Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: dATwt+ixr5WpkZsjIAFnhnlh8LdxNYXTvYlCY4CRACc=
Subject key identifier: A9:8D:76:8C:6A:98:C9:B2:4B:DE:87:65:CC:FF:BE:F9:AB:E0:EC:AD
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 0197677221F5C3ACD5D4DD77B5E50DB551BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 12D8
Signing time: Fri 13 Jun 2025 04:00:22 +0000
Manifest this update: Fri 13 Jun 2025 04:00:22 +0000
Manifest next update: Sat 14 Jun 2025 04:00:22 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: gSlUdey7aNAhcB3UgPk34TXgPVtJON6pOC1hrVwd9CM=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:21:f5:c3:ac:d5:d4:dd:77:b5:e5:0d:b5:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jun 13 04:00:22 2025 GMT
Not After : Jun 14 04:00:22 2025 GMT
Subject: CN=a98d768c6a98c9b24bde8765ccffbef9abe0ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:0f:39:c1:bb:10:ee:cc:f2:a9:4f:06:73:
6c:68:66:e6:be:e6:e5:e0:98:ed:39:0b:cc:ca:03:
1f:1c:a4:ea:ac:bf:02:bd:67:58:81:3b:7a:a2:dc:
7a:fc:57:a3:a8:d4:2e:4e:67:61:fb:ab:7a:83:46:
38:d0:25:21:50:34:a8:85:d0:d6:9a:a5:ac:71:af:
cd:16:f2:85:63:27:0e:2a:98:4e:81:d1:43:bb:c2:
50:a3:b3:b7:e0:5c:32:b6:47:ac:1d:32:05:60:d5:
93:51:13:71:2a:3c:5e:60:45:7c:7d:0b:76:92:0d:
05:52:81:22:cd:25:0b:f9:ac:19:4b:bd:0e:2b:27:
f2:21:ab:6c:13:2f:3c:7b:fe:6e:15:59:d9:76:31:
d8:de:58:96:02:98:e1:49:e0:15:76:c6:58:d1:d2:
6c:a5:85:e1:d7:4b:de:f9:82:8d:3d:3b:95:3a:0b:
13:14:4a:cf:d5:ca:f6:e9:9e:37:0d:0a:5b:22:50:
23:31:3c:a0:3a:81:6f:fb:91:17:94:c8:d0:a3:40:
04:8e:39:8b:4a:e7:66:c9:36:a1:a8:d4:31:ee:a0:
59:aa:8d:d1:b9:18:76:6c:5d:7f:52:a8:06:06:56:
11:59:3f:bc:6c:7d:69:e1:a2:fe:56:8f:d1:83:ca:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:76:8C:6A:98:C9:B2:4B:DE:87:65:CC:FF:BE:F9:AB:E0:EC:AD
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2b:a0:a2:3e:df:29:ee:8e:16:c7:04:2e:d0:ce:86:c9:5a:
69:e5:a5:b3:16:9b:92:ed:2f:27:83:56:3c:16:52:90:c6:51:
ac:4e:53:28:63:05:c4:69:e4:48:ee:cb:c4:4f:55:fa:c5:82:
97:c0:f8:85:41:bc:74:f1:64:69:6d:8a:66:b4:f1:99:0c:e9:
70:49:d0:53:fa:8d:d0:d2:25:34:5c:c3:31:c3:fc:5d:8f:1d:
d0:99:eb:3b:de:fe:1e:69:75:6e:e8:ef:11:9a:9a:3e:43:d9:
be:cc:98:26:5a:c2:66:14:9a:ac:48:9b:a0:c0:05:ed:de:7e:
1b:ed:4f:a4:99:94:64:6c:7e:5c:3c:7d:ea:a8:94:58:f5:ab:
cc:48:cb:79:e9:f4:64:ea:90:8e:e9:d0:7c:98:57:24:58:87:
69:e7:ac:b2:ab:f3:77:30:fe:5b:9c:7f:e2:c4:b5:dc:09:7c:
c5:90:1f:27:46:32:a9:8c:5c:f7:e2:d9:c9:e8:19:a2:70:39:
f3:93:8e:72:2f:ad:01:8c:70:0f:b5:a9:42:6e:62:af:11:8a:
c2:dc:1d:35:c0:fa:b6:ee:a8:ba:4f:18:7d:77:8a:5f:65:fe:
0a:d3:f2:22:2f:7c:8c:13:79:60:d1:75:e2:30:3a:a9:8f:31:
fc:7e:57:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnciH1w6zV1N13teUNtVG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2MWY4NGM1YmFiMTdkNTAzYmY5M2QzYzNkMzI1YzJh
MjI1MmUwHhcNMjUwNjEzMDQwMDIyWhcNMjUwNjE0MDQwMDIyWjAzMTEwLwYDVQQD
EyhhOThkNzY4YzZhOThjOWIyNGJkZTg3NjVjY2ZmYmVmOWFiZTBlY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4IPOcG7EO7M8qlPBnNsaGbmvubl
4JjtOQvMygMfHKTqrL8CvWdYgTt6otx6/FejqNQuTmdh+6t6g0Y40CUhUDSohdDW
mqWsca/NFvKFYycOKphOgdFDu8JQo7O34FwytkesHTIFYNWTURNxKjxeYEV8fQt2
kg0FUoEizSUL+awZS70OKyfyIatsEy88e/5uFVnZdjHY3liWApjhSeAVdsZY0dJs
pYXh10ve+YKNPTuVOgsTFErP1cr26Z43DQpbIlAjMTygOoFv+5EXlMjQo0AEjjmL
SudmyTahqNQx7qBZqo3RuRh2bF1/UqgGBlYRWT+8bH1p4aL+Vo/Rg8r6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmNdoxqmMmyS96HZcz/vvmr4OytMB8GA1UdIwQY
MBaAFG/lYfhMW6sX1QO/k9PD0yXCoiUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYt
NTczOWVkODNjNjkxLzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYtNTczOWVkODNjNjkx
LzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByugoj7f
Ke6OFscELtDOhslaaeWlsxabku0vJ4NWPBZSkMZRrE5TKGMFxGnkSO7LxE9V+sWC
l8D4hUG8dPFkaW2KZrTxmQzpcEnQU/qN0NIlNFzDMcP8XY8d0JnrO97+Hml1bujv
EZqaPkPZvsyYJlrCZhSarEiboMAF7d5+G+1PpJmUZGx+XDx96qiUWPWrzEjLeen0
ZOqQjunQfJhXJFiHaeessqvzdzD+W5x/4sS13Al8xZAfJ0YyqYxc9+LZyegZonA5
85OOci+tAYxwD7WpQm5irxGKwtwdNcD6tu6ouk8YfXeKX2X+CtPyIi98jBN5YNF1
4jA6qY8x/H5XZw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:21:52 2025 by rpki-client