Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: jLa9an/6Rw6rKi/dJ5mWYO668yCid1j6OitJxuSNJkY=
Subject key identifier: 11:CD:0F:98:CF:15:7D:F6:83:85:C3:D1:01:18:09:F1:60:E9:43:7A
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 0197B96AC9E4AD66B96A542D986E425CFDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 02:01:12 +0000
Manifest this update: Sun 29 Jun 2025 02:01:12 +0000
Manifest next update: Mon 30 Jun 2025 02:01:12 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: JrkP/GkXg6sWNUFYivSvcuuKKSz97Zjax3YloKNvyqM=)
2: qM88UnBEO7hJIOXTGn5mpC9drZ4.roa (hash: Zjl7M5YF5NfW5doz7UZ6OWeeqYFMW7XiaZIij5TEofI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c9:e4:ad:66:b9:6a:54:2d:98:6e:42:5c:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jun 29 02:01:12 2025 GMT
Not After : Jun 30 02:01:12 2025 GMT
Subject: CN=11cd0f98cf157df68385c3d1011809f160e9437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:0e:66:55:4f:55:3c:c6:11:cc:86:5e:53:
d7:f9:84:67:b5:cc:44:98:c9:a6:7f:10:e4:5d:7b:
fa:3e:ed:79:3f:ba:e2:c2:06:1c:6d:28:03:a7:b8:
57:56:5c:fd:4c:ae:76:4c:d9:ac:f6:6d:37:55:ff:
79:ef:cf:95:e1:21:1e:bf:62:60:ea:9d:26:87:21:
f7:fb:f4:20:98:a7:5e:15:8a:89:7f:ec:9d:f3:6f:
b1:b5:34:f2:eb:51:5f:e2:5e:79:9c:cb:d9:8e:12:
c4:bd:27:97:d5:1d:fc:c5:11:22:9f:54:ec:3a:fb:
43:2f:ba:7a:de:be:d8:3e:d4:0c:62:1b:9b:30:13:
8b:a5:58:ed:47:61:8d:03:3e:8f:00:dc:1c:c9:3a:
6d:6c:25:db:25:f3:57:62:a7:07:82:8b:fb:87:41:
f9:e6:a3:91:9f:13:91:50:43:83:57:46:28:36:f3:
40:bb:3c:d4:f0:ee:db:5d:e0:30:6c:b7:07:66:61:
98:5e:71:2e:be:d3:cb:c0:fd:33:c9:54:41:32:1a:
46:e9:82:9c:61:6b:2b:08:4f:af:1a:f9:5f:3c:2b:
b7:1a:60:80:c0:77:3b:1b:12:67:73:88:a1:9d:1d:
bd:16:b7:2c:6d:7a:83:f1:62:b7:1c:e1:3d:5c:90:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:0F:98:CF:15:7D:F6:83:85:C3:D1:01:18:09:F1:60:E9:43:7A
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fc:2d:b0:2d:bf:ad:e0:96:35:79:fa:ca:90:52:23:08:0d:
4e:18:dc:28:b7:88:f5:8b:50:a4:25:9e:80:6f:08:62:b9:bd:
4e:04:1a:4c:27:a5:42:92:d2:5c:ed:f8:2e:1d:cf:9a:e8:cd:
f4:c3:f0:36:c6:65:bf:bc:32:9f:26:d2:49:5e:46:bc:af:81:
7d:7d:27:e3:86:ab:31:56:13:ca:be:f2:b7:69:57:e1:92:5e:
00:ee:5a:31:23:65:ee:9d:96:45:62:be:80:3c:1b:7c:55:b4:
55:30:2d:57:c0:fe:d2:3e:2a:76:52:65:33:95:64:b3:88:e5:
83:31:6d:82:f2:d3:11:56:e6:55:af:1b:20:43:fb:f5:c0:68:
40:55:5f:7e:3f:70:4c:29:35:d8:1f:2e:d2:95:56:c7:7d:3b:
3b:a8:a9:3a:05:84:d0:64:26:57:13:17:93:2a:60:49:59:42:
54:36:fb:3e:97:79:c7:a8:53:2c:76:be:f8:a7:5e:5d:e6:e4:
38:c0:85:69:75:04:40:7b:4e:78:ae:82:ce:1b:73:fa:23:06:
e3:72:f4:bb:5a:65:2c:6f:b0:e9:13:6f:c9:65:7a:a3:68:c2:
a2:19:18:a2:68:78:f7:65:30:dc:d7:73:54:c5:17:71:7c:fc:
8d:49:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:47 2025 by rpki-client