Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: hxelYzLC8UtVXJSke9AKqnSmTF8nvZhjPbr89ANGhFs=
Subject key identifier: 1D:7C:65:D8:4B:BF:02:F8:49:27:C5:99:3A:0A:B3:5F:55:FA:4C:1F
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 0197B632D79412024EAD57945CFEB81284F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 12B7
Signing time: Sat 28 Jun 2025 11:01:14 +0000
Manifest this update: Sat 28 Jun 2025 11:01:14 +0000
Manifest next update: Sun 29 Jun 2025 11:01:14 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: xsKTAAx9mhJjcdMCvlrawhkcBUbrgkWPCziqUFng58I=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d7:94:12:02:4e:ad:57:94:5c:fe:b8:12:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jun 28 11:01:14 2025 GMT
Not After : Jun 29 11:01:14 2025 GMT
Subject: CN=1d7c65d84bbf02f84927c5993a0ab35f55fa4c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:61:00:eb:87:64:a8:db:cb:df:04:e8:36:
b1:08:48:83:ba:6b:92:c5:f7:c7:c6:d5:67:5c:22:
0a:c0:fa:2a:64:a3:20:e5:82:25:8d:19:2e:44:30:
ad:19:4c:c4:a1:d3:0d:95:58:4f:2e:44:ff:eb:96:
32:f5:f3:21:98:6b:1a:8e:51:e3:8e:d8:37:59:d7:
43:cb:48:31:95:7d:79:50:43:d5:4b:8d:ea:4b:01:
a5:71:58:11:97:d0:85:71:7f:9f:6c:f1:03:23:87:
f5:c9:5d:ea:a2:d5:26:c1:d6:db:9c:05:29:93:6b:
36:56:28:ea:c9:e8:64:00:fa:93:d9:97:fb:88:a8:
a7:5b:ee:7f:11:45:81:ff:f8:44:53:43:7e:61:33:
35:18:10:4c:b9:60:37:36:de:a8:4e:c7:0d:da:e0:
7b:b2:87:f8:15:7b:cb:8e:46:f9:94:01:cf:5d:c2:
67:2f:ae:1e:15:51:32:90:de:34:e7:b3:b8:19:e1:
49:44:b0:6d:29:12:9b:5b:c8:3f:99:5d:83:86:70:
e0:0d:e0:db:20:24:4a:21:34:4a:59:9f:ee:c0:9a:
45:ea:e2:71:32:01:08:70:ac:d5:b2:1b:72:f7:12:
71:b0:24:1a:e0:1d:10:1d:ef:03:e3:4d:5d:54:06:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:65:D8:4B:BF:02:F8:49:27:C5:99:3A:0A:B3:5F:55:FA:4C:1F
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:89:35:21:33:51:e0:36:11:33:04:7c:e4:fd:d2:06:18:
35:f8:1f:b3:38:b5:2d:f0:dc:98:de:47:91:d9:bd:03:63:d2:
2c:38:19:f1:83:4d:f1:b8:77:0c:a0:ca:26:72:f9:7e:ed:0f:
a9:f2:fd:ab:a6:29:36:8b:2b:31:83:d7:71:77:bc:a8:ca:2a:
a9:3f:bd:e9:d7:28:e1:04:ba:35:ac:26:f6:0a:c2:bf:e3:d8:
12:73:7f:4f:07:36:98:59:32:49:f7:da:cc:bd:6b:50:2c:25:
78:5f:9a:1e:72:45:91:f8:0f:ae:89:b0:7f:7e:21:62:62:8c:
e6:86:aa:e9:e9:df:81:fb:e0:4d:3f:98:33:ec:27:39:63:5d:
1c:f0:5a:03:1e:28:8f:8b:b3:0a:f5:37:07:91:1a:cd:d5:65:
6b:00:0d:7d:bd:e0:b8:cc:83:e0:74:bc:e3:0e:09:25:ee:d8:
4d:c4:d3:8d:81:5e:ed:e1:ad:ac:e5:f4:d9:f5:9a:bc:e1:22:
c4:74:bd:ef:24:7e:49:bf:f4:e3:e2:28:70:ea:44:91:4d:0e:
de:27:ce:f7:86:5e:b1:ab:3b:5e:97:1e:4f:03:6e:42:15:76:
3f:fe:57:32:c9:4b:fb:12:a8:e5:22:3e:dc:48:bd:29:c1:9b:
64:7e:ef:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MteUEgJOrVeUXP64EoT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjUwNjI4MTEwMTE0WhcNMjUwNjI5MTEwMTE0WjAzMTEwLwYDVQQD
EygxZDdjNjVkODRiYmYwMmY4NDkyN2M1OTkzYTBhYjM1ZjU1ZmE0YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWdhAOuHZKjby98E6DaxCEiDumuS
xffHxtVnXCIKwPoqZKMg5YIljRkuRDCtGUzEodMNlVhPLkT/65Yy9fMhmGsajlHj
jtg3WddDy0gxlX15UEPVS43qSwGlcVgRl9CFcX+fbPEDI4f1yV3qotUmwdbbnAUp
k2s2VijqyehkAPqT2Zf7iKinW+5/EUWB//hEU0N+YTM1GBBMuWA3Nt6oTscN2uB7
sof4FXvLjkb5lAHPXcJnL64eFVEykN4057O4GeFJRLBtKRKbW8g/mV2DhnDgDeDb
ICRKITRKWZ/uwJpF6uJxMgEIcKzVshty9xJxsCQa4B0QHe8D401dVAYAjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB18ZdhLvwL4SSfFmToKs19V+kwfMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO82JNSEz
UeA2ETMEfOT90gYYNfgfszi1LfDcmN5Hkdm9A2PSLDgZ8YNN8bh3DKDKJnL5fu0P
qfL9q6YpNosrMYPXcXe8qMoqqT+96dco4QS6Nawm9grCv+PYEnN/Twc2mFkySffa
zL1rUCwleF+aHnJFkfgPromwf34hYmKM5oaq6enfgfvgTT+YM+wnOWNdHPBaAx4o
j4uzCvU3B5EazdVlawANfb3guMyD4HS84w4JJe7YTcTTjYFe7eGtrOX02fWavOEi
xHS97yR+Sb/04+IocOpEkU0O3ifO94Zesas7XpceTwNuQhV2P/5XMslL+xKo5SI+
3Ei9KcGbZH7vMA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:50 2025 by rpki-client