Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: 6XmccHK20x1x5L+iln/OkumK0q/+uHIw40bNKuYLmwg=
Subject key identifier: 2F:33:78:AE:BE:6A:57:4D:B5:13:78:2B:FA:CE:B9:9E:CA:41:BF:D1
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 0197B6327CBB3EC70BB1F076A7A6FF4C9CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 1553
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: NbQ2aY9/eIiwrB69UJMyVO5ydCclUsrarsG5cKSnA7g=)
2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7c:bb:3e:c7:0b:b1:f0:76:a7:a6:ff:4c:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=2f3378aebe6a574db513782bfaceb99eca41bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:7d:28:0e:5c:c5:be:8e:ea:82:ff:79:90:
e5:09:0a:55:32:62:a2:30:8b:fd:23:57:81:2c:03:
19:40:02:41:12:95:5e:bc:c1:43:60:f2:77:db:6f:
a5:ae:c2:02:31:38:76:0c:37:95:e9:43:0b:05:f0:
00:35:cf:4b:35:13:d5:a4:c7:b1:a6:36:c6:59:7d:
ba:c0:c3:34:87:93:89:b6:e2:e7:5d:f3:37:eb:58:
65:d4:d9:0c:0c:76:7d:01:b1:cb:79:3e:51:9a:6d:
a1:c4:b2:99:dc:b6:5b:37:da:c8:7e:74:93:a0:fb:
47:49:a8:76:6d:69:d0:6a:f8:7e:4b:aa:cb:4a:4a:
38:3b:82:c2:e1:fd:5f:6c:10:9f:7d:3c:9f:22:d8:
22:fa:1b:97:41:b8:56:70:7f:9d:80:82:e0:0f:0f:
29:dc:5b:bc:4a:9f:be:13:ab:a2:8d:c9:e4:96:37:
3f:76:3e:f9:c5:13:24:ef:60:8c:c6:0f:1a:38:22:
bc:8a:e8:e7:5a:b6:0a:bb:f6:8c:a3:1a:a3:fc:bb:
74:37:59:60:d8:28:a1:1b:5b:c2:ff:40:89:d4:ee:
89:d3:3d:1f:29:35:d7:4a:67:d7:d5:fb:03:6e:82:
2c:90:d0:af:29:a8:f3:91:ea:a3:b4:3c:0e:88:66:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:78:AE:BE:6A:57:4D:B5:13:78:2B:FA:CE:B9:9E:CA:41:BF:D1
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:29:06:fc:e3:51:a1:ec:c9:a6:a6:33:f4:fd:54:90:3e:5c:
af:fb:1b:9b:34:09:74:f8:0f:87:11:bd:ef:31:7f:c3:5d:3f:
a3:81:f6:bd:b2:f6:63:00:b7:f8:80:0c:43:96:02:98:69:e5:
cd:97:58:92:87:26:f6:5b:eb:3a:de:e8:d5:66:1b:c8:0a:84:
8b:0f:d5:cb:5c:d1:20:6c:97:df:e8:70:8b:60:8a:cf:d7:16:
8c:8b:61:40:69:a7:27:a3:d5:09:d4:d3:2d:e2:5c:44:f5:e2:
cd:e6:cb:9a:55:22:92:6b:b7:d0:28:47:9a:b9:58:9a:aa:2c:
8b:8b:6c:ec:91:01:ee:71:48:96:07:51:a0:e0:c2:c1:bd:e2:
5b:72:71:fc:55:2a:cd:99:0a:96:12:fe:7f:a5:c5:db:30:f6:
66:d7:53:b6:92:7e:42:a7:21:b9:a6:d2:1c:96:d0:7b:1d:c9:
86:8c:17:cc:84:dc:82:31:a8:57:c5:7e:86:1e:4e:3b:c1:6d:
44:ba:ee:a0:85:91:68:79:bb:65:57:4a:20:2e:c5:70:17:96:
b6:55:e9:94:16:f3:01:63:d7:5f:9e:33:1d:89:71:f4:23:ec:
fe:cb:92:48:b7:c4:dd:ea:c7:89:42:97:16:56:02:aa:de:cf:
01:0b:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:33 2025 by rpki-client