Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: hLc8OA+oOUWWW6yKQC2g64LQ+niQ+iVAfjUaRQtIZBY=
Subject key identifier: 20:16:A7:E5:19:96:04:BF:5B:B9:C8:9C:28:ED:1D:FC:F5:FD:66:48
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0197C26DDB870D76B4D31B1A8E9C320BC038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 15CE
Signing time: Mon 30 Jun 2025 20:01:08 +0000
Manifest this update: Mon 30 Jun 2025 20:01:08 +0000
Manifest next update: Tue 01 Jul 2025 20:01:08 +0000
Files and hashes: 1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: gVAjVtcH/aS+2H7WnAYSdJ1JlF60eBBccNV1z6FnDNM=)
6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:db:87:0d:76:b4:d3:1b:1a:8e:9c:32:0b:c0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jun 30 20:01:08 2025 GMT
Not After : Jul 1 20:01:08 2025 GMT
Subject: CN=2016a7e5199604bf5bb9c89c28ed1dfcf5fd6648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:96:6d:bd:8a:6b:a0:7f:49:28:38:9f:37:
d6:74:3c:e1:0b:75:46:c7:4a:36:92:9e:3f:75:5c:
09:10:ae:d1:ce:b2:90:75:5f:ad:53:82:ea:fb:b5:
25:f4:15:5d:18:f5:ba:85:b1:65:93:1c:e7:00:0a:
e2:b2:b1:78:08:32:d0:3a:28:8c:42:f9:2f:04:30:
a7:d5:8f:91:a2:cb:d4:47:30:31:d4:17:cd:58:b7:
db:ee:71:f2:68:88:19:d8:ea:f5:ac:44:54:27:f5:
9c:32:a7:20:54:a6:b6:c9:28:d6:5b:0f:f1:41:fa:
b4:5f:75:01:59:6f:b2:b9:38:3e:ad:2f:d5:75:c6:
c6:a4:67:a0:b9:89:4e:84:af:b3:a8:8b:9b:40:e0:
48:51:7a:69:4d:63:8e:0b:3c:eb:77:ca:8e:98:32:
79:3d:ba:ff:4f:b1:d5:ee:71:fa:3b:54:37:1a:85:
53:d4:fb:71:1f:dc:89:9b:05:78:a6:b1:ec:54:48:
a0:86:ae:46:dc:4e:b9:71:43:5b:ad:42:14:f1:33:
11:7f:c3:39:cf:13:1b:45:cb:4a:63:e7:ac:1b:a0:
1f:2b:9b:72:88:2d:24:4a:76:59:08:6d:41:45:6d:
32:85:17:08:0d:b6:b2:ba:17:31:34:a2:e4:20:2c:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:16:A7:E5:19:96:04:BF:5B:B9:C8:9C:28:ED:1D:FC:F5:FD:66:48
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ea:42:69:32:4e:de:50:ce:67:1f:6e:3e:fb:9b:77:2f:41:
62:70:7a:0a:a9:1a:f8:49:a3:6b:f2:b5:cd:20:84:b6:9d:36:
1d:bb:cb:9c:99:92:6d:12:15:76:95:c4:52:4f:10:0c:00:79:
de:a3:0a:6b:ca:74:68:82:28:69:95:8e:07:17:5f:09:7c:1e:
a4:fd:34:2e:c0:41:54:4e:da:71:24:80:07:3f:e0:44:8d:70:
87:82:23:7f:4e:37:cd:12:2a:48:76:74:58:01:c1:43:ee:35:
85:ca:85:f5:07:31:d6:f5:d4:df:d2:5f:71:4d:c6:49:d0:6c:
f7:fd:5a:82:a0:72:43:17:25:af:08:55:d5:8d:9b:47:c2:5e:
d2:19:a8:8b:50:7e:17:3a:79:0a:41:94:5a:a5:76:58:eb:b8:
ea:a9:98:7e:f1:1f:78:19:f5:03:0f:b0:ca:98:77:64:8f:c9:
ad:d1:42:7a:c4:34:63:7e:aa:08:45:b2:91:de:29:3c:bc:a5:
fa:b4:ff:91:42:1b:92:2b:64:44:7c:30:e3:31:ec:c2:78:d6:
66:11:2c:05:dc:1d:66:6d:c2:2d:51:7e:ae:f5:6f:cf:95:9e:
da:98:38:6e:04:8c:5f:a9:36:1a:12:b4:73:ed:58:a1:e7:6f:
5f:da:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:54:13 2025 by rpki-client