Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: hW3iVc4ibKW+P/16BtW7t0V4ioSQzdfbWJMQdGY7qPc=
Subject key identifier: 2B:10:3C:2C:B9:40:14:43:36:39:E7:B7:92:64:48:77:79:60:23:63
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 019852684E14073E1D50994830762737E769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 19:00:23 +0000
Manifest this update: Mon 28 Jul 2025 19:00:23 +0000
Manifest next update: Tue 29 Jul 2025 19:00:23 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: e/3xNgHvtJSaP3sqpTFRICh/bGnR7EHbfBpz5A6U8I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:4e:14:07:3e:1d:50:99:48:30:76:27:37:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Jul 28 19:00:23 2025 GMT
Not After : Jul 29 19:00:23 2025 GMT
Subject: CN=2b103c2cb94014433639e7b79264487779602363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:8c:81:25:62:72:4b:eb:3d:cb:92:75:ec:
b3:18:3c:ae:95:26:a3:3d:dd:28:2e:d3:21:f5:d6:
5b:7b:b5:fc:eb:45:b7:4c:a2:dc:a2:a3:11:ac:56:
a1:0b:63:cc:67:9e:b9:d9:46:f1:f1:47:65:e3:40:
3b:ed:49:2a:4f:bc:db:73:79:01:9b:1e:63:51:61:
50:b1:e5:53:7a:9e:d5:02:c1:80:68:77:e3:59:7a:
8e:06:b8:34:85:df:2f:d7:80:98:e3:57:40:da:72:
d3:be:f8:50:39:b7:ee:d3:d8:ca:21:59:84:7f:95:
c5:47:0f:a2:64:51:67:23:9c:46:db:e9:04:74:58:
6f:87:a9:47:ad:0c:f2:19:3f:0f:fe:ed:4e:31:af:
11:40:1f:b2:bc:5e:9d:29:84:77:07:0d:40:e6:42:
fe:81:be:38:a3:d8:e9:a2:16:d1:3d:a4:73:6d:d2:
38:96:f7:b2:b3:a5:37:9c:3b:c2:80:c3:f4:03:24:
f3:81:27:a7:d5:32:95:74:c7:81:f3:da:bd:04:f7:
b4:0b:f8:30:59:fe:10:be:bd:83:dd:b3:63:04:66:
63:5a:f4:71:69:8b:79:e1:bd:7f:96:5a:75:c1:7e:
ae:d9:bc:a9:da:db:0f:e5:70:10:8d:35:4b:77:ae:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:3C:2C:B9:40:14:43:36:39:E7:B7:92:64:48:77:79:60:23:63
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:c6:1c:5f:e0:45:95:06:12:a2:b2:0f:b9:52:e9:b7:a4:
3c:a1:af:fb:ac:1a:74:d2:ef:25:1f:af:ef:6c:fc:fd:ac:21:
19:d3:f9:65:07:db:90:44:3d:d2:f7:cb:c8:5b:a6:e8:37:3b:
83:07:ed:83:e7:bc:35:a3:a5:de:43:b4:1a:60:c2:e1:d7:c3:
f7:13:37:c9:3b:a7:26:64:ca:ab:30:fc:61:14:2e:82:ed:d3:
92:c6:93:ec:24:9c:93:0f:5e:7f:7e:b2:52:47:63:21:1a:87:
d2:cc:0e:5d:02:a2:4f:cf:4b:0e:f8:bb:70:99:35:72:b2:37:
8d:70:e6:6f:00:17:17:90:2e:bc:53:2b:8f:d4:77:77:69:70:
07:16:60:d1:ce:5d:b5:32:69:e2:e4:39:61:a4:8d:74:ee:57:
70:16:aa:5f:5e:bd:ed:3b:25:00:f6:e6:4d:46:0e:de:53:4f:
d8:0b:80:ab:c3:79:0f:3d:b0:b4:3d:78:c4:04:27:38:61:78:
59:b6:c5:f2:d9:23:6d:a1:06:3e:50:61:73:5e:21:b9:94:c6:
96:4f:8c:df:04:4e:5d:a5:99:e4:a9:fb:03:bd:a7:f4:b9:3b:
63:65:82:64:0c:57:69:da:22:fe:81:44:6c:77:db:6c:92:08:
1a:3d:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:13 2025 by rpki-client