Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: xkLGaKW4AD+0Yo/cLvKI8BN5HqmvOYSG48gYwhTZblQ=
Subject key identifier: A5:3C:84:97:1D:13:3C:15:5D:6E:A1:FC:7E:9E:94:4F:70:8F:7E:F9
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 0197B70E9D72EED6DA28B6E1361C7CC201F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 029D
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: El7vtzNi4YTcXJaqstr8LojkDbbifpSJdL9eY/2eDfU=)
2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9d:72:ee:d6:da:28:b6:e1:36:1c:7c:c2:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=a53c84971d133c155d6ea1fc7e9e944f708f7ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:bf:eb:57:ab:d0:f7:62:d5:35:8f:20:25:
ad:0a:02:61:72:64:50:b5:27:32:59:7c:06:9c:a0:
4d:ea:df:98:23:45:36:3e:80:21:e5:63:3b:12:c3:
1a:a5:92:23:41:38:c9:01:b9:75:e0:e5:ee:cf:d1:
56:99:c4:bb:9d:43:e1:31:69:5c:f7:14:59:6c:ac:
e4:21:db:e1:f1:fe:ce:88:7b:c4:d7:92:2c:dc:25:
b3:0e:dd:d5:f3:99:59:8d:24:f5:2f:ae:8f:a0:8d:
d4:8e:da:a6:61:29:1f:17:27:5e:3d:fa:e9:60:83:
95:22:62:e2:7f:8c:d7:12:1c:e9:a8:ca:5d:e2:5a:
43:c1:be:1f:c8:c5:d9:2c:ec:9a:6b:b0:92:ed:d9:
86:19:47:ad:49:0e:8d:0c:87:aa:ff:41:8f:53:f7:
e2:ed:2f:b6:e2:9a:d4:10:0b:c4:b2:a5:8b:4b:0f:
b9:d4:32:b3:2d:c0:1b:64:44:b9:30:33:b0:a7:e9:
02:e8:a6:8a:d5:64:5c:db:26:1f:80:03:dc:c0:8a:
23:e6:5f:43:66:b6:08:6e:03:b5:c3:f2:42:35:56:
71:44:9a:e9:53:52:aa:36:39:85:5d:27:80:fb:26:
f4:e2:83:44:2c:aa:5e:17:4f:4a:04:3a:b9:f8:7c:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:84:97:1D:13:3C:15:5D:6E:A1:FC:7E:9E:94:4F:70:8F:7E:F9
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:03:cc:81:a0:84:51:03:cd:c1:e0:32:5c:fe:45:f6:73:
3d:12:69:b2:c2:70:c4:af:ba:b5:02:3b:51:7d:a9:43:33:70:
3b:f7:c9:66:77:35:a8:95:c2:20:08:2c:e8:0c:2d:a6:7b:11:
32:77:d2:14:6d:c9:cd:ee:8e:46:a7:a5:a0:ce:81:20:6f:0b:
20:e5:a4:98:c1:65:cc:81:38:c8:d5:98:03:57:81:4e:27:38:
a1:9d:dd:69:96:c4:22:20:69:83:bb:7d:ef:4a:c1:64:ee:e9:
f8:12:6b:d1:0f:94:47:c9:4f:75:c0:6d:0b:41:ba:a1:db:43:
6b:8b:5a:c7:d6:01:2c:a3:80:26:6f:76:65:d7:bb:a3:c0:80:
b3:28:31:76:35:78:e3:5a:54:18:34:1b:9a:81:42:5c:17:bc:
d1:b0:9a:cf:0d:ca:3d:e7:c7:16:13:fc:66:07:81:78:f6:97:
b9:a1:18:a9:4d:dc:fb:32:83:63:82:57:15:de:e9:c2:4f:c0:
e7:cc:bb:e3:6a:69:d2:fc:db:15:89:7f:67:7b:ec:02:68:5d:
c5:73:a4:ee:dc:10:df:d1:22:87:5d:90:da:cb:47:00:d1:d3:
69:ba:f5:df:59:0c:f6:fa:e5:83:47:3b:0e:bb:f0:b4:2f:08:
67:82:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:35 2025 by rpki-client