Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: OmNHlYj++gnkjFjOPv3zZHe4nFl6UkiPSnvekweCoG8=
Subject key identifier: 70:FF:D5:34:DB:A1:9A:4D:B9:14:85:FF:A1:9E:D2:D6:2C:AC:D4:0A
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0197D2F35A7C30109A136DEFBE4E718FDF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0CA8
Signing time: Fri 04 Jul 2025 01:00:52 +0000
Manifest this update: Fri 04 Jul 2025 01:00:52 +0000
Manifest next update: Sat 05 Jul 2025 01:00:52 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: L2aAfz3a48bD0vg6ZBFCMcJ1uu02bGhRbJ8uf8HEzOI=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:5a:7c:30:10:9a:13:6d:ef:be:4e:71:8f:df:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jul 4 01:00:52 2025 GMT
Not After : Jul 5 01:00:52 2025 GMT
Subject: CN=70ffd534dba19a4db91485ffa19ed2d62cacd40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:0b:0b:70:3f:97:72:5d:9a:10:bc:69:1f:
79:b6:2c:fe:85:3a:a8:bb:23:bc:4f:c0:0e:dc:ee:
2b:fd:54:ca:64:0c:53:18:0b:55:3f:6c:d0:67:0b:
74:c6:de:22:05:9a:dc:d8:8c:d8:41:8f:32:2c:67:
2e:ca:a2:e2:ed:01:ee:d8:c3:c5:e7:88:ea:65:e9:
3c:6d:90:e6:d7:b2:60:dd:75:97:10:7d:14:37:cb:
d5:69:62:57:74:8a:34:51:10:8b:61:6d:d9:43:6b:
a6:3e:20:34:65:81:33:a8:6f:04:70:1a:d3:cc:94:
e1:1f:3e:0f:e4:0e:ee:bb:16:45:36:51:b1:f1:50:
1d:21:4f:2d:5b:c6:b4:70:8b:ba:93:d6:a7:5e:f3:
80:71:ce:30:30:1c:b6:93:a2:06:00:6f:f8:7c:3c:
4e:69:8e:d9:2d:db:e8:1e:d4:eb:cb:e4:d7:e3:53:
4a:c1:b6:2a:54:8b:b1:55:90:ab:c0:d8:e8:fb:a5:
38:8b:e5:13:b8:01:fd:96:26:e7:1b:07:f1:a2:6c:
8e:fc:af:fe:58:1d:3b:ac:50:cb:b5:73:96:ff:2e:
5d:15:9e:40:74:a5:ec:5c:3e:d9:78:bf:2b:05:b0:
59:d1:0a:c4:4a:fc:fe:f3:c9:c6:bf:d7:7d:4f:5d:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:D5:34:DB:A1:9A:4D:B9:14:85:FF:A1:9E:D2:D6:2C:AC:D4:0A
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:82:0a:d3:ad:0e:a7:77:13:01:2c:89:c9:11:a3:f9:54:
2e:01:0a:62:05:62:f8:77:6b:f6:7f:44:71:4d:0e:5b:9c:51:
85:73:87:d6:d1:81:df:b7:d2:8f:63:57:d8:a2:1c:fe:58:3d:
91:66:0d:55:e7:ce:2d:69:20:f5:b7:69:e0:c9:40:6b:46:88:
00:74:46:6c:2b:2e:16:01:9d:df:de:a9:ea:0b:16:1f:47:6b:
68:f7:e1:ad:e9:de:5d:83:a4:61:0c:6b:91:d2:df:e9:ba:ea:
84:dd:8b:f0:fc:0b:0a:24:bd:79:0c:3f:37:61:0f:5f:28:37:
9b:e9:62:46:12:34:55:2c:d3:af:7f:ac:84:14:5c:ad:c8:84:
02:49:d4:87:e7:8f:6e:f1:17:c7:f1:8b:05:96:2e:f7:b3:57:
55:68:6a:eb:d8:e9:38:e2:fe:a1:0e:41:af:5a:1e:c6:8d:a0:
49:8d:a8:c0:c3:75:ee:e3:25:f2:82:51:dd:fc:56:90:1a:f0:
12:ce:23:3e:ee:5f:71:24:ac:0e:66:97:0a:e4:be:55:b5:a5:
40:c4:90:7f:ed:24:0e:4f:7c:13:2c:de:7e:03:96:ba:40:50:
1d:33:b1:d2:1b:4d:37:05:b1:3d:41:00:e4:e5:d7:33:a5:ee:
2f:25:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:46:47 2025 by rpki-client