Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: bW1aACHuBPE56rEhtspnT5ClVqb4d7f/64CidBv9BqA=
Subject key identifier: 69:21:6E:25:2E:98:02:F9:AA:F7:14:5B:67:A6:DE:DF:14:9E:0C:E3
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 0197B9D92FD9FCEC5E0174F9A67FAF6D635C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 04:01:47 +0000
Manifest this update: Sun 29 Jun 2025 04:01:47 +0000
Manifest next update: Mon 30 Jun 2025 04:01:47 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: sZatVAtowMLzdhJ+h7Cg9Y4xE6+n2KJOxRdZWHcTj1o=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:2f:d9:fc:ec:5e:01:74:f9:a6:7f:af:6d:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jun 29 04:01:47 2025 GMT
Not After : Jun 30 04:01:47 2025 GMT
Subject: CN=69216e252e9802f9aaf7145b67a6dedf149e0ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:a4:fa:7b:14:ad:7d:e4:c6:4a:e2:60:d2:
58:05:52:98:3b:38:f8:4c:1f:8d:33:3f:53:c5:72:
b9:da:14:80:75:16:ef:2a:39:68:a3:89:14:f9:ab:
26:a4:a3:31:a8:86:e3:f0:6a:1f:1e:4c:da:2e:3f:
b2:28:2b:58:02:43:82:64:ec:74:7b:7d:15:7d:29:
66:2d:3c:c2:03:85:9e:27:44:29:39:23:0f:f3:78:
f6:a5:09:d7:00:76:c1:86:97:96:09:f6:4c:fd:4c:
f2:a6:c9:09:72:18:5d:3b:c2:75:ae:b6:cc:49:e5:
e1:31:36:50:48:be:99:11:97:5d:be:f9:a6:b2:bc:
4c:7f:85:c7:82:69:8a:60:81:0e:2b:d9:f3:7c:56:
99:64:e1:2c:47:1f:49:81:6c:10:46:9e:ba:30:7d:
6f:49:9f:db:da:77:5b:c0:78:f1:a8:12:76:5a:20:
33:02:24:7f:f5:ae:a2:9e:5b:dc:cf:39:6b:ed:c6:
a4:ea:72:25:26:f0:b6:7f:5b:2c:94:09:90:0c:5e:
67:3b:51:c0:8d:13:39:54:b1:e0:67:1b:85:f3:d4:
6f:44:02:c2:36:6d:33:71:db:a9:f3:00:b9:d3:30:
0a:e1:2b:64:bb:dd:fa:c4:67:72:18:6b:c5:ce:c5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:6E:25:2E:98:02:F9:AA:F7:14:5B:67:A6:DE:DF:14:9E:0C:E3
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:c9:53:71:b6:4c:58:a1:9a:08:b7:5b:9a:8d:7b:4d:12:
87:1b:0f:44:95:dc:e2:1f:66:d2:08:48:34:f6:dc:ec:92:3f:
11:cb:55:b6:63:4f:d9:ef:53:42:bd:24:bc:a3:bf:e3:20:c3:
15:4d:99:9b:2a:bb:f1:23:1b:5d:b8:5d:cc:f1:1b:33:fb:2b:
03:09:1a:76:c3:85:3b:d0:04:4d:4f:9d:5e:08:8e:56:65:bf:
5c:cc:86:85:a7:52:39:fb:a2:29:14:ee:46:52:89:04:51:a6:
10:0b:eb:60:a9:93:5e:0b:55:26:b5:ed:1a:78:64:97:36:2e:
eb:bc:1d:be:d7:cf:1c:ef:1f:8d:3f:da:03:9f:5b:69:ee:c3:
21:38:85:8a:9b:2f:10:e3:6f:01:32:9b:da:48:0b:00:77:d8:
20:04:cd:e6:e0:ce:58:b9:3f:3b:6c:e2:80:a2:f8:4c:9a:c4:
4e:05:c5:69:9f:0b:df:09:b2:d9:31:40:68:76:ad:57:b4:df:
93:bf:87:ba:08:b6:99:65:e0:ff:68:4d:47:5c:be:6c:7c:96:
1a:1e:b7:07:1c:ff:e4:98:77:e7:06:bc:f2:0e:04:a4:a1:3c:
9d:4f:78:29:1b:e4:6a:05:09:2b:26:1e:b5:c9:80:5f:55:ea:
f1:6a:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:59 2025 by rpki-client