Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: K56JmU/dc39zeCofgFg5G+UqnCtLuxPL/sdYVJGg4U0=
Subject key identifier: AB:F1:2D:F1:86:3A:01:68:4B:DD:53:03:33:11:2B:FA:03:5F:ED:58
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 0197B88FD9EDBD4A9CDDDBB826B8A5A106C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 22:02:04 +0000
Manifest this update: Sat 28 Jun 2025 22:02:04 +0000
Manifest next update: Sun 29 Jun 2025 22:02:04 +0000
Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: eNsIrSrw9FM1A1A2+cBNPP3vLAdrPiPIcHLVkr6mFUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d9:ed:bd:4a:9c:dd:db:b8:26:b8:a5:a1:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Jun 28 22:02:04 2025 GMT
Not After : Jun 29 22:02:04 2025 GMT
Subject: CN=abf12df1863a01684bdd530333112bfa035fed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:a7:8f:bb:38:92:2c:88:32:4a:07:60:a4:
01:e5:99:a3:c2:d5:dc:b4:2a:03:54:4d:63:f7:f6:
03:b5:cf:03:aa:65:7b:ae:be:b9:43:d8:49:b8:dc:
45:42:ed:a6:40:37:fb:f1:c6:9c:0a:41:c9:12:72:
57:a0:a0:9c:a6:df:51:de:b9:38:a6:3d:57:1c:fd:
48:7b:a6:eb:7c:79:19:ba:cb:a1:71:b6:5f:4d:d6:
33:57:45:5b:11:ca:62:2c:60:1c:58:62:54:1d:6f:
70:bd:3c:93:bf:cb:77:2a:01:c7:5f:b5:56:e2:1c:
3c:ad:69:4c:e6:6c:d4:0f:cc:ed:80:61:5a:30:6c:
5b:f9:12:4d:af:94:6b:d5:87:9c:65:7a:82:c0:f5:
94:78:f4:b3:4c:f1:82:f6:bd:83:88:e1:4f:78:ca:
84:31:d9:6f:d4:c1:21:d2:62:df:95:99:ad:10:cd:
66:58:5b:c3:65:87:94:1f:e8:49:ba:8f:25:19:42:
b0:5c:ee:63:aa:34:89:20:f5:54:40:53:44:1f:8a:
66:d3:9e:2c:03:51:79:28:de:1f:ba:db:86:9c:2a:
96:58:4a:49:2e:10:b1:cf:fd:0b:55:fe:29:1d:1b:
f6:11:c0:80:8f:13:9f:c1:25:61:d7:ba:34:e7:9e:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:2D:F1:86:3A:01:68:4B:DD:53:03:33:11:2B:FA:03:5F:ED:58
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:32:c9:f0:64:6b:30:19:5a:67:69:97:69:6d:ff:01:70:12:
98:c9:41:b8:73:6a:4b:c3:91:e6:10:f5:a9:5d:3c:c7:21:45:
1f:38:64:3c:cd:4a:79:d3:43:36:1f:c7:f4:72:62:26:4c:33:
42:2c:48:9c:79:7a:d4:50:6d:1b:d3:68:a1:c1:33:28:f7:00:
79:1b:f5:89:f2:48:f2:8d:b4:fb:f8:d2:78:22:11:50:a2:9c:
d1:65:aa:68:d1:80:ae:2f:95:b9:65:18:77:2c:31:7b:f6:fd:
d8:fc:a5:d6:2a:8c:84:81:68:bf:f4:d9:8c:5a:d8:28:54:64:
40:d1:d1:be:de:48:be:35:0e:e8:5a:5a:4b:f1:75:7e:62:3b:
91:ca:a9:77:17:9a:25:ba:34:7a:af:38:58:a9:e4:2d:87:45:
e7:90:ae:30:6b:56:a0:04:65:2b:b3:ca:86:1b:a2:26:02:84:
c7:bb:9a:da:65:be:dc:ef:be:16:3d:18:9e:33:62:af:f9:d5:
ab:2b:c6:24:b8:97:1b:56:02:5d:ee:09:ee:39:4b:f9:a0:7b:
e1:6b:2c:ba:f7:33:c0:ec:03:a1:92:d0:fd:d3:1a:f0:1f:d8:
46:af:5c:c9:46:7f:3f:8f:12:c7:75:1b:f3:0e:b6:66:9a:88:
f7:6b:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:13 2025 by rpki-client