Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: weaRlu/mpJE97qy6jjww7hOiknWxPdT3YmXDFsTgqs4=
Subject key identifier: 18:EA:53:A4:9C:E0:45:45:7C:C6:8A:8A:7F:9E:64:0E:0D:61:92:B2
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0197CB3A4907188EC8618FB523CDD6A57AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0CA4
Signing time: Wed 02 Jul 2025 13:01:24 +0000
Manifest this update: Wed 02 Jul 2025 13:01:24 +0000
Manifest next update: Thu 03 Jul 2025 13:01:24 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: mGeUWewB9EnCnXwBJRQfIO/XBZrzvBnsQpL0ueF6Hyk=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:49:07:18:8e:c8:61:8f:b5:23:cd:d6:a5:7a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jul 2 13:01:24 2025 GMT
Not After : Jul 3 13:01:24 2025 GMT
Subject: CN=18ea53a49ce045457cc68a8a7f9e640e0d6192b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:76:10:88:27:19:3c:dc:77:64:66:23:ab:
b3:c8:09:36:5c:4d:93:2b:1f:8a:df:28:6c:bc:d8:
67:3b:f3:89:67:01:99:48:7f:d6:d1:c4:ec:9d:ec:
fc:c3:fb:3d:b8:1b:ed:1d:89:eb:ef:91:bd:c7:4d:
8a:a4:85:ee:8b:f0:7e:6d:59:2d:24:ea:8c:ed:c3:
7e:98:52:12:ee:1c:37:96:9e:a3:38:04:49:a4:e8:
64:db:43:c8:02:38:b9:ef:32:af:f8:54:2c:a4:c3:
7f:6a:94:37:6a:fa:ca:32:04:8e:a8:c1:94:44:0d:
08:b6:3a:96:72:86:fc:40:aa:6f:d0:cd:32:94:d8:
1c:7d:ca:f9:b5:62:1c:31:cf:aa:69:0b:6f:f5:22:
67:7a:2b:ef:6c:e8:23:b9:35:85:84:60:e3:f3:71:
c4:9e:4a:38:10:c0:43:7e:f0:fb:8c:ca:b2:4f:26:
06:4e:16:7d:21:ff:28:14:59:42:f7:01:b4:c1:d3:
bb:54:07:f0:a5:39:f0:f6:0c:75:31:7d:99:d7:c4:
b4:b2:d8:a6:ec:47:c0:8e:1b:bc:9a:54:82:2c:49:
76:6e:59:36:17:c4:cd:8c:75:53:4a:eb:46:e3:1e:
43:c3:71:b7:73:eb:37:83:cc:e4:26:37:5c:53:c7:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:53:A4:9C:E0:45:45:7C:C6:8A:8A:7F:9E:64:0E:0D:61:92:B2
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:31:73:a3:d6:91:f2:27:24:81:43:ff:c3:61:ce:f1:b4:43:
a7:1f:b9:44:de:e3:18:7f:8f:4a:6d:6a:a5:67:b8:a8:97:7a:
52:89:02:c0:2a:5c:33:2a:40:5f:9f:4a:86:4b:69:92:4e:67:
21:36:57:71:0a:34:da:8b:a2:e0:e1:67:a6:83:a7:93:f5:8c:
5c:93:10:3a:d9:97:55:6b:49:69:49:55:a6:8f:c2:69:95:94:
ec:9b:2e:87:6f:f5:53:f6:b2:3f:56:c3:a3:e2:6b:d6:1b:77:
c0:25:ee:d5:c2:1f:f7:b0:5c:0c:f9:ef:26:4c:58:9c:4b:ad:
2c:cb:99:9f:5f:2d:3f:0a:83:b0:7c:17:d2:74:d8:f3:66:ea:
02:54:ac:bc:df:ce:cc:92:50:6b:e5:ee:9a:6b:b2:1d:0c:8b:
80:7a:15:ca:46:26:70:05:7d:43:8b:73:44:79:56:b2:85:9f:
40:24:f6:8d:fe:4a:32:7e:c1:4b:3a:eb:7c:ec:44:04:aa:02:
9a:1c:7f:c7:d1:38:01:43:59:b4:a6:44:1f:30:de:59:f0:0a:
f4:56:49:5c:f4:a7:11:dd:79:1b:af:f5:08:00:7f:0b:1d:62:
d9:67:9b:1e:73:b8:d3:7e:14:cc:8c:7e:07:64:13:7f:2e:19:
8e:aa:be:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:38:32 2025 by rpki-client