Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: 6gHqpR6rm0U1Z2Xjw4ZrOb24l67WQQ/Dcz5dV64Zzzo=
Subject key identifier: FE:AF:CB:E3:66:77:CE:C4:ED:C1:55:03:65:48:BD:F5:BA:5D:21:D8
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0198D5BBC9A44AAD18691B166BE90BBD2BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
2: ZNc2R38IFzIz7kBedhBa4EVwaEk.roa (hash: EpA69Eq6Q+KV+gO/Q6uVQrzX/PppOsS4DI+GMDk1VRA=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: r5a6H6YL1EAxoRxepPCi8+vveTjkVte6k7uYm6hO8k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c9:a4:4a:ad:18:69:1b:16:6b:e9:0b:bd:2b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=feafcbe36677cec4edc155036548bdf5ba5d21d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:ef:e6:c8:5e:72:54:66:19:4d:c6:1c:c1:
48:1e:a5:59:5e:5d:c0:25:e3:ef:eb:72:df:8d:d6:
e9:a0:3c:16:56:e7:31:4e:70:9a:4e:12:a8:85:f5:
84:fa:03:00:27:b3:ed:f9:b9:26:5d:97:2f:5e:b1:
bb:09:2c:cf:9b:a3:49:3f:b6:9d:62:2e:4d:a0:b2:
33:c9:5a:7f:32:ed:3b:4e:90:55:15:6d:ed:ff:03:
53:7a:a8:68:0e:fe:37:0c:a6:7f:98:84:54:f1:55:
60:ce:1d:05:d2:94:61:89:5d:38:dd:fe:19:1b:e0:
e7:a2:4d:ac:50:3c:22:29:db:ae:41:11:63:21:30:
f2:49:87:df:de:b4:54:23:74:58:f9:8b:4d:fa:92:
5c:de:a3:a2:5e:21:1e:68:77:c8:42:a2:5a:92:ea:
6a:dd:fa:c8:b4:a7:41:3c:54:6d:72:ad:b7:fd:83:
37:eb:61:82:47:0a:72:43:4d:6e:9f:c8:2c:27:5e:
06:22:f1:b8:49:d4:2d:e0:30:fe:dd:42:57:77:ea:
5c:42:0d:6e:25:e9:07:0d:1c:13:c2:14:ca:50:93:
d4:3a:df:c5:52:cf:46:cb:af:da:52:f9:fc:6e:22:
33:3e:33:55:bf:f7:70:46:d8:58:3f:7e:4c:c3:ae:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:CB:E3:66:77:CE:C4:ED:C1:55:03:65:48:BD:F5:BA:5D:21:D8
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:63:d8:cc:9d:44:f6:91:6c:1d:d2:3c:cb:ba:b1:e6:fa:
bd:ca:3e:ea:f6:d6:79:86:af:be:7f:46:e0:2f:e1:9b:d9:30:
14:07:ea:79:51:55:e2:4b:13:73:b0:15:a2:bf:08:49:03:1c:
3d:fa:59:2a:f1:31:af:e7:6c:a6:2a:53:11:af:66:37:d6:c0:
2e:43:ad:b6:3e:7d:ea:0c:91:49:a9:69:d9:84:b1:eb:a4:4b:
2c:d8:af:9b:ff:ec:dc:3e:0b:5c:3c:b5:09:80:bc:3f:cf:93:
d9:7e:9b:06:d4:9c:9c:6c:09:41:05:c8:dd:fb:d8:18:c1:cf:
cb:6c:cc:fb:2e:21:1f:25:57:2a:1f:68:7d:69:4b:01:a0:67:
47:24:7c:d9:7e:5f:c0:48:b2:7b:12:62:6b:90:87:7f:66:94:
48:8a:18:a2:d0:9b:9e:0f:60:88:1f:05:6f:79:e0:c9:10:e4:
58:80:ac:18:52:0a:a6:78:b7:2c:e5:f0:fb:39:fa:58:d1:57:
1c:8a:88:2e:93:d4:fc:20:53:08:f4:61:53:09:ce:af:aa:b4:
65:3a:2e:12:5e:7a:92:56:d4:12:99:4f:16:4c:6f:22:cd:36:
fd:0d:8b:d4:7d:95:a2:c0:8a:46:c9:5e:52:31:6e:7b:70:79:
31:44:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:29 2025 by rpki-client