Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
File: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft (raw, json)
Hash identifier: vV/soJCOANKE7J0tkrLguwIwJFnPPZyZJKPeJJenyws=
Subject key identifier: 66:0F:1E:63:25:6D:37:15:FF:67:AE:CD:7A:B9:88:5A:34:DD:85:34
Authority key identifier: 07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Certificate issuer: /CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Certificate serial: 0197B5FBF1800D05C556DEF1F04CCA9C84F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
Manifest number: 02BE
Signing time: Sat 28 Jun 2025 10:01:16 +0000
Manifest this update: Sat 28 Jun 2025 10:01:16 +0000
Manifest next update: Sun 29 Jun 2025 10:01:16 +0000
Files and hashes: 1: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl (hash: fBnK7aFgDNMoyLRdr7xVTmNpN166vXmrwoBS8lwgujU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f1:80:0d:05:c5:56:de:f1:f0:4c:ca:9c:84:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Validity
Not Before: Jun 28 10:01:16 2025 GMT
Not After : Jun 29 10:01:16 2025 GMT
Subject: CN=660f1e63256d3715ff67aecd7ab9885a34dd8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:18:18:6b:69:3c:6e:d8:82:c0:94:18:91:
b5:c2:01:42:4e:2c:c2:1d:83:2d:df:ab:4e:f9:17:
47:71:a4:d2:c5:e6:11:68:88:76:34:30:00:c3:39:
ac:b5:7d:98:75:e6:2c:d8:22:92:f7:25:e4:43:17:
30:74:4c:35:c4:cd:94:05:b9:ee:b5:db:a7:30:01:
04:28:bc:c4:67:8f:bd:28:fc:b9:2b:f2:60:40:71:
d7:90:84:1c:5c:ca:8f:76:a7:7d:87:39:3e:9f:0c:
bb:fb:01:78:a8:f2:e0:5d:fa:50:3d:74:fb:f8:3c:
55:d6:ca:8b:4f:2c:6c:44:46:61:ac:af:22:19:75:
fa:05:af:87:26:9e:42:5c:f6:1b:46:09:4b:53:e3:
4b:cc:aa:6a:dd:be:a9:ca:f9:ac:b3:ce:31:9b:23:
bb:cd:be:a5:ab:6b:f5:36:c8:4d:0e:c9:ca:7a:7e:
13:97:cf:5f:33:1d:ac:cc:44:10:79:60:b8:c9:83:
a9:a9:d9:9e:5b:02:f4:d5:1e:5f:59:9f:b1:7d:e8:
2d:2a:81:85:02:c5:cf:5a:89:9f:3a:8e:d7:64:6d:
a6:c5:7b:04:42:ce:f4:d0:aa:6d:f4:e5:95:8f:30:
67:03:90:83:b2:0f:7f:34:46:a4:20:37:4e:5c:52:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:1E:63:25:6D:37:15:FF:67:AE:CD:7A:B9:88:5A:34:DD:85:34
X509v3 Authority Key Identifier:
keyid:07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:f0:ab:3e:c8:34:30:82:f5:76:c5:d7:ab:8f:37:3e:13:
c1:45:3e:6c:90:62:00:fc:fb:2f:9e:39:e7:71:7e:3e:32:f9:
12:73:c4:f5:b9:67:5b:26:bc:91:f9:8f:69:6c:3e:6f:87:67:
73:56:38:7a:5b:3b:b4:af:48:75:e0:de:3b:ba:d9:90:fe:e1:
f5:5e:c5:6a:06:3d:25:74:dd:d7:db:9e:df:6d:05:9a:7a:71:
8d:e7:f0:76:e1:6d:7c:aa:33:8f:dc:4f:74:5a:be:9d:94:2e:
be:50:79:f7:c0:d3:0d:8c:e4:79:3e:37:67:67:9e:dc:4e:02:
7b:fc:2c:0f:19:d2:f2:ff:b3:6d:1d:bd:0e:7a:de:51:af:81:
07:91:21:60:fe:b4:88:5f:b4:64:69:6e:3d:47:52:de:37:32:
d8:ff:b1:ce:66:44:ec:29:53:14:29:c8:f3:31:ea:70:ac:c5:
14:75:bb:ba:9a:ac:92:e7:08:cf:9f:69:87:d1:3a:77:5f:9b:
0f:c0:f2:12:89:f6:1d:db:b1:5d:14:57:c4:b2:06:42:66:15:
a1:74:ba:02:8b:12:57:1b:5b:05:8e:86:4f:6b:0c:3e:a4:2e:
00:46:44:95:d2:7a:1a:54:5a:80:32:5b:b8:0f:b8:3f:b7:e0:
92:4c:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:41 2025 by rpki-client