Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: pLY+W2daG3/GggaRukqGXPiWqzAJrA+bgPg6vhkHnWo=
Subject key identifier: B9:0E:0C:7E:22:FA:35:09:33:01:1B:D7:3F:3D:DF:22:4A:2A:6A:33
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 0197469E6B68AA35ACF8D2A46A9370A1B7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 120E
Signing time: Fri 06 Jun 2025 19:01:16 +0000
Manifest this update: Fri 06 Jun 2025 19:01:16 +0000
Manifest next update: Sat 07 Jun 2025 19:01:16 +0000
Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: NSzy6FlOV+xWrrXs+52y1+9/FLA31Qozbq3AYlHGQq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:6b:68:aa:35:ac:f8:d2:a4:6a:93:70:a1:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Jun 6 19:01:16 2025 GMT
Not After : Jun 7 19:01:16 2025 GMT
Subject: CN=b90e0c7e22fa350933011bd73f3ddf224a2a6a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:7d:63:1a:a3:80:b9:dc:ed:82:40:d2:5b:
fd:d6:c4:fa:4b:a0:b5:17:fb:85:cc:00:51:05:5b:
b6:50:3d:9e:97:2e:6f:bd:27:e5:91:1e:b3:f4:1a:
c0:f5:12:2d:3b:aa:7d:fb:8d:b6:b6:eb:ce:43:31:
76:ee:58:e6:3b:28:2b:ca:41:6f:bd:c4:f1:6a:9a:
14:d3:63:98:73:30:29:60:2e:20:a4:20:b9:1c:71:
31:3d:b3:6d:96:90:34:73:d9:2e:32:5d:d6:6c:cb:
c6:16:3a:6c:3a:24:01:31:ee:52:8a:8b:73:8f:d6:
83:0b:e9:0c:5e:80:62:55:6a:9c:bd:3c:ab:ca:95:
67:a2:74:d9:18:fa:72:4f:ee:f4:f6:be:33:0c:27:
fd:83:64:3b:64:5b:8c:01:5c:ff:48:ee:58:f2:9d:
24:b7:d9:46:8c:16:5a:a5:0f:15:87:71:3f:4e:ea:
e4:fe:cc:44:98:92:71:19:60:1d:29:fe:8c:cc:7b:
c6:48:69:a2:aa:e6:2c:63:d1:54:61:5b:0c:d8:b5:
f7:ad:ee:2f:90:00:80:c8:73:da:af:2e:22:30:fe:
74:01:87:10:3f:18:4a:59:6e:b8:85:42:18:de:79:
04:d2:70:ad:17:e3:8b:26:78:1f:a0:2c:d3:79:65:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0E:0C:7E:22:FA:35:09:33:01:1B:D7:3F:3D:DF:22:4A:2A:6A:33
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:73:1e:9b:83:b0:d0:37:ed:9b:f9:58:a3:eb:23:aa:24:
33:45:e0:95:30:3b:11:33:0c:3f:cf:ca:be:a7:5d:9d:fc:d9:
8a:97:8f:c6:0b:09:d9:51:36:26:f1:46:75:27:6a:42:74:e7:
b7:d8:fb:45:77:e2:91:a9:57:8c:75:15:0a:f0:e8:05:81:ef:
c7:27:a4:00:30:15:d9:9a:58:93:51:ef:14:b2:89:34:6b:47:
fe:c6:39:93:55:62:4e:3d:92:0f:ea:d2:8b:32:62:f2:21:ad:
43:d6:f4:92:77:a9:aa:d2:a7:fb:74:72:6c:41:b3:53:30:62:
74:b7:07:81:31:fc:f5:04:fd:08:2c:f0:d8:de:b6:2c:34:59:
a1:75:ef:bd:97:ba:3a:bf:69:40:90:68:5b:e9:8c:28:e0:03:
99:ce:f7:01:d9:da:81:60:ff:22:98:11:08:1b:a2:d3:3e:0e:
09:12:ba:f9:1b:9d:62:e1:72:83:a0:71:37:f7:e5:78:80:06:
c9:88:2a:b3:c8:cf:74:86:48:60:c9:a7:4d:86:02:79:0b:95:
89:60:ef:45:2a:07:87:42:1d:47:5a:16:b6:00:94:a9:50:2f:
16:d4:ca:f7:0b:57:0c:32:84:61:b8:0f:d2:df:d4:d9:ed:b3:
2d:80:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:07 2025 by rpki-client