Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: k5vsqgSMBu01nNiKdz80cNxZj0/pPvPIJ1OKtsIpOBU=
Subject key identifier: D7:60:E3:3E:35:3F:AB:69:A8:B2:F7:91:04:0C:21:CA:C6:E6:AB:CF
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 0197B933F394F363E8B6A64DEFFEFD7C4163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 090F
Signing time: Sun 29 Jun 2025 01:01:19 +0000
Manifest this update: Sun 29 Jun 2025 01:01:19 +0000
Manifest next update: Mon 30 Jun 2025 01:01:19 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: OHwAv8eiK63Sj1ekNaSl+10oo/bcU4yTEfqZl/sphzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:f3:94:f3:63:e8:b6:a6:4d:ef:fe:fd:7c:41:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jun 29 01:01:19 2025 GMT
Not After : Jun 30 01:01:19 2025 GMT
Subject: CN=d760e33e353fab69a8b2f791040c21cac6e6abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:83:54:c8:5f:d7:7b:08:e3:7d:0d:f8:39:
cd:df:0d:09:f2:fa:8c:56:f9:cd:49:fc:6b:ab:b6:
be:66:90:ca:5f:af:ab:35:50:0c:00:97:71:7d:b6:
44:40:91:a5:60:68:ef:2b:e2:17:85:0b:6b:4e:74:
82:2e:bf:7d:5b:d8:da:2b:d0:a5:49:94:e7:5b:c1:
aa:a6:f5:2c:c7:93:20:a9:49:3f:af:5c:29:b5:4c:
2c:ac:b9:fd:e7:91:79:05:5c:94:8a:43:24:58:ca:
6c:f5:aa:50:5b:44:da:77:6a:7a:7d:f4:90:ef:45:
db:ef:ed:0a:56:95:3d:4b:45:46:66:26:d9:cc:ac:
ec:38:78:f6:52:24:e5:e3:77:06:2d:2c:8e:4c:41:
86:83:f8:ab:07:ab:d0:b4:10:c1:42:e3:4b:0f:8a:
b5:09:da:a6:8d:0e:cd:62:60:23:3a:c7:70:63:c6:
d6:0c:2d:6f:4c:b6:d3:02:dd:4e:6c:81:48:31:18:
d4:cd:34:d4:6b:5b:07:08:0d:7b:e3:df:08:6a:d2:
bf:96:3d:6f:3a:8b:6b:70:7c:fb:59:93:aa:11:be:
b5:d8:d1:71:c4:14:ca:b9:ca:38:ad:47:af:12:19:
be:dd:56:18:97:d1:0a:aa:a4:3b:fb:75:0d:71:6d:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:E3:3E:35:3F:AB:69:A8:B2:F7:91:04:0C:21:CA:C6:E6:AB:CF
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:24:ec:04:e1:40:fe:0a:0c:10:7a:8e:49:f9:7a:f1:93:
b7:06:85:9e:fe:07:8f:34:11:1f:a6:c2:c6:c8:52:76:d8:ea:
d1:29:4d:64:2d:90:f8:b9:cb:0f:eb:9f:41:9a:e2:61:9b:88:
ef:cf:2d:d9:6b:96:fa:86:1a:c5:8c:f8:75:c5:9c:38:ba:32:
1b:cc:b5:34:fc:76:04:39:a5:8d:69:b2:dc:12:23:b6:38:ac:
aa:d9:f1:a4:36:08:29:ca:5d:24:62:7d:45:41:c5:08:88:e6:
81:5a:2b:aa:cb:38:cc:cc:24:ce:a8:5c:34:a4:7f:d9:ee:74:
f3:b1:0f:b8:43:81:f3:ba:60:50:36:7e:79:50:ed:00:e2:00:
60:ab:84:2c:60:b0:fa:c8:bc:dd:69:f2:fb:69:41:e6:24:f7:
cf:e7:b2:a0:ee:88:79:d6:76:d4:5d:5d:4c:0f:53:7e:05:76:
11:71:16:50:86:7a:84:0d:4f:bd:5d:8c:c0:ac:39:1b:58:8c:
5b:be:b3:05:cc:ba:af:4a:a3:f7:51:69:59:2b:47:61:57:ab:
62:c0:b4:d6:67:dd:81:f1:7e:8c:98:e9:21:f0:6e:49:5c:ef:
01:91:ba:06:19:f1:3a:e9:d0:9f:ce:b3:4f:65:de:7a:38:37:
41:27:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:58 2025 by rpki-client