Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: U7VpkGI6ym3vHrSEvO18hmwbsc0aIosfQSCVQ6QJ3Sw=
Subject key identifier: BD:8F:5C:C7:43:47:5E:E3:5A:2B:5F:1E:6A:0B:4D:9B:54:E4:7C:58
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019749313ED5BCEFEB9ECCAC88FFB6D6C589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 06D9
Signing time: Sat 07 Jun 2025 07:00:53 +0000
Manifest this update: Sat 07 Jun 2025 07:00:53 +0000
Manifest next update: Sun 08 Jun 2025 07:00:53 +0000
Files and hashes: 1: 6JrlKE6-D36PVGMwp7ew7z1aOA4.roa (hash: T1fYyT20nJ5YneHKV99StH98ng47eu4G5rhmxnPt+y8=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: 9XNWLYlvQg519dIBcjuWuO2ebr+kCLWbB4WVi7YU5R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3e:d5:bc:ef:eb:9e:cc:ac:88:ff:b6:d6:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Jun 7 07:00:53 2025 GMT
Not After : Jun 8 07:00:53 2025 GMT
Subject: CN=bd8f5cc743475ee35a2b5f1e6a0b4d9b54e47c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:d5:7a:4f:e6:20:2a:38:fe:09:00:1d:e1:
e7:b3:2b:a3:67:34:16:27:50:c0:30:02:ea:0c:36:
b4:f0:10:44:f2:b5:c5:ea:48:cf:0a:96:ea:61:db:
20:fb:83:30:8e:5b:82:ab:d2:f7:25:22:63:56:ae:
ef:c8:4b:0e:16:f1:c6:37:49:da:cb:88:29:02:ff:
9d:38:1d:2b:20:f8:77:87:16:38:1f:e3:38:a8:6b:
14:ec:8c:b5:98:68:1b:56:80:55:89:f8:81:8b:7d:
0b:53:29:c1:b4:ec:5f:b8:b1:26:c1:96:4f:62:68:
4c:c4:e8:2b:4f:7d:d8:6f:d2:ac:a7:45:b9:09:e0:
a8:af:ed:5b:7f:d2:de:77:c5:93:ea:26:f4:b2:7b:
5a:d8:80:9c:e0:d4:1b:55:75:e5:40:05:73:cd:da:
a7:75:fd:39:22:3c:6a:5a:51:54:a2:f4:3b:23:09:
70:0e:dd:a7:e0:32:66:6a:47:a4:92:11:00:29:3e:
26:1a:ce:51:39:58:21:57:60:54:4f:5f:24:24:3d:
eb:b5:49:f6:d7:b0:3d:e0:44:9e:b4:72:f9:66:28:
26:d8:57:1a:f3:10:fa:60:34:0e:f7:fa:b6:dc:ef:
4f:6e:39:49:a7:22:ca:48:d1:32:51:ab:e7:cc:18:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:5C:C7:43:47:5E:E3:5A:2B:5F:1E:6A:0B:4D:9B:54:E4:7C:58
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:30:5a:b4:ca:3a:c8:09:67:ee:43:53:e0:ce:60:35:9d:
86:24:f0:d7:b8:6a:37:f4:42:b7:36:7f:db:05:58:a9:35:14:
08:f1:c2:ef:e9:08:a4:09:6c:32:65:a8:da:3c:42:5e:6e:61:
bf:5c:15:c8:9b:0b:5d:2a:5a:93:0f:9e:63:1d:47:5b:60:4e:
b0:7b:be:e6:61:5b:74:71:fd:aa:e8:ed:25:32:51:1f:d3:a9:
b4:1f:3f:b6:60:11:fd:7f:4b:e7:7d:2a:12:89:e3:ba:8c:5e:
d5:b0:74:17:b9:61:ab:53:1d:15:18:b4:5e:87:44:22:48:99:
a1:22:be:d7:41:fe:76:55:c4:9e:d3:49:1f:aa:27:7d:3d:ba:
3f:a4:34:c3:27:0f:0f:6d:d4:b5:e3:ad:f8:6a:e7:9c:45:92:
2d:18:d8:52:a6:95:f6:5c:0c:b3:7f:f0:71:82:dd:d1:e8:9c:
88:dc:68:90:60:05:c7:8f:5f:59:f0:cb:80:f3:0d:ed:8e:c9:
97:56:48:0e:b3:50:6c:cf:fc:47:af:52:00:42:54:2a:ed:f9:
de:2e:44:48:56:6c:c8:28:8c:3b:1e:92:c9:fe:d6:ae:37:73:
95:a9:ad:a5:c2:04:8b:64:b5:20:49:43:7d:6b:9d:62:da:2b:
94:f9:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:00 2025 by rpki-client