Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: AQk5maGN1IXAG1vn5ek1LucsXeSLpOGIslhEGz9VaMM=
Subject key identifier: C9:8D:89:99:DC:14:27:A7:8A:E6:71:65:AC:C0:1F:47:81:0C:65:36
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 0197B6A0AE6EE80D63474AA2A805742EA348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 1122
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: E5nvkIggpwwuJy04/O0djb/F+m5InMjeoqQcLpOQZMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ae:6e:e8:0d:63:47:4a:a2:a8:05:74:2e:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=c98d8999dc1427a78ae67165acc01f47810c6536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:9b:b5:32:76:d9:28:af:93:4e:5c:cf:7d:
51:aa:c9:dc:a2:6c:38:91:98:f6:fe:16:2d:fe:a0:
54:ae:2f:cb:09:0f:04:5a:6c:dd:6f:ab:33:15:b1:
4d:ea:3a:a9:8d:c7:64:f8:30:1c:23:34:ba:c1:01:
b3:97:a7:e1:16:f2:81:2c:5b:1d:36:d8:24:82:7e:
19:48:0b:60:37:79:83:7d:4a:2f:8c:f8:18:7d:bf:
f9:1b:28:d5:69:e7:bf:39:4d:72:76:c4:af:3b:cd:
ff:54:93:ff:f1:c1:8f:4e:fd:e0:fb:b8:37:2a:9d:
83:9b:5c:d1:38:96:19:ed:74:9e:87:ca:38:59:79:
9e:21:92:bd:9f:49:9f:c5:f1:ed:79:bf:bf:59:d1:
af:b6:c5:05:d0:6f:21:32:30:a2:54:53:c0:b7:4a:
05:5c:4c:a8:bd:c1:39:02:6d:67:fd:f3:38:9c:6f:
22:84:64:32:94:da:ba:0e:8f:57:5f:f0:36:48:64:
49:51:db:fe:e2:11:61:5e:25:16:31:e9:64:73:39:
84:98:ef:22:89:64:e8:0d:9b:a0:96:c2:8e:5d:b5:
a3:20:85:9b:1e:91:86:a3:9d:29:a4:bc:a4:b9:e7:
31:0b:f9:d1:01:9e:64:01:a3:11:9a:c5:91:18:a0:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:89:99:DC:14:27:A7:8A:E6:71:65:AC:C0:1F:47:81:0C:65:36
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:b4:50:36:d1:da:3a:0f:6d:0c:3b:30:ae:46:14:4a:29:
dd:65:fd:fd:a3:98:cb:64:6a:e7:22:fb:ba:12:d9:cd:6a:96:
da:a6:d3:5c:90:f9:29:6e:0a:4d:e9:56:37:98:30:bc:a2:8c:
01:cf:b9:2e:97:82:92:17:64:be:12:55:04:33:07:9d:3c:65:
c8:f3:e8:0e:27:9b:33:0f:dd:42:a7:8b:b4:42:88:23:fc:24:
a9:f8:86:55:c7:59:9f:b6:39:2d:7f:31:04:e9:de:b7:80:7a:
a0:d0:ab:87:9d:c4:4c:3d:6c:b9:c5:75:bb:d4:11:b8:78:cc:
d0:b3:f5:a0:d9:39:2a:41:a6:8b:8c:87:ae:64:17:6c:46:3d:
f2:e5:01:23:67:3d:f3:66:97:fd:31:e5:88:66:59:9b:ca:80:
bf:39:4f:1f:e5:90:71:42:8e:5e:c4:90:a3:b8:56:cb:55:79:
de:31:74:03:d0:79:93:2b:39:3b:5f:b7:e4:58:25:f7:73:b9:
5c:87:f1:46:ba:e0:aa:a2:0e:31:47:9b:ab:e3:f3:54:9e:99:
38:3b:a4:a2:d9:ac:d2:fc:c4:c3:9d:fe:b5:c4:80:1c:c7:32:
7e:1b:4c:58:d7:f6:52:e9:68:90:f8:3d:a1:e3:e6:d6:34:f4:
96:e9:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:54 2025 by rpki-client