Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: e5IBilZb0P4FA/+laWeMHero9cQArQ/pd0diNIzAHJo=
Subject key identifier: BB:57:AB:9D:03:86:15:3E:F2:72:49:D0:13:CA:EE:80:F9:B4:B8:6B
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 01974A7AD347BE0987C5718D33F402C53E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0D2D
Signing time: Sat 07 Jun 2025 13:00:52 +0000
Manifest this update: Sat 07 Jun 2025 13:00:52 +0000
Manifest next update: Sun 08 Jun 2025 13:00:52 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: zC8KQiX7w2yKErMwkhXA+tMTBAmItEOjAEOnAqp6hC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:d3:47:be:09:87:c5:71:8d:33:f4:02:c5:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Jun 7 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=bb57ab9d0386153ef27249d013caee80f9b4b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:da:7c:29:df:da:8c:fb:b1:fa:05:b9:21:
68:2a:e4:bd:b4:11:0b:34:db:f7:f4:ac:20:57:79:
61:a0:fb:58:fe:a5:da:b6:da:ab:5d:2b:b6:5c:f5:
f4:0a:59:9d:36:24:87:31:ed:57:cf:ec:36:a1:90:
e7:6a:7e:cb:33:3d:42:88:77:aa:53:c5:fd:90:b3:
6f:22:e1:34:cd:a1:bf:16:8f:e8:3a:59:92:71:7d:
ab:39:90:b2:0f:79:10:d1:1b:4f:ea:a9:7e:b9:4a:
0b:11:19:66:81:76:d0:86:e1:f0:11:a9:e8:8d:08:
9d:7a:2b:49:24:e0:55:8d:47:a8:dc:fd:72:53:2f:
1f:1f:65:20:c3:11:40:75:2c:2e:52:64:73:be:b9:
f9:cd:64:9d:52:b0:db:70:57:24:fd:52:ea:57:41:
73:a3:22:bd:18:07:5a:e3:56:0e:2c:a6:c0:0e:5f:
3e:d6:5b:6f:31:91:3b:bd:6c:33:4c:6a:dd:d1:30:
ec:bf:59:af:1d:a5:17:7f:e0:b9:e3:57:1d:5e:69:
ef:2d:3f:b7:c5:cf:93:9d:e2:1b:2a:23:84:29:2d:
9c:1f:d4:5d:6b:16:c7:16:f7:73:2c:8a:e8:c0:7e:
c8:96:55:cf:58:fd:a8:7d:6e:8f:c1:b7:6c:70:1c:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:AB:9D:03:86:15:3E:F2:72:49:D0:13:CA:EE:80:F9:B4:B8:6B
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:00:9a:00:68:3c:8a:9a:ff:b9:72:84:73:98:c8:40:a0:
e8:02:4a:c4:c1:6b:de:ae:db:fe:be:88:2a:93:f0:34:b5:b3:
ee:27:97:70:ab:b8:b2:2f:63:e6:ea:cd:3c:60:bd:5a:31:05:
28:63:e6:b4:e8:f1:60:0c:97:47:99:6d:d8:e8:30:39:6b:b6:
97:53:96:1e:99:45:ad:c7:5a:f1:33:2a:48:e9:22:73:68:bc:
3f:49:bf:c3:52:cb:32:28:ae:b1:dc:4a:e8:13:bb:36:0a:cb:
43:f9:84:80:3f:54:cb:75:a3:3e:8d:ea:0a:bc:0c:17:01:d7:
93:b9:f3:80:c0:fa:30:f2:04:2a:8c:63:ee:dc:9c:58:10:f7:
62:1d:8e:47:be:fc:ca:b6:52:46:04:d8:f3:40:cf:a3:a9:18:
39:2a:5d:96:23:c0:c1:49:98:e9:52:f2:6a:b1:6f:1f:08:51:
76:c4:58:ac:50:a8:4d:78:4e:13:44:04:4f:19:6f:89:cf:2d:
8b:5a:aa:5c:ec:a1:c6:e4:73:a7:15:1b:62:e1:31:82:76:60:
0a:5e:d3:6a:19:d8:23:db:54:5e:e1:21:cb:c9:39:6d:05:9f:
42:c9:06:62:6a:71:07:60:f5:d7:3b:99:9e:6d:62:81:fa:05:
3b:2a:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:46 2025 by rpki-client