Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: qHHMhw81HxFwqA3ACtByXbNhTEDE6ntaktsFC+G4b2o=
Subject key identifier: 1A:39:D1:C2:9D:77:68:B6:DA:5A:28:AD:91:6C:F9:4B:36:EB:83:84
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 0197B6A171F596BDBE08EF102BD4B0C060CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: LZnxQ/O1QEi/mihfIt4+WMPfUh9BrkXRvetIm6CWHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:71:f5:96:bd:be:08:ef:10:2b:d4:b0:c0:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=1a39d1c29d7768b6da5a28ad916cf94b36eb8384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:3f:b0:09:1c:b6:3a:b0:79:0a:56:c5:21:
92:c4:d8:04:74:22:a9:0f:28:9f:7b:5b:59:4f:55:
b3:5a:8c:5f:55:09:84:bf:ef:57:b5:f6:41:91:a8:
39:1e:c6:e7:91:87:e9:82:c0:af:0e:b2:c6:ea:ff:
76:e6:a9:ab:3e:b1:75:d7:36:e9:2b:71:00:96:24:
89:20:84:d3:2c:8e:ab:f9:e2:b5:cd:cf:94:38:a1:
b7:0a:38:5e:45:bd:4a:b1:db:25:89:4c:53:3b:02:
15:4a:2b:a0:50:45:71:ce:ce:97:e5:1b:4a:b6:28:
ec:92:b3:a0:76:ca:a7:a0:6c:a2:0d:8e:41:0b:43:
0d:fa:68:ec:c9:9a:ca:e0:c3:5a:af:7e:59:a0:fb:
01:41:be:b8:3e:8d:19:52:04:84:d0:fd:78:e8:40:
21:a7:d0:15:46:ea:ea:c9:52:31:ce:25:70:88:8b:
70:ab:5a:83:42:b2:e6:ca:cc:74:59:b1:d1:f0:5a:
1e:b3:8c:9b:f2:36:dd:2a:fe:71:91:d2:aa:c0:04:
84:ec:ec:a2:60:fc:96:03:43:61:4c:78:29:8b:a7:
ad:d7:12:89:89:8f:5d:90:a2:28:fb:24:d0:f6:1f:
40:5e:b2:ac:d9:8a:37:e4:c7:00:ea:67:f2:8e:da:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:D1:C2:9D:77:68:B6:DA:5A:28:AD:91:6C:F9:4B:36:EB:83:84
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:61:c8:a4:65:aa:3d:0f:9e:c0:56:0a:b3:7b:e1:03:ba:
48:d7:53:85:53:d4:bf:60:38:24:26:20:a9:c7:17:bf:17:d1:
6a:64:a3:62:ea:2b:8f:7e:ed:df:12:3f:77:ba:1a:47:cc:6f:
7d:0d:02:b5:42:69:07:f8:0a:a7:09:8f:fb:62:03:54:cc:41:
c0:75:13:33:b6:13:61:17:c1:16:ae:c7:49:c8:76:d0:f4:cd:
50:f8:87:d8:6b:e6:5f:07:2f:24:7f:55:77:63:d3:11:57:44:
91:c4:2f:85:59:7c:d2:da:03:8d:5b:c4:49:a7:6a:bf:12:98:
16:30:19:54:ea:28:dc:cc:89:ab:d6:87:7d:03:7c:03:20:0d:
6f:f4:ba:97:69:b3:27:6b:5e:58:ce:5a:c1:5a:4f:5f:91:24:
33:44:7e:2d:c9:84:2d:0f:ce:ef:59:bd:b4:c2:0e:40:03:7e:
ca:7a:3f:13:5f:6f:91:6d:45:11:00:20:55:57:52:5c:d9:0b:
cc:6d:d8:8a:d5:a7:50:82:98:e2:9a:17:17:1d:f5:6e:89:e7:
0d:ae:24:35:45:98:22:9b:06:04:ab:7d:02:d0:f8:b2:5e:7a:
ec:2d:eb:8e:5c:35:1f:98:59:8e:7a:98:49:fd:65:0d:31:c8:
32:70:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:07 2025 by rpki-client