Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: NPaJG82q8tqQED8nn60XoCJztMZG+h5z9050XNSt+DE=
Subject key identifier: EB:01:BF:6F:CE:44:FB:B4:D0:E7:A1:EA:EE:26:1C:DA:35:54:A3:2E
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 0197C0B62A07FD33A0272D954FD39FEDB6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 12:00:53 +0000
Manifest this update: Mon 30 Jun 2025 12:00:53 +0000
Manifest next update: Tue 01 Jul 2025 12:00:53 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: ChMbQPh7wvuYoVz9ZzqKJhrkDA5zQdz9Z94tsYgA/Hk=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:2a:07:fd:33:a0:27:2d:95:4f:d3:9f:ed:b6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jun 30 12:00:53 2025 GMT
Not After : Jul 1 12:00:53 2025 GMT
Subject: CN=eb01bf6fce44fbb4d0e7a1eaee261cda3554a32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:66:da:90:34:7a:d5:ec:69:f2:a7:6b:c5:
01:dd:4f:22:69:ad:1a:52:e9:50:5c:83:91:a8:af:
59:a0:36:d1:cf:20:a1:6f:aa:ad:10:a1:89:ec:60:
8c:07:fb:42:98:7a:da:09:7d:3f:cc:24:95:5d:7d:
bb:2d:ac:48:5c:cc:4a:17:ee:9b:e4:fb:e6:52:ce:
52:34:4b:d8:78:0f:7e:c7:3d:11:57:e1:be:a2:0a:
25:04:af:16:d0:7e:00:b8:44:e5:51:85:47:df:70:
62:01:d1:02:a0:55:9b:53:9c:d1:b4:ac:15:9c:51:
e2:30:b7:01:e1:9b:13:6b:cd:66:06:a8:99:46:34:
8b:30:95:f1:56:52:d9:b2:9d:bb:8b:30:07:5c:6b:
4f:5e:84:19:54:9d:41:58:d1:1d:69:29:d6:2d:d5:
54:45:37:38:04:7a:23:e6:48:d7:1f:4e:d8:2f:cb:
74:fb:16:1b:64:0f:bf:1c:ac:f8:e1:77:83:9b:20:
bc:e1:34:6e:53:23:3a:8f:bb:12:71:b4:06:19:92:
be:8b:3a:e3:20:cb:cc:b6:0b:7d:b3:b7:1a:e5:c1:
6b:3f:bf:fe:78:69:01:b2:04:9a:68:68:d0:05:83:
66:99:f7:23:3b:55:16:68:6c:00:7c:4a:9a:2a:f9:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:BF:6F:CE:44:FB:B4:D0:E7:A1:EA:EE:26:1C:DA:35:54:A3:2E
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:0f:ee:ea:20:91:2e:29:19:64:d0:2a:52:26:78:38:b8:c9:
e3:ad:4a:eb:7d:ea:52:1a:24:bf:13:60:c8:40:33:82:da:a5:
11:e7:f4:73:e7:98:d7:a4:72:9d:7c:4b:49:d3:b3:07:3c:30:
20:c6:6b:4c:c5:cb:03:6b:8b:85:25:12:00:9a:2b:14:f1:f3:
ac:9f:80:51:1f:df:8b:e1:dc:a9:6e:59:63:c5:d5:78:59:ff:
96:72:0c:ff:7a:12:05:51:40:e1:40:38:53:90:8b:7d:3c:70:
71:62:2e:c3:53:91:4a:9f:3f:6b:36:14:70:1d:36:8d:e3:29:
ad:d6:be:d9:f9:cf:c1:d4:0d:9e:7b:7a:cd:c7:86:34:a9:69:
d6:50:fa:84:6f:bd:23:37:54:14:28:3e:6f:12:ac:4d:84:14:
18:86:80:08:f9:d0:26:7d:8e:07:4a:c2:d8:00:29:a9:db:a4:
76:15:74:dd:4e:25:30:5a:d6:a0:0a:81:2d:1a:92:67:63:de:
ba:79:b8:d9:f2:ac:36:cd:3f:58:72:c5:7d:a9:bb:85:66:39:
90:78:99:79:dd:4d:1f:b1:f4:be:38:fa:93:42:55:ae:17:dd:
3c:ea:e9:a9:db:b8:5d:82:a2:41:d3:7d:7a:1a:7c:24:ed:0f:
7b:20:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:16:14 2025 by rpki-client