Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: qxL0n1zDwNVo64DRtz6Ra0oUFtBJjCXoSNFG9l0v9P4=
Subject key identifier: 54:B2:22:B0:56:93:DF:2A:76:08:D4:55:CE:FC:A2:88:B8:E9:6D:25
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 019748C2FEE1FEFA58815ACBED2EE47C0E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 05:00:28 +0000
Manifest this update: Sat 07 Jun 2025 05:00:28 +0000
Manifest next update: Sun 08 Jun 2025 05:00:28 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: mHf0+Ih8LFXxmW/q1weuEJ7kaEjmd1JlVC7fgjAIW8E=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:fe:e1:fe:fa:58:81:5a:cb:ed:2e:e4:7c:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jun 7 05:00:28 2025 GMT
Not After : Jun 8 05:00:28 2025 GMT
Subject: CN=54b222b05693df2a7608d455cefca288b8e96d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:4f:ca:9d:f7:d9:e1:ab:50:15:29:bb:11:
15:86:01:03:bb:a9:c1:0e:40:63:a9:d3:d1:60:9d:
05:e9:f2:22:84:e1:71:7f:2a:dd:b2:10:21:d5:45:
f6:14:fb:d5:32:8a:98:1f:93:ec:d2:e1:af:dc:15:
9a:1e:ee:cb:39:51:26:a4:65:81:cf:c0:bf:23:63:
5a:b8:ac:24:3b:97:ee:fd:b6:2e:48:5d:06:1b:d0:
90:e5:e4:ba:c9:3b:f1:0d:ec:d3:e7:0c:e2:8c:98:
1a:64:b8:23:3e:f5:11:08:61:4d:0a:ee:d9:76:9c:
6f:1e:44:e7:37:b5:24:af:9b:b6:ac:7b:b3:c1:e8:
d7:b6:77:f2:19:bd:8f:64:e0:3d:62:30:a2:0c:af:
26:74:52:dc:c6:58:fa:de:5d:0f:12:d9:c3:6a:71:
9c:b3:7b:78:e2:34:b2:f5:cd:99:c9:71:89:a4:dc:
97:1f:cb:0e:77:35:e9:0f:a3:95:a9:65:58:0c:a8:
5f:a4:8c:de:3d:32:f0:e0:1f:4b:fe:e2:91:d8:08:
f5:0b:11:74:9b:e1:d6:ff:7c:73:84:04:55:5b:b1:
e7:20:2f:c9:6f:33:87:83:be:ea:6e:c2:21:25:73:
da:ec:b0:fd:2f:88:5c:3c:07:99:c0:a4:1e:f6:04:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:22:B0:56:93:DF:2A:76:08:D4:55:CE:FC:A2:88:B8:E9:6D:25
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:9d:81:da:3a:06:66:0d:0c:f3:c1:6b:fb:94:a6:47:a9:
41:2c:d7:60:67:46:21:6e:88:22:ed:21:7d:18:8f:32:ab:36:
08:e5:80:13:bb:7a:97:1c:a8:42:7d:a7:5a:ac:38:64:72:93:
1c:8d:98:44:d3:00:bf:c4:c0:17:1f:d5:3c:39:3f:0f:1b:61:
d2:e8:dd:69:fb:b1:b8:99:41:e4:8c:0f:37:8f:06:b3:cb:51:
fa:4e:13:75:ed:c3:6b:99:98:57:57:8c:2b:88:33:28:33:22:
e0:35:95:9a:50:04:f6:4a:44:0a:df:5a:2c:87:25:a2:12:b3:
8e:73:77:c7:ef:af:8a:25:76:70:ec:4a:8e:77:57:6c:89:65:
57:1f:eb:8f:2d:f3:f8:fe:68:f6:29:68:bf:67:3f:85:1f:dc:
6a:e9:62:ca:0a:19:bb:d5:97:04:e8:04:7e:92:51:5b:f5:99:
9a:8b:ab:e8:6c:f7:d3:70:cb:c8:18:f8:cb:3a:c6:2a:11:7e:
a0:87:3f:1b:df:48:65:38:9b:52:6d:a0:a0:04:35:4f:87:69:
ea:48:28:00:c6:a5:b4:44:00:4f:0b:3f:15:7e:08:31:33:8f:
e8:b6:d0:2c:ee:1a:53:f4:09:2e:d8:21:0d:c7:8b:64:b0:71:
55:51:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:01 2025 by rpki-client