Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: Yso973d1Zv0I2oF1ZHpzFb0GfZH50mkKMDbdbvE1GQ0=
Subject key identifier: AF:EB:DD:9D:AC:2A:92:B8:52:30:A6:40:8E:E7:EF:57:0D:DB:96:29
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019923A0B10AC33664111487A32D6593CEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 13BE
Signing time: Sun 07 Sep 2025 10:02:37 +0000
Manifest this update: Sun 07 Sep 2025 10:02:37 +0000
Manifest next update: Mon 08 Sep 2025 10:02:37 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: qd5DTQ84MoT9UaJX/QhDHoY4z1YDU0QOvp1M5Sk75J8=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b1:0a:c3:36:64:11:14:87:a3:2d:65:93:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Sep 7 10:02:37 2025 GMT
Not After : Sep 8 10:02:37 2025 GMT
Subject: CN=afebdd9dac2a92b85230a6408ee7ef570ddb9629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:54:60:86:9d:4e:44:89:86:2b:c0:ed:c1:
42:2b:39:e7:ed:ca:eb:da:e1:ed:93:74:dd:a5:5a:
74:9e:20:c4:d8:11:49:ea:2b:2b:a9:e9:40:5e:eb:
00:52:e1:3b:6d:9e:ce:f2:a9:2e:e4:3d:d5:9c:ac:
68:0b:fd:f1:97:c5:c5:8b:02:51:cd:55:e0:b6:7e:
83:2f:b2:27:75:da:f3:3d:53:f9:72:45:e4:e9:2f:
5d:91:88:65:11:2e:6a:13:f4:01:ce:73:1a:3e:70:
a9:9d:af:ac:dc:d1:cd:db:ee:06:6c:a4:1b:ae:90:
bc:e3:e3:36:a9:b1:d7:fe:d4:41:a4:40:99:2c:6e:
c1:b5:4e:dd:de:7c:2f:59:8b:92:3f:00:9a:8d:0c:
9c:a0:22:bb:b1:68:36:a2:2d:36:2d:e3:88:62:9f:
d8:ba:c2:dc:b8:10:60:fe:0f:7e:fd:23:e4:f0:31:
7b:bd:03:d9:81:1a:87:5a:5b:31:26:e2:35:ed:d3:
24:64:46:c4:cc:9a:ba:88:e7:85:9a:13:34:fe:a0:
b5:34:8c:b4:22:90:c3:21:12:df:56:bf:f9:02:49:
98:c4:84:dc:6a:0a:e5:f8:fc:a0:58:65:46:00:9e:
76:8d:f8:3b:49:00:cd:8f:0a:93:b4:22:bd:42:8a:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:DD:9D:AC:2A:92:B8:52:30:A6:40:8E:E7:EF:57:0D:DB:96:29
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0d:2a:30:a3:70:8a:83:d3:ba:9c:37:60:9d:1e:1b:d3:03:
bb:90:67:d2:83:00:43:bc:0c:48:d6:e1:27:39:a0:a3:7b:0d:
2c:3a:d2:17:0e:e6:ec:9e:06:c3:25:f7:72:94:88:55:20:b5:
ef:7a:48:66:02:24:a9:6d:93:55:76:f5:c3:3f:a9:45:76:7b:
9f:73:29:08:2d:05:6d:df:bc:1e:1a:98:e0:fc:4e:f2:39:11:
32:da:26:db:d8:6b:25:c9:a1:ed:85:bb:24:1d:62:f8:ec:2a:
b6:a1:0d:ec:11:76:a9:21:9e:76:39:c5:40:2b:bd:97:ff:db:
2d:5b:22:86:72:4c:70:cc:34:2c:22:b6:d3:be:49:2c:e1:69:
e0:f6:86:5b:4b:c6:04:74:5e:63:3e:5d:56:3d:df:d5:91:ed:
74:1b:89:15:e3:9b:8f:e2:71:ba:bf:69:fc:9f:3f:81:f3:91:
aa:e3:03:ea:0d:c8:52:3a:a5:04:d7:be:b4:69:2a:1e:9f:fc:
63:88:62:de:d0:f8:58:e8:38:f9:76:53:b5:fc:9f:d1:d6:2c:
96:e0:f6:33:dc:5c:30:14:7f:e1:96:f4:c2:09:0d:31:00:12:
7e:9b:dd:c2:6d:69:f4:cd:dc:7f:1f:af:b0:37:6c:2f:f9:03:
c2:07:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:56 2025 by rpki-client