Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: AbfLVri+Kutl3xo9wJdj/97NoKHXWBbHUTDFY5kGOh8=
Subject key identifier: A5:9D:15:5B:99:22:1C:92:1D:94:B5:C0:7F:BE:F9:AF:A3:29:36:48
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01975BDBC4E84F91DD39D6C69FDFB523314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 12D2
Signing time: Tue 10 Jun 2025 22:00:18 +0000
Manifest this update: Tue 10 Jun 2025 22:00:18 +0000
Manifest next update: Wed 11 Jun 2025 22:00:18 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: P2HLqLBaFnK8U+rwJj3k/hkqiVc644SfPKsw6+/QJ8I=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:db:c4:e8:4f:91:dd:39:d6:c6:9f:df:b5:23:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jun 10 22:00:18 2025 GMT
Not After : Jun 11 22:00:18 2025 GMT
Subject: CN=a59d155b99221c921d94b5c07fbef9afa3293648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:d4:61:dd:20:8e:a5:bf:2a:1f:70:0a:4b:
93:ab:27:45:f2:54:0d:11:d2:be:24:ac:7e:df:05:
ec:36:df:4c:a2:fe:df:44:e2:e0:e6:47:29:a7:a8:
28:29:8a:ff:09:28:82:2b:73:18:25:d5:c9:6d:66:
0b:7e:49:41:1b:b3:71:d6:af:59:8a:0b:87:cf:49:
19:d8:8f:80:c9:78:ac:9d:f8:8b:e4:74:82:92:cd:
16:d9:e8:7a:c3:7f:7f:5e:9a:2d:61:c0:71:a5:6e:
79:95:8e:bb:ea:58:e4:7f:9b:58:ea:0f:f6:a4:91:
60:2f:c9:2c:65:ee:14:be:64:18:b5:ba:e5:67:62:
f0:8a:18:55:61:21:ac:4d:31:de:68:8b:34:e0:d7:
f6:30:72:94:64:d8:56:ff:e4:34:59:b2:67:e5:35:
b6:ff:37:94:81:77:18:58:49:c5:fe:ce:63:30:80:
b9:c9:36:2b:e2:8d:3f:52:3e:e3:0f:8f:16:49:d1:
2b:33:7a:bc:d8:dd:12:0e:3f:62:4f:b2:d5:82:02:
40:2e:51:01:55:d2:0d:2e:d5:e5:5d:e0:e5:ee:b8:
60:7f:f5:fe:8e:a0:72:05:8e:b2:1b:96:4c:e6:8f:
3e:69:b4:bd:9d:22:06:0e:1d:a9:49:fd:87:2e:6d:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:15:5B:99:22:1C:92:1D:94:B5:C0:7F:BE:F9:AF:A3:29:36:48
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:62:2b:5b:c6:fc:ae:91:fd:34:8d:6e:bd:2c:fe:30:03:
be:7e:3c:5c:71:9b:f7:e1:2b:a1:d1:03:a3:e3:d5:f4:ad:72:
12:90:db:28:09:e4:97:20:aa:8d:b4:94:81:f5:2e:35:cc:ec:
9a:df:d6:9a:6f:77:df:66:81:d0:95:fd:c1:cc:d8:a3:64:08:
d3:e9:d0:34:e4:0a:63:4b:5a:99:ee:5e:98:5a:a6:f2:2d:79:
ef:c4:4d:73:a2:6a:89:8c:f7:27:2d:9d:6e:e2:98:e5:61:8b:
e3:de:84:b6:01:26:35:fb:9b:d7:c5:dc:6b:a2:2c:6d:9c:95:
e3:00:78:f3:f0:a6:67:3a:9a:e1:d3:cc:05:60:1f:87:38:29:
9d:cb:2f:01:a9:1e:36:aa:c3:b3:c8:f1:91:a2:85:be:0e:e2:
1d:b1:15:d9:fe:34:59:87:df:14:c2:5a:42:ad:e6:22:80:1b:
8d:e5:e4:cd:0c:07:f2:32:1e:b4:ab:ba:56:71:f6:17:a5:11:
b1:df:d5:eb:70:07:74:c1:3f:17:c3:05:e9:c1:a4:46:75:e8:
5e:37:d2:1c:89:19:cf:ad:d6:1c:85:90:62:b4:11:b6:29:bc:
67:c4:50:d4:cf:3c:ab:ea:bc:01:ad:8a:c8:cf:e8:83:14:28:
98:c4:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:39:18 2025 by rpki-client