Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: Gqdkr1oBp4mAZOcXj2m1NmZ2DSwDNy3an4RMPOTt0I0=
Subject key identifier: 23:8A:05:47:6A:02:76:7B:77:6F:E3:10:8A:3F:A0:49:10:A3:10:1C
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 0197B77C057FBE5F106A319CF2CE0FFC0E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: Ucn/ksZCqyoV2zpJ4JWDsWCDyAuRFzt3Ewx/e7gLkdI=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:05:7f:be:5f:10:6a:31:9c:f2:ce:0f:fc:0e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=238a05476a02767b776fe3108a3fa04910a3101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:ac:00:fc:7d:58:a7:82:df:8c:75:4c:81:
66:ea:3c:20:40:47:82:4a:0b:c4:20:fd:01:57:9c:
7e:09:53:5f:a2:89:0f:82:59:c1:de:de:ec:eb:d2:
d4:58:d7:ee:dd:bf:07:a9:96:a0:96:64:0a:f7:2f:
ac:8e:b9:df:e9:89:fc:e3:f7:ae:01:44:60:66:c2:
48:0f:7b:e6:d9:52:78:ce:60:32:fc:5a:14:c0:82:
b4:34:72:b9:01:f3:8f:22:95:24:ff:cc:e0:01:f2:
4c:4e:4c:2d:d1:8e:93:14:bb:f9:a1:66:96:5d:a5:
3c:9c:49:dc:e5:04:e7:8d:70:21:74:96:9c:c9:cd:
e2:9b:fb:3b:e2:83:c9:63:a5:8a:94:2e:5c:eb:84:
3c:fe:54:ad:73:e8:ad:ac:83:9c:7e:7c:09:da:b9:
87:05:9f:d7:d9:cb:19:b1:91:4a:13:74:bf:17:9f:
ec:40:5c:84:60:b3:5d:de:85:64:46:79:34:b8:3e:
58:fd:35:8b:f2:1f:74:2a:0f:ff:57:d2:9f:98:10:
60:c9:ab:d2:3e:93:9a:18:57:3b:d5:4d:f0:60:ab:
ec:64:84:ee:d6:d5:a0:42:c4:8a:73:6e:2d:be:cd:
4e:1f:c5:96:f4:03:68:6e:07:86:d1:a7:3e:c7:4d:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:05:47:6A:02:76:7B:77:6F:E3:10:8A:3F:A0:49:10:A3:10:1C
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:71:0f:08:e9:03:ad:6b:04:0d:62:b8:69:fc:8a:c5:15:
5a:1a:9d:a9:14:6e:e5:83:d1:41:f8:cf:b5:7a:96:0b:2d:cc:
53:a7:aa:59:eb:9d:e9:17:3b:68:b7:f4:25:ce:5f:90:d8:8d:
c2:bb:97:5f:59:f6:d2:76:2b:28:58:fd:84:c8:88:7c:81:c9:
9c:9c:be:06:9e:36:cd:6a:af:04:97:00:fa:6d:22:d5:a9:7d:
37:95:ba:17:5d:c7:39:ca:21:69:52:f7:42:64:4b:b8:7b:d9:
21:5a:13:d8:bc:24:a4:65:38:e4:2d:99:bd:5b:2c:10:27:d8:
8c:3e:0e:6d:d0:c9:ed:34:73:77:b4:09:2c:68:b7:fb:51:3d:
b1:de:16:b2:4a:98:1b:81:4f:15:dc:07:45:fa:26:c2:d4:2d:
20:87:43:6b:54:1d:8a:3e:b3:c1:66:68:b0:04:cb:cc:fb:8d:
b5:8a:01:98:34:f7:71:58:68:ea:9b:ce:fb:78:1d:3a:f4:b0:
e5:3f:e9:1b:f4:f3:c1:52:1c:cf:b1:4e:0c:f0:d5:56:60:ab:
c0:8e:56:9f:28:e1:fc:7e:83:10:21:76:e0:b5:ba:3e:ec:4e:
b9:54:53:2e:89:68:65:90:4e:35:f5:c7:54:c0:b6:c0:0a:eb:
d0:26:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:51 2025 by rpki-client