Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: R+xjox0vMSsoEB2Zd4Z9qWZbmQV6nynqwZbCyew4aPU=
Subject key identifier: B1:28:BA:1A:E5:A5:08:6A:7D:C7:47:5A:62:1C:17:DA:FF:96:D1:79
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 019750468FB347BB46FB33894F014306B68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 13ED
Signing time: Sun 08 Jun 2025 16:01:30 +0000
Manifest this update: Sun 08 Jun 2025 16:01:30 +0000
Manifest next update: Mon 09 Jun 2025 16:01:30 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: D052V7pjrNhG5S6uF4MHfJEUoBnODubvKVnNiyj5PPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:8f:b3:47:bb:46:fb:33:89:4f:01:43:06:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jun 8 16:01:30 2025 GMT
Not After : Jun 9 16:01:30 2025 GMT
Subject: CN=b128ba1ae5a5086a7dc7475a621c17daff96d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:8a:69:5c:a2:d1:ab:19:ef:47:b1:5a:1b:
12:53:48:ca:8d:3c:70:80:96:b0:90:68:c9:2e:f4:
5f:35:f2:53:5c:ee:9c:c0:ef:23:d7:a6:57:34:71:
94:2e:2e:b3:93:6f:a9:cf:6a:1b:85:cb:91:38:a8:
89:15:60:53:5f:38:ec:4c:fe:35:3d:76:ac:28:a5:
2e:c2:b2:d9:a1:9f:66:2c:e8:4f:58:5e:6c:56:01:
a8:a2:93:50:6d:1f:f0:35:d2:2e:03:37:f8:cf:92:
d8:5e:17:9e:76:d0:1c:39:f4:28:b6:26:27:0b:90:
01:36:e8:18:9b:b4:77:43:37:e8:b1:aa:42:6e:4c:
e6:6b:9a:74:85:e2:6f:fe:5a:de:07:c6:c8:35:07:
67:01:48:de:76:5e:72:57:04:9e:c2:12:0d:cd:c2:
14:db:de:f5:7b:dc:19:6c:10:b1:67:44:2e:1c:6d:
4b:cb:6a:fd:4c:3a:ee:c9:33:83:ad:5d:9f:d3:f3:
6c:b4:6f:c4:5d:d5:09:10:76:fc:b2:43:de:bf:a1:
af:0b:78:8f:ca:20:dd:32:6c:2e:c5:74:37:44:4c:
43:1a:2e:5c:38:31:e5:3c:c7:75:38:7e:06:62:9c:
02:9e:39:ea:5d:6a:35:f7:56:90:0a:b6:14:16:db:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:BA:1A:E5:A5:08:6A:7D:C7:47:5A:62:1C:17:DA:FF:96:D1:79
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:03:8e:a5:07:02:c4:b0:1e:7d:26:31:aa:58:4f:e8:e6:
e7:85:fa:82:79:db:17:9c:c3:6f:4e:d5:72:6c:2e:ae:ed:cc:
3c:b3:a0:63:f5:a2:eb:8c:9d:ab:76:4e:ea:bf:de:42:e8:cd:
32:1e:16:35:22:91:94:af:24:aa:25:6d:02:a4:0e:11:9c:6e:
af:b0:c0:14:75:8a:3f:80:1c:42:5b:09:33:39:0e:ec:8f:f2:
0f:3a:ee:9d:3d:e2:e6:e2:96:b8:12:a9:50:48:43:b2:eb:0a:
46:08:a0:c0:2a:48:eb:d3:49:36:0b:ef:3d:e0:04:75:8d:3c:
70:19:38:41:45:89:8d:fa:c7:07:79:e6:29:09:e7:db:28:6d:
ac:8f:f0:c6:0f:16:1c:8c:65:7a:93:e4:63:c1:27:c8:4f:ea:
5e:27:04:01:79:6e:d1:e7:07:c1:bd:85:0d:5a:9f:6b:bb:09:
58:ab:90:c4:ee:82:09:33:1d:08:7d:20:de:b8:86:c5:1a:2f:
10:f8:27:b4:4f:e2:a2:52:18:85:d0:b0:a9:41:de:24:9e:b7:
52:d8:f5:40:3a:d3:21:d8:be:80:a2:f0:bc:c0:c8:e1:ab:f1:
b6:15:10:f0:b6:e0:4c:ed:34:81:a2:b0:9f:d3:18:69:fb:9c:
82:30:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:49 2025 by rpki-client