Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: +lrp3iKjaB4bpZxL+8ij0MQhWwCra12uB+Csb1/Ww1U=
Subject key identifier: C0:C9:B8:BF:89:E5:1B:72:86:0E:93:A5:90:84:8E:31:C0:E8:3D:AA
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 01974742B2E4224B2C160A87647CD4CBF52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 22:00:42 +0000
Manifest this update: Fri 06 Jun 2025 22:00:42 +0000
Manifest next update: Sat 07 Jun 2025 22:00:42 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: wIDkEdTkLwO74uVh6KqMoVaYVqR8+vVhIjSMy5CSHak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b2:e4:22:4b:2c:16:0a:87:64:7c:d4:cb:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jun 6 22:00:42 2025 GMT
Not After : Jun 7 22:00:42 2025 GMT
Subject: CN=c0c9b8bf89e51b72860e93a590848e31c0e83daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:11:06:98:f6:90:1c:a9:c2:97:a5:ba:b0:
3b:17:36:40:19:00:d9:2a:cb:c2:34:25:eb:75:d0:
b7:8f:32:51:43:1a:6b:43:23:a1:d8:5d:04:3d:5e:
f8:fa:38:bb:f1:3b:f8:5a:d4:29:66:43:c6:e2:91:
76:ce:41:73:2b:ce:78:a8:37:7c:b7:62:d6:94:63:
58:2c:7c:cd:5b:62:78:c2:78:81:fd:17:87:ea:b8:
a7:5a:ae:1b:f0:4f:76:12:47:5f:fb:1a:d2:a4:9a:
e2:a7:74:61:65:93:2d:af:44:9b:be:89:9d:47:0a:
9a:48:9b:63:c7:d6:eb:73:04:34:41:91:06:58:4f:
85:ac:73:d3:11:5f:ef:e1:0b:30:84:00:1d:6d:a0:
26:63:15:18:41:1f:e9:d4:9d:8e:29:c3:fd:ec:72:
00:8a:18:40:3b:42:84:ff:07:4d:8a:3e:03:3f:7f:
48:9e:dd:da:9b:46:a3:32:ed:4e:3e:0d:ae:4e:52:
5f:aa:6e:09:3e:c9:2b:fe:52:0a:49:fb:48:84:f5:
2c:fa:ac:f5:f1:f3:6f:61:af:e7:b1:05:e0:dd:a5:
50:e9:9f:e1:01:ab:9b:ba:9c:0b:33:8f:b3:08:97:
e6:23:45:e5:24:e3:58:e8:a1:02:55:45:de:3a:27:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:B8:BF:89:E5:1B:72:86:0E:93:A5:90:84:8E:31:C0:E8:3D:AA
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c9:af:33:6a:46:80:13:a2:20:0b:88:8a:64:b5:df:8c:96:
15:3f:cb:76:6f:dc:c2:ff:94:46:94:73:65:20:81:83:8f:59:
66:62:bd:b5:c9:52:81:54:6f:c6:40:ab:ab:86:e4:c4:c2:87:
55:06:84:c4:24:de:93:d7:06:59:2d:e1:7e:c2:f3:b6:64:76:
32:4f:84:16:0c:92:fb:be:db:0c:cf:2d:7f:82:26:8e:db:0e:
3f:a3:57:01:20:50:85:17:2e:e1:e8:61:59:fc:89:29:3e:d4:
e9:d2:7b:b1:1f:cc:0b:e1:01:40:bf:e9:30:67:89:b2:cd:bc:
f4:f6:8f:10:0f:8d:92:5a:dc:5d:bb:5f:f8:af:7d:d3:2d:d7:
ae:41:b7:e9:47:bb:ba:c1:77:13:76:c3:18:54:87:1b:3d:8e:
32:5e:36:57:5b:7d:f5:57:18:df:a6:0d:e8:81:cb:0b:68:13:
84:70:c7:92:ba:1a:11:51:2f:21:de:77:6c:a0:e4:54:e3:a0:
76:84:f4:c4:91:c7:6b:11:5b:7b:ef:5f:28:0c:82:ca:3b:0c:
67:f7:af:2e:a2:ea:88:77:e9:f3:93:73:7a:5f:b1:e2:bc:2f:
fe:6d:0b:13:35:fa:c0:79:a5:20:15:92:9f:b4:9d:bb:aa:2d:
94:5b:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:01 2025 by rpki-client