Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: hXDhAoCy8/dw3mekH1hHSmuHZCCIVb3uqYqpRCn94NQ=
Subject key identifier: 6A:98:5A:5B:AD:94:F1:85:65:0C:79:02:30:0B:43:12:5A:E3:8A:FC
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 0198477709D02FB2A9BA4B7703FBEA5B54C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0DDA
Signing time: Sat 26 Jul 2025 16:00:40 +0000
Manifest this update: Sat 26 Jul 2025 16:00:40 +0000
Manifest next update: Sun 27 Jul 2025 16:00:40 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: FO5PBQqp7RJF8y4ynlBnAORjqxhZQotkgXoYwMkt7nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:09:d0:2f:b2:a9:ba:4b:77:03:fb:ea:5b:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jul 26 16:00:40 2025 GMT
Not After : Jul 27 16:00:40 2025 GMT
Subject: CN=6a985a5bad94f185650c7902300b43125ae38afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:af:99:e5:a0:6a:89:84:fe:f9:04:b3:ed:
28:4f:34:a6:9e:90:2b:f2:34:58:a7:5a:ae:1a:c4:
80:d7:78:d3:e9:7c:db:de:6e:02:05:bc:f9:a1:e9:
61:1c:11:92:0f:2d:d1:d7:34:07:0e:65:c4:f6:fe:
d1:07:8b:0b:c6:bc:a4:ba:fa:d6:47:01:0b:63:f1:
78:bd:d1:30:26:cb:ae:ab:06:8b:6a:36:98:3f:08:
e0:6e:28:0b:97:3e:47:a2:38:60:c6:ef:72:cd:4d:
30:4f:1a:5f:fa:8d:17:cb:7c:55:94:36:30:7a:0b:
02:f7:d3:ad:52:1f:bb:71:3b:11:1c:5b:a7:12:f0:
55:f7:3c:0d:4e:c5:03:60:bd:60:45:61:0e:99:0d:
00:fd:36:8e:09:91:da:4b:7e:3d:43:d1:1a:f3:76:
2d:7a:48:20:31:fa:b8:90:20:5c:53:a7:c6:d2:3a:
81:ba:9f:1b:45:7d:45:7d:cf:47:e0:09:dc:77:51:
02:97:60:96:ec:46:fc:a3:c2:a2:0f:a1:5a:72:62:
df:6e:82:41:a8:10:3a:64:18:56:1a:61:ac:df:fe:
49:73:c5:06:a9:56:77:78:3d:e6:a3:4f:8a:1f:3b:
b2:c7:03:76:66:b8:e8:18:53:4b:4f:ff:2b:21:05:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:5A:5B:AD:94:F1:85:65:0C:79:02:30:0B:43:12:5A:E3:8A:FC
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d3:93:43:0e:7a:9a:d7:43:48:e4:c5:db:58:84:51:c7:c5:
1b:14:23:d2:8e:bd:d2:5b:e5:bc:cf:51:c5:21:4b:38:a9:92:
f3:9f:0b:75:85:46:1d:77:5b:68:8f:c4:ac:10:dc:61:40:bd:
81:81:77:8f:74:a0:e1:1a:2a:6b:c6:4c:91:dc:88:7a:be:3e:
45:79:11:50:b4:f5:ef:3a:4c:d0:f9:4d:2a:8d:1e:48:44:7c:
41:41:eb:a2:13:d8:be:86:f4:21:45:97:23:ed:c2:f7:4e:56:
25:42:67:d1:9e:50:61:32:eb:ab:d1:08:d0:42:4a:24:08:6a:
ab:0e:d7:2f:73:65:ee:b0:38:8d:2b:7d:5d:66:b8:0e:1e:3a:
cf:ba:65:8a:b9:7f:62:b3:ca:f0:4b:83:98:5e:bd:17:6a:65:
03:4a:31:83:27:0f:d2:e4:bb:1c:27:39:55:d5:35:2f:21:f5:
aa:22:94:33:5d:a5:54:a6:a2:c3:c5:db:2a:6c:13:30:99:bc:
95:2c:2b:0b:0c:55:28:b7:93:8f:fc:f5:22:07:9b:03:0f:77:
3b:75:9e:62:38:39:c5:3f:07:f8:c4:00:b4:b3:4b:f3:f3:d9:
9a:39:b4:25:99:2d:bd:3d:ef:96:7b:37:d9:ab:ab:22:95:72:
b1:26:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:36 2025 by rpki-client