Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: Q8Xfgrt51xxyX2bHRi3ZWRdfRd0ctkHfaU9WoNjR0rU=
Subject key identifier: FE:02:63:AF:8B:99:51:D7:BD:F7:36:91:DC:29:8B:B8:2B:DF:03:B6
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 01974D0D977B799E87AAA70FC6AB04676159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 0614
Signing time: Sun 08 Jun 2025 01:00:25 +0000
Manifest this update: Sun 08 Jun 2025 01:00:25 +0000
Manifest next update: Mon 09 Jun 2025 01:00:25 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: Nm/1w3ATvdVsMRH04x3ozc5QpfmCHHmaE9SXHdQLXZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:97:7b:79:9e:87:aa:a7:0f:c6:ab:04:67:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Jun 8 01:00:25 2025 GMT
Not After : Jun 9 01:00:25 2025 GMT
Subject: CN=fe0263af8b9951d7bdf73691dc298bb82bdf03b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:f7:8a:29:39:53:7c:b9:ff:24:f1:60:40:
67:29:00:af:9a:86:55:c4:33:f1:65:6b:55:f8:48:
88:bb:e6:ae:7c:ed:1d:5f:30:8c:f3:d4:21:7e:50:
59:93:01:7e:2f:74:fb:88:e4:0e:8c:30:fb:a0:b7:
d9:3f:24:ca:75:55:08:ce:2e:7f:fc:ce:1f:78:c2:
22:2c:34:57:49:71:08:40:51:f6:46:04:e8:2e:84:
af:b1:93:7d:8e:88:46:08:ce:b1:98:56:1e:b7:e4:
2b:3e:51:6c:dc:96:88:ca:d8:f7:9c:04:3b:9d:ee:
33:82:9b:14:79:dd:cf:cb:db:60:e9:9b:60:25:fc:
85:52:b5:38:53:76:d5:1a:ed:2d:8e:28:44:7e:0b:
83:d9:4a:cf:e1:fb:29:2b:0b:82:27:59:86:87:3f:
94:12:a0:90:a7:ab:a6:cb:4c:52:cf:35:a9:37:ce:
57:09:24:7f:d4:82:ef:f6:0c:c5:91:70:66:ec:e3:
76:cb:ef:7c:50:1c:da:a5:1f:5c:e9:e9:b8:82:87:
d4:dd:3e:fa:bf:3f:72:6b:f6:46:5d:78:ed:93:8e:
e0:e4:3e:d6:57:25:07:a1:e7:ac:45:03:72:55:3d:
60:29:a8:2a:0a:34:ac:a1:5d:f8:d9:3e:7b:ed:f0:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:63:AF:8B:99:51:D7:BD:F7:36:91:DC:29:8B:B8:2B:DF:03:B6
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:2c:db:b8:10:5e:bc:37:f3:35:e9:16:59:2c:fd:ad:ba:
78:0f:1b:51:64:6d:28:c4:a6:e8:e3:47:3a:8b:5b:72:b0:f7:
44:22:0f:1c:53:95:91:12:d3:2d:a4:87:f3:8b:aa:1a:5f:ea:
99:c4:a4:42:c4:b3:80:79:f1:f5:a0:97:e9:97:bd:ad:cd:a9:
d9:79:c6:fd:75:fb:3a:f5:b2:92:ee:d3:c3:61:57:c8:d2:2c:
59:b0:7a:5e:37:36:86:9c:9d:56:62:59:58:ee:18:51:59:df:
6e:69:ec:95:a1:a6:2b:72:72:a2:29:79:27:62:63:52:37:39:
59:10:28:9d:75:3e:48:d1:66:d2:94:b2:ae:5b:16:ac:2d:87:
67:33:d3:1e:ae:a7:a1:8f:56:c1:5e:2e:cf:5e:23:f7:b1:21:
fc:be:2c:5e:ad:87:40:6d:d3:ad:77:ae:74:1e:3d:6c:35:1a:
b2:11:fe:1b:bb:fd:82:a6:26:f6:3b:1b:46:90:e2:74:72:87:
db:b0:6a:ac:e7:3f:69:d9:a5:f6:55:d5:87:09:14:95:85:c0:
79:f6:7c:59:c2:65:11:62:ba:37:f9:f0:f9:20:a6:91:11:a2:
62:a9:81:47:d3:e7:6b:ef:81:91:4b:73:0f:ef:e6:26:ec:4c:
f1:19:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:53 2025 by rpki-client