Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: FKWW1bnjxPJ2qo0Xz0ZTW90KGtHrEEEjzbIRhbS+mmU=
Subject key identifier: 51:8F:AB:2C:F4:2E:BF:22:5E:BB:A7:17:18:36:C1:2B:66:43:0F:36
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019767E02D040B93D03CE3D593A0A87E60FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0E8C
Signing time: Fri 13 Jun 2025 06:00:34 +0000
Manifest this update: Fri 13 Jun 2025 06:00:34 +0000
Manifest next update: Sat 14 Jun 2025 06:00:34 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: Z0jwSJMJBmPizgAxifCKrboMwGdZ7U9/IF4fLJhV5jY=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:2d:04:0b:93:d0:3c:e3:d5:93:a0:a8:7e:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jun 13 06:00:34 2025 GMT
Not After : Jun 14 06:00:34 2025 GMT
Subject: CN=518fab2cf42ebf225ebba7171836c12b66430f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d9:d4:3d:23:7f:d3:2c:5d:ea:14:ff:46:57:
80:da:b1:14:12:a4:21:ab:81:89:ab:89:3a:01:62:
4e:19:31:03:39:69:9f:a7:0e:02:4b:6d:ae:fc:b0:
6b:2c:20:de:2c:82:93:7e:10:28:d5:30:3b:d4:c3:
4d:f1:d2:38:ed:85:4e:3d:11:0d:0d:9d:78:2f:17:
55:14:2f:19:cf:fc:64:8b:16:9b:72:60:11:50:fa:
ea:ef:00:b9:dc:63:7f:8d:6a:6e:4c:26:b3:5a:36:
cb:5c:97:e9:34:55:89:ee:94:1d:3b:76:a6:8a:1e:
94:ff:22:78:1d:b6:e3:d3:64:ab:f4:8d:69:d7:f6:
9f:c1:31:38:ac:50:bb:24:f3:07:41:a7:66:b7:be:
8f:0f:fe:4a:07:07:47:f9:b5:8b:1c:38:2a:0e:72:
79:ac:e7:1c:37:87:86:dc:b4:bd:30:69:20:e9:db:
0b:60:97:07:bb:1e:34:92:e0:39:01:ce:34:b9:09:
79:97:e0:32:06:4f:1b:d4:2c:ed:77:82:1a:5c:e8:
7c:15:42:b5:e4:f1:f3:cd:0d:f1:4c:1b:68:d4:b8:
20:47:99:24:58:e3:5a:e5:cb:74:4c:40:5c:c3:4b:
69:14:3d:54:00:73:e6:c0:ae:ff:36:3a:2e:88:6e:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:AB:2C:F4:2E:BF:22:5E:BB:A7:17:18:36:C1:2B:66:43:0F:36
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b2:8b:9c:1b:6c:d0:e6:2c:66:3d:cb:a0:2f:83:f1:f8:2e:
6b:0f:41:77:34:11:1f:cf:d1:af:55:24:5a:8d:da:b1:f1:67:
31:97:b2:f8:9f:31:22:28:c8:73:64:22:3c:71:59:08:a0:e5:
5f:21:85:04:2b:83:04:7e:0e:b5:dd:13:65:f3:b1:b6:68:92:
ef:37:52:ca:1f:e2:a0:61:4d:22:00:b4:c0:9a:04:c3:b4:68:
a3:72:b3:6e:d2:71:92:9e:17:de:14:35:35:ad:53:ea:55:e4:
08:f5:cf:2e:4e:cd:a7:ec:38:49:51:59:63:bf:3d:4b:fb:ca:
85:45:40:8d:69:58:f6:89:23:cf:05:b3:22:56:f8:0a:1e:3a:
af:6e:c5:ba:62:27:2e:3f:f3:8a:9e:37:37:9b:8e:e6:07:c6:
d6:8a:35:b8:b4:79:f1:8d:a8:62:ad:d1:9a:63:6e:34:86:7b:
f3:70:21:5e:03:40:e0:d1:e3:91:b1:7c:d8:66:4d:11:97:06:
bb:16:83:fb:4e:d4:35:77:99:bf:bc:08:86:0a:52:44:af:48:
02:c2:d8:49:04:33:41:c0:be:b5:dc:31:57:f2:47:f7:5f:82:
15:3f:4e:2c:ff:6b:4e:9a:0d:24:66:d8:a9:f7:19:3c:ce:6a:
ea:ba:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:09:42 2025 by rpki-client