Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: tzyk/0nHfxz0VXmwBf4FkLcwGkjgz57dGm2NumaAd9s=
Subject key identifier: 47:A5:A6:4D:A6:E9:4D:50:3E:05:B0:26:CE:E4:83:40:88:40:34:37
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 01992E239DBCAC41D437D10BAC1B391C1F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 05B8
Signing time: Tue 09 Sep 2025 11:01:50 +0000
Manifest this update: Tue 09 Sep 2025 11:01:50 +0000
Manifest next update: Wed 10 Sep 2025 11:01:50 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: JYsChOWSp9tbw3F+2KzlLSo4esEP00K6Am1OxVfZHZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:9d:bc:ac:41:d4:37:d1:0b:ac:1b:39:1c:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Sep 9 11:01:50 2025 GMT
Not After : Sep 10 11:01:50 2025 GMT
Subject: CN=47a5a64da6e94d503e05b026cee4834088403437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:d7:38:48:1d:3a:69:9d:f2:44:b6:48:3c:
3b:92:d5:24:bf:34:42:a0:d2:28:1d:86:c3:58:86:
a5:9e:81:c4:e1:95:c6:6f:9a:40:e3:fd:6e:d3:dd:
82:ca:f2:54:77:42:ab:c6:54:7e:eb:db:c3:69:ec:
e8:ab:b9:3a:44:09:a9:fc:5a:26:79:48:89:58:f7:
e3:39:33:0f:18:91:f6:29:29:10:62:fe:c4:eb:98:
1e:13:75:34:22:0d:fc:91:08:a3:14:84:0e:f0:22:
6d:66:11:28:cf:9e:17:41:40:36:3d:f7:53:4e:9a:
f8:60:28:02:c8:59:03:87:bc:8e:ef:cc:8d:9d:db:
e7:77:b0:66:90:1a:5b:12:dd:30:4f:a2:b3:4e:a7:
6e:24:69:df:d0:fe:17:c9:fa:a3:2b:aa:76:f4:e7:
91:5f:0b:19:2f:7d:c8:37:7a:c7:bc:7d:db:29:38:
5d:4a:19:e6:f6:93:e8:d4:86:f5:c8:53:9b:35:2c:
3c:06:26:7d:19:bd:91:9c:76:04:65:3a:10:1c:52:
e5:e7:0c:ae:8c:43:5d:45:e0:98:b3:ec:b3:b2:42:
a1:0d:7d:46:47:0f:87:81:b8:70:e5:6a:39:b0:2a:
c9:fc:64:a8:5c:39:28:cb:63:52:6b:bd:f5:97:fa:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:A6:4D:A6:E9:4D:50:3E:05:B0:26:CE:E4:83:40:88:40:34:37
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:27:77:7f:fe:f5:5f:9c:3d:30:ef:c6:c2:b6:81:0c:3a:
ae:10:71:da:e4:ed:4f:8a:e6:6a:c5:57:3b:9a:64:f4:ba:35:
24:63:a2:32:7c:fc:fb:91:bc:2f:92:b2:59:6b:97:cd:95:92:
af:50:39:a6:d5:ac:4f:73:fa:db:c5:92:bd:48:5b:b7:73:ae:
e3:f9:c3:39:bb:06:dc:33:d5:ce:58:02:86:f0:4b:89:bc:86:
d0:4b:5b:53:25:9e:d3:a2:3d:24:13:45:d6:df:c4:1b:b5:2f:
36:75:b8:44:75:26:13:ef:9b:e0:8d:fe:ad:4e:6c:ce:d6:98:
11:e8:4e:a8:c6:d0:be:cd:a7:8d:ba:1d:9c:f8:f4:80:40:61:
f6:74:d3:bb:96:03:66:4b:61:69:28:31:86:6d:49:2b:fb:07:
ca:a5:38:41:b7:79:c4:ac:23:39:35:f1:16:68:b8:68:18:b5:
5f:2c:3a:b5:fa:db:57:d3:0b:10:dd:b9:df:33:25:5d:a0:1b:
1b:9d:32:f1:e8:7b:d5:8e:9f:fb:02:3e:94:49:9f:97:99:67:
9e:41:cf:00:dd:6b:76:21:b7:fc:cb:36:c3:01:12:be:66:12:
a3:1e:b4:7c:f5:16:d9:36:5b:51:b0:b6:6b:05:c0:46:90:0b:
5c:be:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:12:14 2025 by rpki-client