Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: tG9OCaZv88a7Mid0GyIak4pAFRgQkAmM9NJflxHhL88=
Subject key identifier: AF:53:74:18:AE:5E:D4:6E:37:E0:3A:D0:74:09:C1:51:D0:48:6B:FC
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019741E5B556DEB4206568305E383F8F5482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 010B
Signing time: Thu 05 Jun 2025 21:01:02 +0000
Manifest this update: Thu 05 Jun 2025 21:01:02 +0000
Manifest next update: Fri 06 Jun 2025 21:01:02 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: EjTag7TEWJrmow3V1HJZVEBtACdCTxkKkEUkt9vAS9c=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:e5:b5:56:de:b4:20:65:68:30:5e:38:3f:8f:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Jun 5 21:01:02 2025 GMT
Not After : Jun 6 21:01:02 2025 GMT
Subject: CN=af537418ae5ed46e37e03ad07409c151d0486bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:ce:03:28:d7:7e:0d:fd:91:2f:8e:06:cc:
71:96:3a:bf:42:10:4a:7d:dc:00:ff:b9:da:ca:80:
1b:de:27:1d:cd:8a:8a:ea:27:99:d3:e5:fa:8e:92:
50:26:5b:da:ce:54:4b:b7:c6:4a:0f:55:59:87:9e:
d6:d3:ae:54:cd:10:4a:47:4b:69:0d:00:13:61:b6:
c7:ff:5c:87:f7:a3:04:f1:4b:78:9d:09:1e:39:f6:
c0:fb:cd:ce:54:c2:21:a0:61:36:06:95:23:b7:0b:
3e:bf:cf:e8:89:be:4d:71:01:25:7f:a4:90:f5:4a:
3f:0f:d5:c8:71:98:b3:4f:ee:0e:91:c6:94:fb:aa:
e6:1f:02:10:8a:46:cc:5c:89:3c:31:e0:6c:2f:35:
27:d7:54:6a:5d:e9:42:13:1b:36:fa:11:98:d3:ea:
ee:bf:e6:27:ca:8d:0a:a2:a1:e5:a9:d1:1e:f9:37:
00:1e:55:ee:73:68:f5:d8:f8:f9:58:59:9f:13:9b:
99:e5:11:5d:7f:8b:b9:be:2c:ce:f2:e0:b1:a7:ad:
5e:a9:88:9e:ea:e8:30:ff:46:e9:01:72:9d:79:11:
46:4e:e4:db:64:aa:c3:cf:d8:18:97:6b:8f:f6:6e:
4b:3d:2d:4d:65:fa:0a:8f:0c:6c:d7:0b:c3:e1:7f:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:74:18:AE:5E:D4:6E:37:E0:3A:D0:74:09:C1:51:D0:48:6B:FC
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:d1:ba:fd:1a:04:f9:62:05:c4:fc:51:67:78:60:00:79:
a7:ec:d7:87:f0:f2:e9:d9:7b:9b:58:28:14:36:29:c9:c1:57:
88:1d:29:56:e1:3b:23:a3:83:db:7b:f7:7e:c0:c4:73:fc:b0:
a8:56:0d:68:24:a0:59:3e:15:5f:18:ea:85:a1:3e:5d:06:73:
9d:2e:bc:39:1d:47:1e:6c:1b:c2:e4:59:0d:4d:99:86:19:2d:
92:48:fa:a8:45:53:ab:e1:86:92:e2:dc:01:db:d4:8d:02:41:
e7:69:cd:6d:23:6e:c5:cc:18:01:20:c1:21:ac:77:4a:01:45:
e4:4b:c6:52:1b:0b:eb:8a:78:2d:0e:2c:f6:94:1e:75:49:0e:
c1:ee:b6:c9:33:7a:f4:d0:aa:7a:6d:42:5a:07:31:41:28:5e:
02:76:3a:f0:63:fb:12:dd:89:2a:32:c0:e4:06:5f:47:e4:69:
8e:a0:ae:a5:a1:65:b3:25:b3:51:a5:ee:68:9a:78:8b:aa:78:
2e:8f:c7:7c:41:3d:ad:b2:f0:93:32:b0:bb:f8:59:5d:ea:65:
fa:6e:39:78:88:2b:58:30:be:18:3e:a0:c2:08:47:19:34:e1:
d5:42:f5:48:af:e8:34:6a:1a:2d:b5:79:1f:ee:f6:98:b9:9a:
ca:b7:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:06:33 2025 by rpki-client