Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: O+Km92Wqw4GxCpZcTtl/Gygb3bfrwPhC/YDykrD5xg0=
Subject key identifier: B1:82:72:79:95:41:20:9C:C7:3F:EB:C2:46:44:8C:BA:CD:3C:9A:AF
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 0197B58E3BA235F89CDFA5FA3E9FC4D1DCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 154A
Signing time: Sat 28 Jun 2025 08:01:26 +0000
Manifest this update: Sat 28 Jun 2025 08:01:26 +0000
Manifest next update: Sun 29 Jun 2025 08:01:26 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: /V/M290ez+beSDm7rHdivl7vsBHWo+pcofFXPphZ6rM=)
2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:3b:a2:35:f8:9c:df:a5:fa:3e:9f:c4:d1:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jun 28 08:01:26 2025 GMT
Not After : Jun 29 08:01:26 2025 GMT
Subject: CN=b18272799541209cc73febc246448cbacd3c9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:49:ec:a3:d1:46:9e:97:3c:6a:f1:ce:46:
03:b3:23:2f:44:dc:4f:24:f9:99:cc:55:12:f0:52:
aa:b5:fb:d7:fc:a9:de:09:db:39:12:c7:9c:d9:40:
b9:57:4b:91:89:d2:3e:f5:d1:4a:fc:d5:a5:6a:60:
b0:43:87:a0:0e:c7:07:dc:fc:6c:23:55:b8:e5:13:
82:67:10:a2:80:bc:04:b5:11:8a:68:1d:3a:96:01:
f7:c6:c5:bd:de:47:ff:1d:4c:79:30:50:a3:48:3e:
64:0a:85:59:47:81:4d:64:aa:ac:f7:cc:e2:66:cf:
cd:ec:3e:ce:e1:4e:44:38:c2:50:ce:7c:1e:e0:4f:
42:1b:cf:9d:c4:00:61:96:72:82:92:d7:ad:4a:87:
d8:03:ba:ee:89:55:94:71:a8:e2:7a:7e:c5:d5:c3:
7c:ba:43:7d:8c:6a:53:e0:6e:7d:f6:e4:dc:5c:0a:
e5:25:35:27:0f:28:5d:df:fd:5c:d5:be:d6:63:8c:
16:b9:c7:3d:25:5b:96:99:cf:dd:97:a8:ca:26:3d:
4a:a5:76:4d:bc:cb:b9:1b:37:d8:e1:d3:ef:d1:6f:
53:3f:af:f9:87:b3:9a:8e:7b:9e:1a:af:29:08:a7:
ae:ed:5c:d7:3a:63:77:0a:1c:cf:d2:12:6f:7c:82:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:72:79:95:41:20:9C:C7:3F:EB:C2:46:44:8C:BA:CD:3C:9A:AF
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:97:9d:36:4f:12:36:4c:02:ef:19:b3:c6:7c:c9:8b:55:
f8:a2:61:ba:cd:1b:d2:e8:91:3d:c4:ab:40:d4:3f:2f:2a:9c:
a7:e2:da:7e:d0:d1:fb:66:cc:2b:ef:9a:3b:27:6f:f1:84:a7:
fa:96:10:fe:a9:bd:4c:99:a9:f6:7e:a9:c9:1b:b0:77:80:0d:
96:76:3e:ca:3d:87:6d:1f:02:df:e7:94:f5:9e:9b:20:6c:5d:
36:a3:1c:59:e8:e4:31:81:f3:f7:62:12:a4:1d:a3:ac:91:c3:
56:a1:04:48:5b:85:44:c8:6a:46:9f:1d:80:1a:70:02:12:14:
c7:ef:9a:d6:91:bc:90:bc:41:d9:0c:45:1f:27:e2:1a:ad:43:
73:06:a7:7e:55:f4:17:4a:78:8b:06:1d:60:56:0f:26:fd:84:
3b:0f:7d:aa:17:12:e9:ae:79:9e:b2:7b:66:8f:e9:9e:82:a1:
f6:ff:9f:75:5e:24:05:cb:61:3f:dc:5b:9c:da:6f:57:9f:fc:
17:08:65:0e:a5:f3:45:e3:fd:72:34:4b:2f:f8:55:87:25:7c:
12:7a:b0:d7:92:f4:4e:62:a7:57:da:ae:d1:96:0f:f9:b4:3f:
54:6a:6c:df:fc:5c:28:33:9c:b0:74:d1:90:c2:98:5a:4e:fc:
23:92:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:25 2025 by rpki-client