Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File: b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier: 590+vfkVkecSdpLjV/dCF6P0pgMIAJoO6iZAeJEutdk=
Subject key identifier: 28:B4:15:0D:47:61:E5:CD:19:89:D0:63:9E:D1:98:83:36:EB:16:12
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 0197470BBC6B95B3B8D164B4BCCFE203A888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:40 +0000
Manifest this update: Fri 06 Jun 2025 21:00:40 +0000
Manifest next update: Sat 07 Jun 2025 21:00:40 +0000
Files and hashes: 1: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (hash: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=)
2: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (hash: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=)
3: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: 0jVq5ykZ3lbeK7ENN1FFz+rm0IbXvx0VVHttPRsEr0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:bc:6b:95:b3:b8:d1:64:b4:bc:cf:e2:03:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jun 6 21:00:40 2025 GMT
Not After : Jun 7 21:00:40 2025 GMT
Subject: CN=28b4150d4761e5cd1989d0639ed1988336eb1612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:65:32:8c:66:d2:74:de:10:e1:98:72:96:
7a:0e:13:b4:43:40:3a:ac:03:62:35:a4:54:cc:2e:
b6:8a:18:c3:74:a2:c0:34:8c:38:06:d7:25:99:ba:
ff:0a:80:fc:3c:5b:cf:d1:6a:73:17:ea:92:9a:7b:
e9:ec:0f:78:19:2b:85:53:80:9c:82:6a:14:65:df:
9c:50:76:23:4b:c0:d8:a7:01:55:c0:fa:30:d5:55:
f9:5d:c1:fe:cc:e4:3d:61:4c:47:61:50:0d:99:fe:
ef:a8:72:e1:2f:b0:f1:0f:09:7f:8d:1c:b6:87:10:
bb:b7:ac:f0:02:6b:99:da:b4:90:f0:97:5c:c9:cd:
5b:00:4d:d9:f1:78:0a:b9:74:9c:a2:59:dc:69:d4:
20:ee:9c:f8:f1:b8:17:da:6c:cf:2c:7d:01:63:97:
13:19:52:f3:8c:f1:d4:d5:89:6c:e4:6b:d9:e5:06:
eb:97:49:51:87:6c:b0:1c:3e:34:b0:27:df:5d:de:
94:72:63:de:f6:66:f6:37:62:51:fa:b4:4e:58:1c:
7b:e2:b2:fa:ab:3b:1e:1d:c7:b1:f5:fe:87:f9:98:
3a:d2:3a:4e:3e:fb:c8:9d:73:77:b5:6f:e0:88:d9:
3b:b9:fd:9f:ca:d9:7c:53:d8:05:c7:1b:2c:c3:af:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:15:0D:47:61:E5:CD:19:89:D0:63:9E:D1:98:83:36:EB:16:12
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:10:32:94:e5:f7:e1:53:44:49:9e:6e:4f:85:31:c3:94:
99:81:78:31:e9:96:c4:e0:36:89:48:8a:f1:b5:98:3b:55:72:
5f:79:c1:9c:84:90:46:7b:a7:e5:a7:fe:cf:9b:62:d0:7d:6c:
08:10:91:86:49:93:17:e2:bf:ee:a2:ab:db:6f:41:4d:08:4a:
b4:2c:23:50:77:05:68:a3:6d:f4:c2:95:33:28:1b:7e:59:e0:
d1:e2:77:9d:f4:e6:79:09:b1:3a:36:dc:40:59:4c:fe:da:b1:
78:1a:f8:42:43:35:ec:47:83:15:39:75:c1:4a:8f:55:f3:67:
3c:40:dc:de:00:b4:8a:d6:fd:33:b6:15:00:85:ad:5d:0f:10:
ac:e3:9b:c7:75:9a:3b:57:13:7e:7d:4c:ce:55:ce:57:32:d7:
30:38:f6:22:d4:54:50:8a:ee:66:fc:14:8a:99:a1:d5:13:8a:
48:28:41:b0:c3:6b:9b:64:93:bb:24:65:49:67:3d:1e:8b:9a:
2c:87:8e:84:be:49:6b:3d:d1:96:e5:58:61:17:63:aa:ed:ef:
87:0e:56:38:8e:ba:86:e9:04:a9:d3:f2:f6:ce:c6:f4:d5:75:
64:5f:51:7c:ec:b7:44:1a:71:31:99:d0:77:05:23:41:bc:56:
15:2b:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:27 2025 by rpki-client