
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: rU1iNFjP9DJ8ExRKib3Guq3amiK+Op6gl5UjFBVcVQ0=
Subject key identifier: 92:5E:F2:53:12:E9:A6:98:DF:65:20:E9:31:CC:9D:49:BB:E5:5C:A1
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0197B5C47F65594F9FF717CD9AAC3CE97A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 148A
Signing time: Sat 28 Jun 2025 09:00:43 +0000
Manifest this update: Sat 28 Jun 2025 09:00:43 +0000
Manifest next update: Sun 29 Jun 2025 09:00:43 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: vYVMJRQTEsUG/VCVIpO8VIp5C83etfeDlKdqzPQGeRU=)
2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:7f:65:59:4f:9f:f7:17:cd:9a:ac:3c:e9:7a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Jun 28 09:00:43 2025 GMT
Not After : Jun 29 09:00:43 2025 GMT
Subject: CN=925ef25312e9a698df6520e931cc9d49bbe55ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:45:5e:47:24:e0:b8:72:4f:ef:ab:74:85:
cd:29:b9:34:c0:0d:0c:51:6d:53:6c:eb:72:e6:33:
25:90:e2:be:36:d1:f2:bf:7a:06:5c:35:66:0d:75:
d1:6d:8e:ea:19:7b:11:bf:13:db:53:c4:c6:d6:9a:
55:9f:95:bb:4c:a8:9d:3c:af:f1:9d:fe:32:6a:cc:
81:ba:3b:9a:0f:7a:c4:ed:5d:3c:06:c4:c0:c2:fc:
02:ac:86:27:12:6e:38:df:43:2d:b8:12:c8:ef:80:
fc:66:5b:81:ac:62:10:f9:bc:36:22:bb:6f:55:d6:
83:ca:af:7e:8b:67:f4:35:26:cd:5c:1b:4c:8a:f3:
b6:9d:96:2d:fb:d4:52:50:47:2c:39:e0:31:92:b6:
8b:fa:a6:0c:53:0b:16:8a:52:74:08:9e:67:30:8f:
f6:11:e1:1e:28:63:49:4b:a1:e2:c2:ec:ca:54:51:
a2:4e:83:d9:ee:e0:e8:62:3b:0c:e0:81:b2:36:8e:
90:0a:26:61:60:42:50:f3:e4:be:ce:28:cc:45:e7:
b7:e7:5d:4f:8c:44:03:5b:3d:09:75:94:f9:27:99:
94:0b:52:57:82:5a:f1:2e:a5:15:34:2b:1e:a6:01:
e4:fc:b2:a0:71:e9:ca:2b:1e:24:40:9d:36:04:d4:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:F2:53:12:E9:A6:98:DF:65:20:E9:31:CC:9D:49:BB:E5:5C:A1
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:17:88:3f:81:98:67:a5:b8:98:70:d4:1d:a7:28:f5:8e:
92:54:86:08:0a:2e:92:86:52:1e:01:5a:38:f6:4c:53:26:8d:
c6:3a:cb:3c:a1:a6:e5:30:4e:a1:48:0b:a1:c7:d4:23:0a:c5:
f1:d7:38:cf:e6:7f:b6:e0:9f:ab:33:23:c1:8d:79:17:f6:fd:
21:47:87:82:8b:17:41:60:e9:26:6c:8e:cd:50:62:d7:21:cf:
fe:76:d8:50:fe:f9:1a:a1:b7:36:67:28:4a:10:87:30:54:c4:
da:f6:31:f1:0f:65:50:54:d9:59:59:4b:fb:ff:c1:61:42:cd:
b2:0c:15:22:83:0f:5d:fd:c1:d6:ce:27:ba:41:24:91:2e:7e:
cf:dd:18:37:a4:a9:4e:50:3f:72:b5:fd:74:ac:2c:16:22:de:
12:87:43:77:89:c3:1e:21:c8:1a:da:11:ef:a6:d4:9b:1b:de:
44:b8:1c:d5:1a:6e:c0:32:29:55:5d:58:39:e6:46:48:90:d5:
9f:ff:f4:6c:9e:da:27:dc:6d:08:51:4a:c2:c8:a4:db:f2:c5:
d3:45:e7:16:4c:57:a3:8d:62:0e:3a:b7:76:64:70:fe:90:8a:
b1:f5:6d:4a:d0:d9:79:0b:7c:d4:18:26:d9:4d:0e:e5:f7:88:
84:55:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:43 2025 by rpki-client