Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: TqtYtt3N4O51StWRlXAeQblTaFc45v4J6BGAQYdbdDc=
Subject key identifier: C3:B8:5A:EB:6C:83:55:4D:8B:8B:46:53:F1:22:68:BB:86:BC:D1:9A
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 01974DE98320B7C7865E404FC538E0150F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 0159
Signing time: Sun 08 Jun 2025 05:00:38 +0000
Manifest this update: Sun 08 Jun 2025 05:00:38 +0000
Manifest next update: Mon 09 Jun 2025 05:00:38 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: 0/sSH4XEW/QZ1wKeyaP2R9mnuc6Ikb8MefHkPPR6HOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:83:20:b7:c7:86:5e:40:4f:c5:38:e0:15:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Jun 8 05:00:38 2025 GMT
Not After : Jun 9 05:00:38 2025 GMT
Subject: CN=c3b85aeb6c83554d8b8b4653f12268bb86bcd19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:40:02:47:60:a6:1f:f1:ae:71:c2:68:db:
ad:7b:26:cc:b9:ac:c3:cb:9f:b2:60:1b:76:51:0d:
7f:f2:2e:78:0b:ea:7e:05:8a:e6:f7:cb:f1:33:bb:
25:dc:75:22:6a:f9:19:c4:36:ff:ae:20:7a:d2:81:
d6:ab:5c:7e:28:12:8b:76:64:a3:5f:7b:75:3f:1d:
0b:66:43:1f:8a:79:e3:20:07:b6:64:81:71:e0:fa:
3f:ae:27:89:82:92:03:dc:d4:0d:4b:e4:22:02:88:
f4:00:a3:7b:79:8e:a3:89:d3:d0:b2:43:b3:93:29:
c9:28:57:f6:64:29:d1:45:17:09:30:b1:29:5f:f3:
15:58:3f:33:02:ef:49:69:07:72:55:40:1f:bd:fb:
51:0f:c9:55:8b:ac:45:27:28:f9:2f:3c:f4:25:e6:
10:df:c4:f4:18:88:df:b6:af:3c:15:9b:91:20:7d:
e4:45:d7:d5:ce:52:0d:74:d0:9a:e7:73:30:00:52:
fd:fa:da:7d:00:b3:71:c7:85:2e:83:dd:29:37:be:
95:a9:ce:91:2a:57:83:d6:84:25:6b:a3:3b:1d:9a:
ad:59:ea:61:1f:92:a6:ce:23:ee:20:bd:ce:c5:a1:
90:d8:f2:d8:53:10:24:ac:e4:55:ba:f1:52:b9:70:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:5A:EB:6C:83:55:4D:8B:8B:46:53:F1:22:68:BB:86:BC:D1:9A
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:0a:be:d3:66:57:ae:12:3d:ff:26:93:bb:68:61:a1:ff:
87:c3:dc:df:38:e8:2d:3a:41:29:29:17:29:f1:9f:19:05:c1:
04:25:9f:47:84:2a:38:9f:6c:2e:2e:df:00:b8:fe:36:06:be:
17:80:ad:2a:b0:cd:61:21:2f:9a:f7:bb:c5:a8:6f:00:ae:d3:
22:75:a2:fb:6d:8e:0e:ac:00:c0:3a:e7:01:92:fe:0b:09:a9:
2a:8e:2e:c0:47:68:98:11:d3:1a:6e:2f:30:b6:d9:21:99:42:
ef:84:b0:41:13:b3:aa:fe:59:05:5d:9a:03:52:cb:ea:f6:d4:
99:a0:d7:e5:59:38:4e:56:32:3c:d9:0d:92:8f:94:17:ba:1a:
70:d4:63:b7:a4:2b:98:c5:a2:11:39:f5:02:91:7b:f4:21:6a:
eb:5e:5f:59:8d:a8:56:ba:09:92:1b:77:a5:9e:20:50:1c:30:
59:68:c4:0c:8d:51:b3:6a:8d:e6:7b:86:08:94:c0:d9:d1:9e:
bf:1f:d7:2c:44:25:2f:6c:8b:da:78:3a:27:d9:f0:6e:1b:a4:
d4:7b:3a:34:c0:64:32:b5:9d:1e:74:2a:10:52:b8:72:cc:06:
e6:58:62:05:56:74:8f:7b:b3:ea:d6:3f:2a:c5:bb:a0:e2:fd:
b5:ad:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:43 2025 by rpki-client