Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: +kfL4F1OGgZkmCY3+vaNvWXbEX15Sig3CcjfeMzx60s=
Subject key identifier: 85:C5:E5:8C:EA:A4:98:FA:D1:67:6F:01:C2:6D:54:B5:34:8D:48:71
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 0197B8FD00EB58A8C5894274035E5716C142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: wU2df5IL6COPUH/1qL7mVs43L9LcZe6n6sZZOkEYeE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:00:eb:58:a8:c5:89:42:74:03:5e:57:16:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=85c5e58ceaa498fad1676f01c26d54b5348d4871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:8c:47:cf:e3:2d:d7:10:d6:e5:d7:ff:52:
d4:72:b9:1d:7f:66:7b:e4:00:94:d7:25:f3:76:28:
87:31:4f:67:f7:ad:58:af:3e:f6:20:cf:7a:76:ae:
6e:88:24:b8:e0:a2:2d:6a:4d:0e:8f:7d:fc:89:87:
dd:2c:e4:f8:2a:4a:de:4a:78:d9:01:d1:85:5d:7d:
8c:43:64:0c:41:1f:ae:c2:45:e4:7f:f9:d5:18:b0:
7f:3d:26:7d:7e:4c:b6:48:d7:4b:f3:ba:a7:68:83:
38:d1:5a:60:68:f3:88:9c:fa:a4:49:7b:c1:a4:a1:
db:0b:84:96:84:a8:34:61:be:f0:cd:6b:8a:fa:93:
b8:38:e4:f4:a3:77:a7:b8:17:e1:5e:cb:51:db:9d:
1b:a1:ba:24:4d:6f:ff:41:70:84:7e:42:3d:30:36:
87:ca:09:b2:0f:e4:b0:0c:fb:30:3a:65:b0:c6:9b:
12:a9:4d:99:62:36:f0:93:d9:b0:7e:b6:ab:e1:57:
9f:ee:6a:c1:df:0c:bf:47:e3:c0:9e:a4:4e:6a:34:
bf:2b:a4:95:a2:29:ee:10:2c:fa:c1:55:39:fc:6d:
1a:49:62:ad:66:96:98:4e:06:72:1d:f2:96:08:bc:
77:22:5a:41:02:d2:99:56:67:ca:87:a6:ed:37:4c:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:E5:8C:EA:A4:98:FA:D1:67:6F:01:C2:6D:54:B5:34:8D:48:71
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:3e:a3:61:09:cf:ec:a2:86:99:6e:19:d1:93:7a:63:31:
6e:1c:6a:69:bb:94:fb:4b:a4:d6:a9:a2:41:66:d8:98:4d:02:
d0:ce:73:aa:4b:5c:b1:3f:96:92:b5:4c:b5:b9:22:a7:47:e3:
11:ad:76:f4:92:5a:f2:38:1b:4f:c9:e9:58:09:f1:34:a3:a1:
e9:88:6f:b0:e0:9a:e4:1b:7c:db:5f:41:9c:ce:93:60:92:4b:
48:dc:bf:51:55:ac:1a:13:16:ad:f4:29:e9:d2:4f:73:d1:28:
05:5e:b0:ad:bc:fa:e8:e7:b1:e4:c2:f9:c2:99:da:45:d7:e9:
1c:27:2f:41:81:d6:48:86:18:51:b6:f7:a0:f8:a7:9c:9b:19:
00:d3:7e:f3:50:e0:c9:37:5c:93:c4:b1:8a:ae:11:50:22:72:
15:88:35:0a:bd:5c:f1:91:d7:56:9a:3b:eb:36:20:62:10:47:
88:ce:6e:74:5c:49:99:92:98:67:b3:66:ad:8d:7c:ef:89:0d:
a3:3e:6a:f9:ab:52:a9:2d:0f:18:be:c6:29:8f:ee:cf:c2:05:
c3:8f:df:c4:10:69:64:30:08:cc:d5:56:8d:f2:5c:a4:97:58:
de:7e:a2:c7:0a:fe:1d:44:0d:94:b3:f9:1b:f4:34:5f:89:c4:
ab:44:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:57:55 2025 by rpki-client