Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: T1LgMGxPi5+NeCohUSi8xyDQgOvye57m9DfrkKmS8SI=
Subject key identifier: 89:A5:B4:08:AA:AA:95:02:CB:89:66:A3:80:36:72:F2:F1:EC:C0:5A
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019761A6FC02770F4969EF28A3ED9ED4BAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 12D5
Signing time: Thu 12 Jun 2025 01:00:22 +0000
Manifest this update: Thu 12 Jun 2025 01:00:22 +0000
Manifest next update: Fri 13 Jun 2025 01:00:22 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: gv9Z54DKFfaqmNSla+sc6c5GDFmcYCaOHxbUcrCS5vY=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a6:fc:02:77:0f:49:69:ef:28:a3:ed:9e:d4:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jun 12 01:00:22 2025 GMT
Not After : Jun 13 01:00:22 2025 GMT
Subject: CN=89a5b408aaaa9502cb8966a3803672f2f1ecc05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:ba:ce:68:3d:1c:fd:e8:82:58:32:4a:72:
d9:11:56:8e:ef:e7:be:ed:b3:84:0a:e0:32:1b:6a:
db:4a:8c:7f:23:15:b8:df:14:5f:e8:ca:32:bb:a8:
0a:a9:c2:1a:a0:af:8a:11:3a:e5:3b:d6:74:2e:e2:
29:7f:77:61:88:46:e3:3d:9e:20:28:01:3d:87:d8:
3b:6e:8f:4c:e1:70:bc:e6:ec:f0:bd:fd:4a:9d:a1:
9a:a7:24:69:d1:4b:e6:33:bb:42:c7:a2:24:0a:14:
84:ce:52:47:97:b7:5b:0b:7a:4a:ae:d8:75:4b:54:
2f:bb:57:21:42:4f:fd:9a:4c:6b:10:29:9a:28:75:
cb:99:48:1e:d1:8f:28:8e:d5:01:8d:fc:e1:e7:88:
d4:8d:0d:72:c8:1f:35:b7:a4:a3:99:43:02:5e:d3:
b2:d3:e4:11:fd:dc:b9:8b:3c:d8:33:46:49:61:12:
49:23:c3:8b:f9:fa:1a:ef:07:83:f0:db:e5:9d:44:
d2:01:2f:0d:09:58:05:a4:32:2b:6c:fc:db:9f:dd:
7e:66:e9:5b:0b:d4:90:90:25:9b:f8:42:fc:4c:27:
4a:66:74:d0:37:27:d2:b9:ff:b8:7a:31:e0:77:85:
eb:86:6a:23:6d:34:87:b0:b1:9b:c0:7d:72:26:1c:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:B4:08:AA:AA:95:02:CB:89:66:A3:80:36:72:F2:F1:EC:C0:5A
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d3:b4:01:99:14:59:dc:93:db:66:49:f1:9b:45:54:ec:9f:
46:14:b7:76:f3:22:e0:a3:ce:18:15:1f:e3:b0:80:d3:db:29:
54:78:b9:3f:b8:e2:e5:c3:b1:4f:09:eb:e5:4e:07:7d:30:9d:
16:1b:f1:02:e4:c0:5e:4b:44:cb:6b:4f:0c:6c:4d:bd:58:de:
37:fb:ae:48:1e:07:31:48:aa:89:37:02:fe:e9:bb:fc:ed:2b:
6e:15:4b:c3:f5:e4:69:97:76:fd:69:e9:f0:bd:ec:fd:17:9b:
7c:17:16:dd:55:52:60:23:2c:d2:c4:cc:a4:6f:da:53:f2:4e:
2c:3f:2d:ca:65:d5:ac:f9:33:46:0f:ab:b6:4a:2a:dd:41:f6:
31:19:c6:33:8c:da:eb:6b:e1:63:e9:ca:f7:d9:f3:4e:f8:8a:
21:d6:86:6f:a0:bf:2a:68:8e:fc:13:cc:6f:6c:6b:10:2e:1e:
f0:8f:cd:57:2b:b7:dd:8e:45:b0:23:96:a2:be:49:9e:f4:41:
d6:5e:b3:3f:4d:d9:65:a6:74:5b:08:cb:f4:7a:9d:e4:7e:f5:
7f:8d:63:09:35:94:21:45:e4:cb:0a:34:8b:d7:d9:31:d0:76:
6d:fa:26:5e:8b:bc:2f:f6:b1:e4:9f:73:a7:02:84:58:9c:e9:
bb:be:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:15:32 2025 by rpki-client