ed:15:58:7b:6a:4d:fb:28:41:91:02:3b:dc:02:07:
9c:17:83:66:a1:23:da:83:28:3e:a7:05:3d:63:ea:c2:7c:53:
3f:af:67:d9:92:7a:ed:6f:ef:1c:ab:1f:19:a3:a1:39:0a:64:
12:2e:3e:6d:98:55:69:85:ea:09:69:93:08:f5:96:61:cb:3c:
36:e4:dd:4d:9d:b8:3d:a5:b3:21:28:4d:86:2f:22:a0:cd:85:
4d:24:90:e2:bc:c5:7a:80:f8:18:9c:4f:36:38:fe:7a:32:81:
8d:d8:c4:0f:eb:7a:c4:ef:3d:f9:21:92:cd:35:20:52:83:8b:
6b:b5:6d:0c:fa:3f:7c:1b:5a:28:77:20:69:2e:ad:bc:18:b5:
32:74:8a:1f:b1:7e:48:72:30:93:8f:86:bf:63:36:82:3e:15:
03:30:19:e4:19:f7:20:f2:ba:d1:ac:4d:b8:4b:45:16:07:3b:
0c:3d:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:14 2025 by rpki-client