Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: C8Q1A+R9pZLw+DH/A9SvHGucTRjgCkPldXIXieCBYjQ=
Subject key identifier: 4D:8C:7A:4F:97:A1:81:C1:AF:E6:A4:A0:FE:C1:0F:40:BA:02:25:D5
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 01974B1F9D6767D03D55D174B9515B5D5D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 08D6
Signing time: Sat 07 Jun 2025 16:00:52 +0000
Manifest this update: Sat 07 Jun 2025 16:00:52 +0000
Manifest next update: Sun 08 Jun 2025 16:00:52 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: 8duZoNjHrlXJlyTubYvktsCA6EFr8l4ot69jmTWoU0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:9d:67:67:d0:3d:55:d1:74:b9:51:5b:5d:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jun 7 16:00:52 2025 GMT
Not After : Jun 8 16:00:52 2025 GMT
Subject: CN=4d8c7a4f97a181c1afe6a4a0fec10f40ba0225d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:eb:dd:6c:48:a1:ff:0b:fc:a5:f6:8a:6e:
bb:6a:d4:d9:dc:dc:9d:27:3b:51:83:39:c7:fe:83:
fe:07:c7:67:71:5e:d2:38:d5:26:4b:b1:a0:b9:45:
ac:2f:1c:c5:32:cd:b9:66:4a:d9:2a:bf:89:42:bb:
68:70:8f:f3:2b:ef:e9:68:22:7f:54:1c:69:b1:50:
0f:f7:bc:b6:86:c8:13:47:e2:d3:fa:fa:51:57:b7:
87:a5:c5:0e:d4:24:80:8b:79:a8:72:64:2d:f5:f6:
e2:fd:41:54:19:38:cd:c1:9f:10:03:d8:ca:e2:73:
91:ce:63:5a:ec:97:7f:2a:20:91:13:45:77:52:ad:
11:68:97:35:77:5c:ae:4e:ac:37:3c:f2:9f:e8:ff:
c9:df:20:e7:3b:1b:30:02:12:65:f1:2e:4a:96:fe:
1e:e4:5d:8c:81:b4:e5:70:b6:23:af:f6:d3:09:a3:
4d:3a:61:f2:40:79:dd:7b:f6:ab:9b:36:24:58:91:
be:27:3a:a0:95:67:35:ee:3b:d8:5b:44:32:0a:e9:
25:28:d2:74:43:d8:6c:82:a8:cf:e8:4d:48:d1:f7:
af:d8:a6:e2:97:65:e5:44:47:81:53:17:92:46:94:
3d:92:ea:4c:f7:df:88:a2:44:a8:a4:8c:14:07:81:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:7A:4F:97:A1:81:C1:AF:E6:A4:A0:FE:C1:0F:40:BA:02:25:D5
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0f:3e:4c:e0:c6:31:04:44:d6:62:ae:0d:57:bb:5e:30:23:
b2:85:5e:70:26:e8:46:3e:81:b0:f0:fb:d7:ab:55:0b:2e:1a:
76:d4:03:59:81:e6:12:7c:38:18:d1:47:79:51:7e:f7:9a:b8:
6f:18:22:1d:a8:61:a0:f6:5e:83:1e:15:86:35:0d:4c:fb:36:
98:43:bd:9c:5a:c6:3d:d8:f0:27:31:6b:21:a4:9d:6f:10:85:
37:ee:1e:4d:a1:ca:5c:f1:67:fe:31:82:2d:2a:3b:f6:26:85:
1b:2d:5a:ba:fb:cb:7c:9e:8a:d2:e0:70:7c:5c:22:82:0f:61:
60:1b:cc:a0:3a:8e:bc:81:32:67:2e:db:9f:61:11:bc:c5:4c:
3b:df:65:06:d3:22:d4:c2:7f:9c:78:f9:25:35:94:39:62:ae:
6f:95:e5:b3:3c:ac:fe:f3:f3:1c:46:0c:4c:fa:6b:bc:21:20:
b6:44:39:d7:b8:c9:7d:de:06:e0:bf:0b:23:9f:8e:1a:b9:d8:
7f:b1:e0:65:0a:7a:f0:f8:d7:b2:ff:d1:fd:64:1a:b9:48:ec:
b9:04:00:1c:bd:50:e8:79:66:d0:4f:86:64:eb:ac:ce:80:bc:
c7:2e:ff:52:55:2a:10:a8:e1:65:ee:39:48:e3:22:96:c1:d9:
73:63:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:25 2025 by rpki-client