
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: znS0Bb3hjM81vIlCDOYtU2s1EAnmJjau2eip+5C2exQ=
Subject key identifier: B9:1B:07:C2:08:B5:4E:E5:BF:24:C2:DE:D2:37:9C:35:B2:7F:44:89
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 0197B77C82F039C268448E14FFFB259EF3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: Uu+ttCwqTvJLODLmMLCIaG9C3CVu1Z66RGNVw/GzVvo=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:82:f0:39:c2:68:44:8e:14:ff:fb:25:9e:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=b91b07c208b54ee5bf24c2ded2379c35b27f4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:57:b3:b2:9d:af:fc:ff:4c:00:41:2b:7a:
04:34:7c:fd:76:5d:96:9e:74:3a:90:66:33:01:e7:
45:fd:1c:fa:3d:de:4b:7b:5b:21:19:37:5a:f9:7a:
c4:e7:1a:bb:c9:10:ec:7d:b5:02:12:e4:de:d5:a7:
2b:1a:21:64:e9:81:ae:11:01:f7:36:c4:49:89:2b:
cd:a5:32:75:fc:e5:f0:45:24:6a:ae:9a:a6:26:7b:
1e:bd:a2:74:00:1c:95:72:c8:6f:e3:df:94:cf:5d:
18:b2:af:c0:97:20:39:be:2f:18:14:fa:24:8a:0f:
3a:ae:12:ea:ca:c3:79:3d:6a:45:15:9f:9a:7a:41:
3f:74:2b:56:ac:03:c7:96:ab:91:f5:f5:df:b8:76:
07:61:32:c1:7b:5f:8a:46:e0:a0:9a:d8:81:3b:5b:
39:67:31:67:05:03:09:01:f2:6e:e3:a3:dd:2f:d3:
02:d3:74:ca:87:12:7c:d5:29:53:a4:4d:92:4c:64:
6f:e1:89:8d:8d:be:da:82:d7:f3:52:85:ca:15:fc:
b6:82:e1:12:b8:b3:d9:75:de:76:7d:b6:5a:0b:cd:
93:0c:38:e1:7f:8e:66:ce:9d:02:25:1f:a8:dd:cf:
e8:e8:4c:66:2d:86:30:71:a0:1a:84:04:61:87:8b:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:07:C2:08:B5:4E:E5:BF:24:C2:DE:D2:37:9C:35:B2:7F:44:89
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:4a:0f:bc:07:cb:9c:02:7a:a7:cb:49:31:b4:16:fa:2e:
76:d8:99:15:15:30:16:27:21:f3:88:ff:dd:37:ae:5a:67:e2:
c7:57:e3:e0:b1:75:a7:ed:6d:dd:99:73:09:d2:33:fa:8d:3b:
41:38:3b:6e:f8:ae:90:8f:1f:17:f7:73:e0:f5:4d:2f:40:a6:
8f:f4:15:3f:07:26:9c:9b:66:8e:d2:85:f8:2f:c4:b4:a1:2a:
b4:c9:10:98:34:e9:cc:05:5a:65:9d:ce:a7:64:45:6a:62:48:
67:16:63:0b:f4:06:8c:eb:f9:48:53:8d:95:14:ca:15:bc:f1:
3b:01:11:c2:f2:bc:17:c0:cf:1e:78:a2:7e:cc:dd:01:05:96:
bf:6e:70:52:ec:7f:81:19:31:15:27:ca:6a:07:9d:ae:9f:bc:
08:97:97:5a:70:84:31:82:62:5d:45:20:6f:6d:84:02:49:46:
51:4d:30:0e:a8:3f:3e:83:80:49:9c:43:33:ea:05:28:95:d0:
0f:c6:16:bc:a3:5e:f3:29:e7:7d:33:f9:e2:d8:51:00:3e:46:
69:b4:40:9d:c6:d3:fb:87:ed:14:51:2e:bb:f8:1d:ed:34:66:
72:9b:b0:24:bb:b7:a0:49:ca:0f:c2:bf:a2:c7:9e:ff:c4:45:
b4:f1:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:27 2025 by rpki-client