Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: c/PXV5PUDktDzEghBONkSGhyJOXLuZdo8LPsqKqVf+4=
Subject key identifier: B0:BC:A6:01:57:F7:3E:2F:7D:13:BD:A4:03:A9:77:B7:03:96:A8:02
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 01974F6A5093464218E9C99A75C59888749A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 110F
Signing time: Sun 08 Jun 2025 12:00:56 +0000
Manifest this update: Sun 08 Jun 2025 12:00:56 +0000
Manifest next update: Mon 09 Jun 2025 12:00:56 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: LLuDD+MJGGM5ZJJL3QcDsKK3Zrv5H2wZFTya4DvBoxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:50:93:46:42:18:e9:c9:9a:75:c5:98:88:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jun 8 12:00:56 2025 GMT
Not After : Jun 9 12:00:56 2025 GMT
Subject: CN=b0bca60157f73e2f7d13bda403a977b70396a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:6a:c7:17:43:77:74:29:61:a7:0c:7b:6f:
c9:be:5e:8e:c8:4a:9a:34:db:2b:8f:f8:14:a0:f2:
ef:93:60:87:74:1b:9d:f0:2e:f3:d8:1f:37:51:6e:
29:62:c8:f5:d2:58:a0:8b:ba:42:35:95:cc:1b:7e:
7d:75:98:1b:7a:f4:f9:85:87:9f:f3:6e:c7:4d:55:
9e:85:df:53:8b:3c:bd:87:2b:b7:c4:8a:4c:14:09:
89:a5:9b:6b:7e:24:6e:32:20:3f:50:a3:76:00:91:
c6:8b:0c:97:72:07:eb:17:a9:69:7c:53:96:7b:88:
4d:b9:d7:07:d0:ab:f0:f4:89:f2:b5:24:90:48:0f:
5a:c4:d7:40:81:8f:14:e9:fd:8f:7f:7a:2e:98:ba:
06:0a:67:5a:a0:89:09:7b:11:b5:08:b2:e7:da:84:
77:1e:ac:0b:48:75:5f:aa:11:4b:00:27:8d:db:45:
ff:db:75:c3:b5:cb:cc:bd:f1:fa:4e:a7:3d:64:89:
02:62:a5:b5:c1:2f:6e:f1:6f:16:1d:01:39:50:d7:
5e:47:c4:ea:46:bd:24:a8:83:2e:7d:8a:da:29:da:
c9:10:fe:76:08:23:8c:a0:40:10:f8:4f:2c:22:f5:
54:f2:d9:b7:13:63:3c:da:91:f9:63:67:66:83:39:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:A6:01:57:F7:3E:2F:7D:13:BD:A4:03:A9:77:B7:03:96:A8:02
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c3:8e:cb:78:88:98:5b:d0:e4:f1:19:7e:ac:03:ea:b3:e3:
73:c3:d2:3c:b1:1e:1e:cc:6b:05:64:3e:1d:32:da:99:a8:d7:
2b:2e:df:48:3e:f4:2f:b4:8e:b7:7c:a4:e2:c5:a5:8b:7c:2e:
1e:17:ca:38:4d:00:e1:29:20:67:2b:fe:f7:5b:d0:d0:02:b2:
a8:c8:13:fb:ae:c1:f9:6d:67:8a:d1:95:da:03:8f:b0:fd:f7:
a9:f7:4a:97:71:07:8b:5d:8f:ae:09:01:ad:ea:a6:c9:b5:5c:
51:35:fb:38:c4:7f:d8:e5:34:54:bf:83:ab:d8:fd:e9:b0:bd:
cf:ac:21:76:5a:f9:35:1b:19:21:c6:ae:3b:2e:36:41:0e:46:
f7:89:d9:4f:38:83:e3:bf:7d:0c:5f:89:57:69:42:34:20:4e:
59:99:e4:11:7a:40:3e:13:c2:cf:17:1a:61:d4:5d:d3:f7:07:
3e:8f:d0:b4:77:53:46:24:5b:5e:15:b9:21:c0:de:6d:db:8a:
c2:3c:50:0e:60:7a:67:22:57:ae:6b:12:f6:96:3d:1c:7c:4b:
d9:1d:4d:08:e2:44:9e:fd:b2:46:d2:88:6d:dc:a4:c0:81:48:
6b:1b:10:f3:c6:18:e5:0b:73:8f:8f:59:9b:5c:62:c0:e7:99:
26:36:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:07 2025 by rpki-client