Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: XbjIVERLvBzeMfANKkWk2nnZ8cFv1St/YgWVl+526Bk=
Subject key identifier: 5E:9C:0D:BA:06:82:96:80:D6:FE:6F:09:DC:B8:68:84:1B:FB:A7:8D
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 0197B7EA1BF241028AC1F1EB7E13D9E85917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 0FC6
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: /KI+CFQ8Ioyo2jC/1l6VpoxTBGLP3f4O2GTz5HoiaSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1b:f2:41:02:8a:c1:f1:eb:7e:13:d9:e8:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=5e9c0dba06829680d6fe6f09dcb868841bfba78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:10:dd:53:a3:12:df:58:91:10:d1:89:2d:
e0:07:3f:3a:1e:3e:f9:a4:10:2b:f4:93:78:96:b4:
0d:77:bc:32:0a:69:af:bd:f8:2b:61:3a:1d:03:6f:
dd:9c:05:f8:56:17:21:b5:7d:3e:d7:f2:57:28:20:
06:a5:f0:b1:3c:f1:b0:9a:55:e9:eb:25:84:1c:ae:
1e:5f:33:7e:df:30:93:87:a2:b9:80:c7:75:88:cc:
5e:9f:37:5a:dd:95:91:13:17:fe:8f:f5:43:78:48:
a6:42:6d:4a:bc:e2:e7:fd:70:56:e9:b6:43:07:2e:
43:77:7c:56:1c:0f:51:86:cd:fe:f3:f6:f4:ba:0f:
1c:0a:76:b2:93:44:72:65:29:9d:d5:13:c7:a3:bb:
22:ce:bd:0a:b3:4d:13:5d:96:92:69:32:f0:ba:7d:
06:3d:74:cb:12:7c:fe:67:2b:09:31:13:90:c6:49:
7a:4a:c3:9e:37:a3:ec:29:45:74:08:c1:c9:62:c4:
93:ec:f6:88:30:f6:0e:08:5b:35:17:a2:03:9e:c9:
24:e4:4a:f5:f7:89:38:75:66:07:0a:d7:24:88:ab:
90:cb:e5:96:00:94:13:50:c0:62:07:f8:48:34:7b:
25:08:ab:e4:66:c4:ee:70:eb:62:0e:ec:61:42:4a:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:0D:BA:06:82:96:80:D6:FE:6F:09:DC:B8:68:84:1B:FB:A7:8D
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:81:0d:67:33:6a:91:26:65:a1:0a:04:9c:9f:91:bb:03:f7:
67:56:52:1f:b7:05:80:43:94:41:5a:ac:43:88:81:bf:ec:72:
12:46:cd:0d:4b:0c:c5:e1:0e:e1:a2:b2:1b:2f:99:3e:9c:22:
4a:d4:49:11:40:88:43:d6:9b:d2:e7:0c:cb:6c:28:58:7e:c6:
7b:09:0e:1d:c0:2e:32:54:65:c5:d8:d8:28:55:3a:4f:9a:dc:
2b:15:27:a2:90:5f:09:29:56:5b:c4:d6:a6:a7:9e:15:af:3f:
07:10:8a:ce:e5:c7:68:2e:0f:db:32:fe:09:7b:19:e6:d3:70:
e1:9a:a9:6b:70:28:3a:3e:74:a3:18:94:08:36:1a:74:48:a9:
82:16:d2:c0:38:6c:6d:94:e8:55:48:40:8b:17:7f:c3:0e:14:
ff:ab:97:21:55:28:2e:7e:b4:51:95:ce:83:22:f5:0b:61:2c:
67:f8:dd:cc:bc:6c:7a:58:9b:c4:b8:e0:2c:8e:eb:d7:17:08:
09:85:c0:7f:2f:1c:95:28:c8:d0:f2:93:6d:6c:41:d0:6d:5b:
21:89:99:26:f4:6a:de:d8:e4:3d:d7:d5:fe:75:3a:cb:4f:ae:
80:ed:0b:4b:6a:3c:64:b1:d1:ed:6d:9a:65:36:3a:d5:0e:74:
43:97:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:09 2025 by rpki-client