Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: Bbrs0z4RgpZZFHr6NNTyRzNqgiGKHAA9+E9611A1Fn0=
Subject key identifier: F9:FC:E6:20:A3:75:97:5F:85:01:CE:52:00:59:AC:36:69:25:65:72
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 0197B7EA5D8E48AC5320A6B36B60D8257388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: 2xTy+pq5N8T+/Yqkok0Wvpew2ZTf/vW697evVrVuYAo=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5d:8e:48:ac:53:20:a6:b3:6b:60:d8:25:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=f9fce620a375975f8501ce520059ac3669256572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:8f:30:c1:20:88:cd:3f:4d:15:a7:d2:02:
19:4f:32:55:49:74:74:af:1c:60:ec:f1:20:64:15:
20:7e:e2:7a:a5:c2:1a:40:e2:2f:2b:a4:29:ca:dd:
0c:51:96:82:24:73:3a:9a:fa:88:60:e3:38:86:a9:
f2:6f:18:66:da:56:2c:26:b6:93:c0:f7:b3:66:83:
c0:64:87:38:53:d3:e2:21:e4:1c:97:f5:99:96:96:
e6:da:99:d5:87:c9:a9:ae:bd:8e:a8:d9:cc:56:69:
23:7d:10:0d:aa:4f:f3:02:3e:4e:c0:49:45:3a:0d:
2d:37:1d:7b:54:48:73:9c:65:60:d6:c5:d9:a3:82:
9c:1e:08:93:09:66:4b:9b:73:93:4d:85:69:69:dc:
e4:bd:8c:23:0c:5f:52:19:63:15:24:81:95:0f:87:
b2:16:3c:c3:90:b3:59:a2:51:e9:1b:4e:98:e2:19:
26:67:3b:41:f2:8c:7b:20:0e:d3:a5:12:93:47:9b:
bf:b2:90:da:32:56:73:cc:59:1a:ee:ed:c8:40:73:
c5:38:7c:3c:94:4c:82:29:21:bb:8d:f4:4d:cd:ea:
e8:65:92:65:23:b6:30:78:6e:96:59:81:5b:64:71:
eb:10:ee:c5:b0:f5:7a:47:16:6c:cb:0e:96:3b:3e:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:E6:20:A3:75:97:5F:85:01:CE:52:00:59:AC:36:69:25:65:72
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:ae:aa:05:3d:17:55:fb:96:56:2f:d5:89:d9:f7:f8:a7:
b5:c6:4a:de:8c:1f:b6:58:9d:13:81:49:de:ae:ca:a1:68:ed:
ef:ee:de:66:ff:d4:82:76:5c:70:74:2d:58:0d:39:3f:b0:07:
f0:11:5d:7e:b5:b7:f6:9c:66:f3:ae:99:c0:a3:38:9e:bd:a8:
26:8d:d7:47:85:3d:e7:38:96:8a:0e:54:15:39:13:07:16:d4:
7a:ab:93:a6:99:c1:bd:7a:60:2f:ee:89:79:64:c1:4f:1a:c9:
5d:65:79:00:31:57:4e:84:23:51:1c:5a:2c:af:3b:4b:f9:ad:
57:c1:8b:14:20:24:f6:ab:f5:e7:91:b1:d8:8c:d7:3f:36:3d:
2e:b4:68:02:b5:3a:d3:82:db:81:16:56:4e:b1:fc:33:72:2c:
7c:b4:3e:f0:a1:4b:45:e2:3b:e5:87:1a:56:7a:02:d9:df:50:
80:2d:ad:8d:bc:09:48:54:c6:87:b9:1f:df:d7:9a:d9:8c:bc:
ac:e5:7d:6c:28:4d:df:34:e5:f5:19:32:4e:91:6d:05:d7:74:
5c:eb:8e:85:36:e9:c9:bd:69:98:18:4b:0e:16:76:73:22:a8:
f4:c8:34:db:40:d6:16:5f:25:96:ac:43:c2:23:d6:d8:98:d5:
93:15:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:48 2025 by rpki-client