Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: Oh9ZujENeBJbku6Rzq7S/WXW71Gwg7e6n0lVCMquDuQ=
Subject key identifier: CD:F4:E3:9A:10:E0:C8:2D:A0:19:A1:49:5F:9A:F3:77:89:1C:82:F9
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019748FA5D4F54B0A9B4A57137C1E52FA9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:00:56 +0000
Manifest this update: Sat 07 Jun 2025 06:00:56 +0000
Manifest next update: Sun 08 Jun 2025 06:00:56 +0000
Files and hashes: 1: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
2: sHogSH7MHx4Qu4ypnCQXNOyx8fA.roa (hash: ptV6L9rz/SLZs+uwk6ZFS7KAyp+pD16DhDUF4x5zX1U=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: UgwrBlUddst4Ree+T0+H98r5ob/MhGvYA2DaT9z+Rfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5d:4f:54:b0:a9:b4:a5:71:37:c1:e5:2f:a9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jun 7 06:00:56 2025 GMT
Not After : Jun 8 06:00:56 2025 GMT
Subject: CN=cdf4e39a10e0c82da019a1495f9af377891c82f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:ae:94:63:c9:1f:a2:a6:4b:a0:56:41:35:
4e:43:75:2d:45:7f:1f:d7:db:12:7d:3e:29:d0:77:
c4:ad:29:ef:f5:8a:c8:39:1d:23:46:d5:da:ba:30:
4d:34:0e:9f:07:16:be:7e:eb:b9:d9:18:fc:c3:45:
a7:40:29:28:77:07:29:e4:2e:dd:51:0f:24:d7:67:
16:2e:a7:85:58:be:a6:ff:97:f4:92:04:c9:9a:3a:
63:13:ab:93:e0:2a:54:9e:77:82:5d:7d:35:4b:73:
1a:0e:5d:22:5f:47:d6:0b:c5:fe:c8:a2:a4:ef:0a:
53:bb:45:ca:56:1f:5f:6b:88:c9:cf:bb:6c:55:83:
08:a1:79:3a:b3:c1:5a:66:0f:4a:00:b8:59:7b:1e:
b8:56:8c:71:b1:dd:84:93:89:e4:32:46:77:a8:16:
0f:5a:2f:41:33:56:9e:72:14:32:06:e2:9e:8e:5c:
2a:c4:16:7b:04:66:50:03:03:18:da:2a:ec:af:c3:
c1:ee:72:8e:e7:ae:59:7f:c5:fd:b1:8d:57:a3:54:
2d:19:65:5a:c8:b9:7f:55:fd:9c:f4:fc:ab:4d:c4:
69:99:13:b9:3c:a1:ac:bc:93:00:29:0d:a9:ed:ac:
0e:64:07:e9:8e:92:d0:aa:10:5e:8e:f8:e6:01:7e:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:E3:9A:10:E0:C8:2D:A0:19:A1:49:5F:9A:F3:77:89:1C:82:F9
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:42:c5:72:30:13:d9:3a:c5:db:d4:19:a1:9a:63:3a:c0:
a0:56:df:dc:9b:8c:69:7f:f1:2b:27:2a:ea:11:bc:cb:59:c3:
08:e5:84:4d:d1:7a:17:ae:5e:5e:ed:fe:26:81:9e:eb:e8:22:
3a:25:bd:8f:a8:d5:7a:7b:9a:64:c0:60:26:04:d1:68:18:74:
b4:6e:04:1a:35:53:b5:7a:84:30:87:6b:94:f8:b5:a5:a0:dc:
4f:5a:99:ac:75:02:f1:c5:16:a2:86:79:c1:6b:40:fa:46:f5:
fb:a4:f0:cd:bf:b2:ca:68:db:51:11:f9:50:2c:6f:57:4d:65:
3a:7c:39:cf:6a:35:d2:a1:ab:cb:9b:40:72:6f:9c:13:4a:65:
59:1b:3c:03:7f:72:91:e2:8d:27:bf:e8:35:45:3d:fb:a6:80:
fd:97:f3:48:97:eb:ac:69:d2:c1:22:d6:6e:14:f2:0b:f8:02:
88:c0:2d:e9:35:5d:78:33:d7:32:ac:a7:2b:4a:a9:d1:b2:f2:
36:bf:af:8f:a8:52:c6:3e:f4:b5:3c:33:90:e0:af:1e:a2:50:
4b:c6:17:20:23:ca:82:4f:13:2b:87:90:19:da:c9:ae:67:40:
09:3e:40:27:15:09:fc:6a:74:39:69:d3:cd:1d:7c:59:dc:91:
db:dd:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:59 2025 by rpki-client