Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier: U+67C/m9i8SSZG1x+9y9APL6b5tXm2R6m3IAfSXj/x8=
Subject key identifier: AC:C7:6E:80:CE:65:33:AE:7A:CD:23:E5:A3:CE:0E:FE:E9:91:30:42
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial: 0197B7EA574833F319D5931DDB1D146D1596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number: 019D
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: dwnZm54zZm8fwzm41OZPzmeL4nylu9zMuUymmr0nOzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:57:48:33:f3:19:d5:93:1d:db:1d:14:6d:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=acc76e80ce6533ae7acd23e5a3ce0efee9913042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:fd:3c:8c:72:c9:3a:92:08:7c:29:a2:b1:
47:3f:38:02:c0:66:6b:1e:d1:6f:7a:cf:6e:95:61:
d8:ed:e4:1f:92:21:c7:a0:5e:8e:2c:0f:e1:c3:3f:
4a:1c:4e:08:fa:ca:74:a5:88:78:10:9a:8e:ed:d0:
65:a7:7f:37:be:b6:35:10:20:ca:06:8c:19:63:77:
50:53:33:26:6c:c5:dc:81:e8:9a:1d:1c:10:d0:18:
b5:c9:f4:e0:6e:b0:d3:02:5d:ac:b2:8d:07:45:7f:
8d:51:9b:1a:88:be:4b:d4:5e:9f:f5:c6:9d:e8:8b:
3e:78:8e:c9:a1:26:b7:05:e0:8b:c4:ab:58:42:97:
71:17:15:26:7a:1a:1e:d0:9f:3f:df:66:01:57:ba:
21:ea:7e:d4:31:df:ce:3c:5a:9f:e5:30:4b:59:3f:
bb:71:79:23:90:0e:00:f8:64:10:31:9b:14:7e:35:
13:8d:98:d9:62:13:03:50:78:96:e4:88:de:ba:8c:
8f:a3:a0:ce:c7:55:ed:78:98:a6:5b:19:c8:80:a5:
93:28:dc:b6:0a:86:c3:4c:56:a4:ee:c1:fa:cc:18:
e0:5a:76:e9:ff:b0:3a:e2:16:9a:35:98:ee:04:a3:
7a:66:fd:1a:a9:9f:fd:02:51:9d:60:6b:76:1c:78:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:6E:80:CE:65:33:AE:7A:CD:23:E5:A3:CE:0E:FE:E9:91:30:42
X509v3 Authority Key Identifier:
keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:f0:45:d4:31:7d:98:05:43:e7:34:2d:c5:4b:64:5f:e4:
03:49:54:18:b1:e0:d8:66:63:f2:b2:73:52:d0:c0:d5:27:45:
0c:c8:0e:49:c0:5b:5c:24:c9:ab:3d:e9:86:22:67:fc:eb:55:
3f:80:b7:08:0b:53:16:8b:3b:e8:8d:b9:6f:f3:93:fd:8d:3e:
39:95:57:55:8f:4a:b1:0a:81:c1:55:b3:3f:22:57:75:37:c5:
de:dd:7e:02:f0:7d:35:1c:a3:32:f9:f4:15:f0:03:49:d4:0c:
3f:d0:d4:01:e1:ad:f4:35:21:e1:31:04:c3:65:a9:b5:ae:a3:
46:d7:5c:ae:64:18:97:67:d6:3c:c9:fd:73:4a:05:69:b3:32:
26:a6:69:44:a2:80:83:3a:33:53:05:fc:ff:1d:9f:59:00:30:
12:23:f3:c4:2c:3f:2c:82:7d:89:d4:fb:7e:2d:e2:39:1c:de:
67:e1:55:d7:8b:37:40:6a:d5:7b:f3:3f:ac:7b:f9:66:7e:1b:
fd:95:fe:75:4d:f2:ca:0c:79:69:66:60:83:8d:73:cd:bb:85:
c5:c9:ab:79:e0:d5:d8:ae:00:fc:4e:bc:aa:51:2e:fe:5f:f6:
cb:64:2e:df:b5:21:f6:0c:0b:bc:d6:3d:11:b6:30:30:2c:87:
f0:22:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:12 2025 by rpki-client