Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: PCkPQZFfZB629efO/ThhZh41DV+ISPQG4NS0RgvW2zk=
Subject key identifier: 51:B9:05:6E:7C:DA:7A:DA:E3:10:00:87:1D:E5:1A:04:28:3F:8F:FD
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0197B70EF51E9C0788F16B753AFB5CE9C77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0EC3
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: 4Ojmb49UyRpsW9FU1DLuiV44aPZYXsOEO+088Rslj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f5:1e:9c:07:88:f1:6b:75:3a:fb:5c:e9:c7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=51b9056e7cda7adae31000871de51a04283f8ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:5b:3d:3b:14:40:d0:41:58:00:2a:aa:4c:
53:49:02:26:7a:42:f0:11:6a:f7:42:a5:5e:94:7b:
b9:c6:7d:62:40:2e:61:d3:46:a9:37:22:55:7f:e4:
08:3b:09:c2:60:d0:41:2c:75:8b:0f:8e:20:4f:2b:
a6:28:fc:ca:60:d1:23:1a:ee:e8:97:64:d0:4c:6b:
7d:cf:1d:f8:35:d8:63:a9:94:c0:4c:84:98:ba:16:
94:fd:c9:24:f4:94:33:05:7d:e2:69:07:80:93:c3:
40:d6:92:0a:e7:92:45:4e:6b:d5:79:5f:a3:54:04:
44:02:1b:6e:d0:59:80:a9:1e:cb:45:43:ab:c0:8b:
92:38:81:40:ad:58:4c:3a:70:0a:20:0a:3b:87:0d:
2a:ed:be:2f:5f:21:41:ee:97:25:7a:5e:7c:a7:6d:
54:cc:c2:ca:93:eb:1c:c2:c4:ed:16:12:65:9c:96:
c3:3d:bb:32:89:c8:71:de:e2:85:78:c7:ff:ab:d1:
b0:9d:8b:27:50:b3:9e:a0:b9:29:47:69:fe:46:63:
65:60:02:25:fd:c1:64:2b:ea:d9:60:c0:a7:62:27:
ac:63:bf:b1:37:a1:a2:72:34:32:5a:73:58:cf:13:
ab:c4:00:55:fc:ce:76:60:07:38:1e:d0:26:40:19:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:05:6E:7C:DA:7A:DA:E3:10:00:87:1D:E5:1A:04:28:3F:8F:FD
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bb:d5:e5:13:91:8e:7a:4b:74:b4:ca:22:ef:14:ea:7f:57:
d0:62:54:03:1b:cd:3c:af:1c:d3:5e:8d:90:9a:8e:20:7b:3a:
ba:81:62:6b:10:a9:d9:91:a0:a2:f7:a9:45:ab:b4:47:4e:71:
56:60:0b:20:05:f7:be:3a:0d:49:51:e8:5f:8d:c2:96:18:74:
19:83:ef:65:3f:80:d3:bd:e0:89:59:2f:a5:f5:74:87:0c:24:
8d:38:e5:d4:9d:8d:b6:50:97:d0:09:8d:61:22:6f:9d:a1:b0:
37:f1:a7:f3:60:ba:f1:ab:38:e6:fd:94:ce:75:fa:8b:4f:1f:
2d:e8:83:af:ca:8c:b4:c3:24:ae:4b:cd:48:d5:2b:f9:b2:b2:
45:b4:bc:bc:47:4f:25:de:e6:61:0f:24:74:0b:e6:e5:ce:9c:
87:8c:49:ff:d4:a1:82:97:57:04:cf:ac:29:fe:b7:0d:9b:50:
fe:ea:66:90:5c:fb:2b:c8:8f:16:9d:25:23:21:eb:a8:4d:96:
83:c7:c9:00:5c:23:e1:8c:69:c1:58:2c:bb:8f:14:70:d0:24:
ad:8d:e8:76:55:3a:3a:72:3c:09:a9:ff:03:34:5d:bc:d7:23:
ff:b5:e2:3b:3b:f1:26:64:11:4c:5c:15:e5:a6:92:e8:10:19:
95:47:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:20 2025 by rpki-client