Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: YMVSOMxrRCOs1Rb0mezxnl84rDyNKE0kIx/4n4XQe8I=
Subject key identifier: DF:AB:7C:55:DB:B6:48:FB:19:12:4F:6D:E1:EB:BE:B4:E5:DF:71:2C
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0197B88ECF6E987E5F6410EF6D8C12B85EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 06A7
Signing time: Sat 28 Jun 2025 22:00:56 +0000
Manifest this update: Sat 28 Jun 2025 22:00:56 +0000
Manifest next update: Sun 29 Jun 2025 22:00:56 +0000
Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=)
2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: XTbCiR12he781vNPMP/x4iK+O742G6Bk3iml6n/nkDU=)
4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:cf:6e:98:7e:5f:64:10:ef:6d:8c:12:b8:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Jun 28 22:00:56 2025 GMT
Not After : Jun 29 22:00:56 2025 GMT
Subject: CN=dfab7c55dbb648fb19124f6de1ebbeb4e5df712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:a6:36:89:2a:62:6a:a0:54:9a:2a:2d:89:
0f:ca:5f:e3:94:80:76:2f:52:07:2b:19:46:eb:33:
e7:b5:30:e7:a1:78:23:e8:fa:6b:87:0a:e6:99:53:
86:02:a8:f7:9c:32:70:3b:e7:3b:6b:b4:1c:bf:09:
19:ce:c5:65:7c:e6:df:f8:4f:5e:59:92:42:57:52:
b7:51:1d:07:e9:c4:41:13:0e:bc:03:ac:96:53:e5:
e1:b5:6f:55:4c:13:35:4d:ef:a8:0b:19:05:38:cf:
70:b4:77:03:f4:5f:b0:e9:44:5f:22:08:5d:f2:79:
17:9f:82:99:ea:c5:3c:3e:6a:6f:e6:a0:9c:02:73:
0a:1d:35:a9:6d:29:8d:d9:6a:b4:c5:c2:e4:f8:c6:
6f:ad:00:06:15:74:b2:52:7b:03:1d:71:9e:af:36:
1b:1b:1a:bd:f4:2d:4b:13:74:38:59:ac:63:52:6a:
f7:d5:1f:a3:ca:41:d1:25:af:8e:5e:46:63:a3:10:
da:6f:85:2a:cd:00:57:59:a1:f2:dd:91:90:dc:ec:
33:ab:92:2a:90:4b:ff:13:87:30:eb:2e:a6:56:15:
ee:e4:ee:5d:eb:61:94:fd:8c:5b:14:b0:15:59:81:
48:ed:57:28:e0:27:ad:f2:ca:10:29:e0:f6:c3:eb:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:7C:55:DB:B6:48:FB:19:12:4F:6D:E1:EB:BE:B4:E5:DF:71:2C
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:4f:b7:9d:e9:f9:d4:79:53:3a:f3:fe:16:65:4c:f6:87:
81:bb:12:c3:bd:33:a0:b4:14:2b:b1:06:35:b0:05:47:1e:cb:
f0:45:97:b7:75:82:d1:53:2d:88:03:75:03:9a:b0:61:71:7b:
1d:eb:4a:b8:81:ad:85:d8:0a:e1:92:53:55:65:0b:f1:02:ec:
31:16:c4:8d:50:9f:65:15:e1:61:7c:1a:53:97:3b:cb:6c:92:
de:49:e7:6f:3c:52:f5:6b:be:05:22:c8:b8:96:b0:f0:a4:aa:
2e:d6:60:d0:f0:c4:0d:ba:29:89:13:70:6c:b9:51:ee:0f:89:
4a:82:93:70:75:17:84:a7:45:b1:58:15:eb:01:b3:80:38:65:
53:cb:d0:fe:5f:40:6f:8f:73:33:2b:0c:54:e8:d5:cd:5e:c3:
33:fb:1f:a9:bd:b7:bb:1b:c8:7d:2d:83:07:ca:42:b2:d1:80:
a1:b0:85:a6:e3:0f:e9:10:2e:4c:09:8e:bb:3f:ac:7f:30:72:
c3:fa:f4:b5:54:f7:17:42:f3:77:9d:b4:b8:b2:74:9b:98:b2:
16:71:1d:d1:5c:c2:55:43:36:ba:df:99:ae:4d:a2:c1:8b:da:
41:2e:7b:f9:b9:51:d7:51:2a:56:16:e8:c1:10:ca:c2:83:ab:
df:da:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:07:28 2025 by rpki-client