Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: JPcugjz/liK107U73Hdyme1w/Y7xx7HirxpBI0kgBaI=
Subject key identifier: 57:65:EC:1B:75:07:82:21:CA:30:0E:7A:4A:C1:D9:45:49:60:4B:47
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01976F2BCCC8C766616593312D48ACEC12F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 12DC
Signing time: Sat 14 Jun 2025 16:00:30 +0000
Manifest this update: Sat 14 Jun 2025 16:00:30 +0000
Manifest next update: Sun 15 Jun 2025 16:00:30 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: ccQG2vY6GLD129MUXlJYL7vNP1UuO0EVKJpLRj+Ga5Y=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:cc:c8:c7:66:61:65:93:31:2d:48:ac:ec:12:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jun 14 16:00:30 2025 GMT
Not After : Jun 15 16:00:30 2025 GMT
Subject: CN=5765ec1b75078221ca300e7a4ac1d94549604b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:f7:a5:30:46:1b:df:1f:c9:94:4a:ef:d0:
d2:ca:f8:da:b6:0d:a1:3f:9c:6e:87:24:5d:27:a8:
a1:41:1a:43:76:83:34:cf:2d:fa:30:47:fc:1e:91:
58:1d:58:37:c5:62:7a:bf:76:38:e6:ff:ac:2d:44:
d3:33:7b:ba:d1:7d:44:4a:9d:fc:43:c1:e7:50:df:
54:d3:bb:fd:53:c4:e9:6d:80:6f:28:6d:63:2e:63:
c7:45:1e:a5:37:94:c7:da:82:f1:a7:2d:d8:71:ea:
b4:8d:60:8c:c7:ad:82:4e:65:d5:aa:d3:d5:f6:de:
33:cd:f3:90:d7:ab:ad:85:b7:ca:72:f6:c7:7c:62:
da:b5:2b:50:49:a8:bf:84:6a:0d:de:3f:4f:1e:6a:
cc:c9:09:41:b3:6a:d2:26:44:bc:0c:0c:8c:fd:1c:
61:8c:0c:fd:18:f0:22:42:67:15:2f:56:95:d5:48:
ea:d7:d5:a6:bd:b3:5a:e3:3f:21:e8:07:0e:ed:ab:
ab:f6:25:a7:74:1a:41:7e:b2:20:a7:69:b0:f8:56:
c5:30:2f:47:f7:7d:12:c4:41:a4:55:45:e9:cd:89:
55:00:85:20:18:49:07:25:f7:ec:e0:a7:97:ec:d4:
0a:83:ba:ba:8d:92:44:74:05:33:18:40:21:bf:4e:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:EC:1B:75:07:82:21:CA:30:0E:7A:4A:C1:D9:45:49:60:4B:47
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ab:6d:5f:c1:78:f0:48:1b:38:ab:ff:60:76:4c:9a:e6:fa:
8d:86:57:c6:00:81:f2:da:cf:47:80:97:32:b9:bc:fe:02:39:
b8:ae:be:20:42:d4:6c:ce:e9:91:f6:2c:20:65:a6:69:26:30:
3b:21:91:81:13:b5:63:e4:19:fd:98:65:23:00:9b:a8:45:72:
5d:22:2b:2b:21:41:bc:4a:0d:09:67:66:4f:59:2b:6a:e0:51:
3e:2d:3c:c4:95:61:8a:5c:73:88:4b:b8:ae:6e:8a:f7:b6:8e:
76:bc:a8:a5:12:54:21:2b:c2:ca:82:e2:7f:c3:f1:8a:1b:54:
f9:28:f3:ae:f3:43:bc:66:6a:9e:5d:c1:a7:c9:fc:d9:52:14:
82:6a:d7:bb:86:29:86:62:47:87:e5:8a:27:eb:b7:59:66:4e:
90:cf:0b:7e:4c:29:ff:04:ea:88:a9:ba:ae:43:31:4a:14:5b:
68:88:89:3f:bc:e5:a6:06:7c:50:e5:b5:e3:14:69:55:3d:3b:
c5:f6:c2:23:6c:9c:f2:17:db:0f:12:45:35:b9:0c:e4:65:4a:
86:dc:3e:32:95:f1:8d:ad:cf:90:f6:09:f1:b9:28:f4:27:d9:
b2:8f:65:e0:0e:d5:2a:c4:ea:56:3a:4a:93:4b:b3:81:39:68:
6b:46:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:08:45 2025 by rpki-client