Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: 8KKpWXMtkjBCtsfMKKE8QNhoBYXG0luZkRv3qcdYnR0=
Subject key identifier: 40:B8:2B:3A:ED:17:98:98:76:11:1D:1F:88:60:2D:77:E6:A3:3B:11
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 0197B9A1BAA8F91DBEAB5C0996D994E6B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0149
Signing time: Sun 29 Jun 2025 03:01:13 +0000
Manifest this update: Sun 29 Jun 2025 03:01:13 +0000
Manifest next update: Mon 30 Jun 2025 03:01:13 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: z764IIyOTKkh8nlGVt3Soi6LyF4gEIhVt/p3c4bxSNU=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:ba:a8:f9:1d:be:ab:5c:09:96:d9:94:e6:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Jun 29 03:01:13 2025 GMT
Not After : Jun 30 03:01:13 2025 GMT
Subject: CN=40b82b3aed17989876111d1f88602d77e6a33b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:37:c0:43:bc:eb:c6:f4:35:5c:cd:22:ac:
1f:3c:6b:bc:1f:7e:33:11:c9:d2:b3:58:3e:65:cf:
f7:b8:ff:0a:f6:36:11:e5:5d:02:f1:0c:6a:95:6d:
17:dc:55:10:c6:33:43:66:19:91:c0:36:71:43:0f:
30:c7:67:92:fd:12:f0:90:a3:f0:05:9d:b5:aa:ae:
d9:e1:87:69:2b:9b:95:8c:17:ca:d5:e1:f8:a3:f0:
13:9f:cf:1e:76:8d:7d:83:06:99:e9:b7:21:63:3d:
ef:5a:7a:8f:27:69:2d:d3:9b:81:ea:a5:22:74:ed:
ae:80:f8:e0:97:65:a9:c6:2f:cb:6c:4f:95:7d:e6:
02:f6:7e:d0:de:c2:3e:f2:f5:25:3b:bc:03:d1:86:
3a:a1:8f:c2:31:d0:2f:14:6c:aa:56:ae:cb:17:7f:
13:27:f4:57:2f:8d:0d:cc:f9:a3:51:f7:15:d4:b6:
f7:17:e5:57:52:3d:4b:5c:82:79:3b:52:f6:b7:4a:
a2:d1:9b:eb:c0:76:c6:5a:b6:8a:63:f8:88:cf:3a:
68:64:88:c2:28:ad:51:31:c3:1b:00:20:30:de:c1:
0c:c8:5b:12:43:d5:ae:cb:fa:21:7e:e7:45:9a:43:
60:a9:a1:49:7a:8c:c9:3e:fa:21:aa:ff:b1:39:93:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:2B:3A:ED:17:98:98:76:11:1D:1F:88:60:2D:77:E6:A3:3B:11
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:8e:b7:0e:e8:91:02:0a:6a:2e:a5:7e:af:6f:32:b7:94:
b7:5d:6f:b6:e9:75:d1:61:45:6f:de:e8:02:b2:7e:bb:7d:5b:
6f:ac:f1:5d:dc:04:09:14:a4:fc:1d:47:86:15:5f:64:c4:96:
37:36:4a:65:06:65:99:1e:bf:17:0b:77:c3:0e:1a:03:6c:0f:
04:ee:56:a6:f5:25:ab:cc:ba:ad:cc:ea:ff:16:d9:77:d6:5f:
20:d7:1b:ba:4d:4e:b6:b6:db:c1:96:2e:bb:cf:d1:c4:3b:53:
1d:17:1c:ba:12:d8:6e:dd:38:1c:82:c8:1c:fc:70:df:a0:fa:
a2:85:dd:69:7b:57:f5:49:80:ad:b0:06:cc:b2:0e:1c:48:83:
98:a3:12:ea:51:cf:c4:42:c1:ca:9f:b9:1d:02:43:f0:9e:1c:
c0:26:3a:0b:a3:8a:d0:0a:48:1b:98:52:85:05:b0:59:45:44:
57:0d:57:8d:ee:b2:c0:0e:1d:83:27:81:ac:06:c7:cc:bb:99:
54:fb:d7:cb:22:7a:2d:fd:aa:d6:e8:ec:e3:f1:b4:d8:8f:96:
6b:13:ba:66:2d:01:94:d0:29:d2:6c:53:d8:54:f7:ab:49:9f:
d8:b4:f6:36:43:7a:d8:7a:39:58:2a:8e:55:36:8b:8e:9b:7f:
9b:6f:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:15 2025 by rpki-client