Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: A8dkMCPNva5a0RU7QclWFE/yaaqDIeUyrfE7/XND3TQ=
Subject key identifier: E9:4B:FD:C5:C8:9A:D7:A1:43:4B:8C:FD:7B:D5:C3:C0:39:E7:B5:8C
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 0197B88F1B89879C5AC71CAD0289F9DB5BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1302
Signing time: Sat 28 Jun 2025 22:01:15 +0000
Manifest this update: Sat 28 Jun 2025 22:01:15 +0000
Manifest next update: Sun 29 Jun 2025 22:01:15 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: 5A6rHSUXqD7S3qhzbbx7QPkoevnBKMnDQX3dryC0QWE=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:1b:89:87:9c:5a:c7:1c:ad:02:89:f9:db:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jun 28 22:01:15 2025 GMT
Not After : Jun 29 22:01:15 2025 GMT
Subject: CN=e94bfdc5c89ad7a1434b8cfd7bd5c3c039e7b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:36:c4:7e:30:d6:01:43:a9:0f:7a:d1:59:
12:52:57:4f:50:9c:70:f6:f2:a1:bf:64:14:cc:dc:
92:28:a7:53:59:66:d7:be:29:a4:40:97:bc:3d:5a:
d3:a0:df:7e:d6:ff:53:21:62:14:a2:58:67:95:38:
42:8a:15:ab:ac:6b:e3:0f:00:7f:18:15:3a:e0:7a:
ac:58:18:13:09:b1:da:8a:5e:5b:6f:ec:b6:58:8d:
78:18:7f:0c:f1:18:ee:ce:99:92:60:5a:5e:fc:14:
dd:2a:0d:1d:38:2f:2d:cf:b5:ad:b7:51:96:6f:48:
17:37:6b:ab:96:37:ab:57:13:43:f6:7a:32:62:ec:
fa:e6:e9:36:46:27:d8:54:b7:dc:50:44:5f:e5:3a:
76:41:e7:b5:a1:15:21:a2:8e:e2:89:62:68:04:b9:
24:4e:74:8e:3e:d5:86:a0:f3:f0:39:c6:37:98:7d:
6b:d2:51:49:93:33:2b:41:b6:d5:ad:c4:d0:7f:f1:
c7:5e:28:01:d6:48:23:53:da:fb:b1:69:1b:f0:ff:
05:86:d3:0b:fd:3d:75:20:ac:2b:a1:33:d2:81:c0:
58:a2:58:b9:d5:ff:5f:bb:10:06:08:75:31:fa:55:
24:74:11:35:f2:ec:91:47:47:9f:ee:ed:94:c5:c7:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:FD:C5:C8:9A:D7:A1:43:4B:8C:FD:7B:D5:C3:C0:39:E7:B5:8C
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:44:ee:1a:b3:79:5f:e1:87:6e:6d:c8:c4:b7:95:9f:78:
e8:4c:1e:e4:0c:b9:cc:9e:70:8e:4a:3d:6f:af:44:e8:e3:f2:
89:e6:af:52:45:41:60:92:a2:4f:69:7c:7f:51:3c:26:44:75:
74:3c:5b:73:c3:56:52:f1:81:9f:02:32:be:9e:8c:35:92:ff:
b0:de:8f:64:b3:66:fa:50:e4:75:8b:8c:c2:09:40:ab:2e:15:
75:b0:32:cd:ad:9f:55:5c:76:42:50:e2:2c:92:16:de:68:67:
fe:a1:f1:9c:4a:74:6d:b5:1c:c1:a5:f2:b9:d5:6f:6c:a0:56:
3c:ed:ba:cf:31:3c:46:01:d1:03:0c:cb:d2:83:8d:c4:83:5e:
18:5d:4f:21:4f:3d:ab:d8:31:f5:37:19:ed:3e:92:e3:e3:9e:
57:93:0a:2f:d6:1b:12:24:5a:83:3f:e0:82:ed:e6:a9:98:42:
ce:3f:8f:8a:72:60:13:2a:05:d6:f2:0d:00:1c:8b:bb:ac:df:
f1:5e:1e:7c:52:b4:fd:9a:e9:3f:27:a8:f8:9f:3b:c8:49:09:
4b:d8:59:1e:10:d5:92:be:09:37:61:61:09:03:7e:16:8c:9c:
6f:5a:35:0a:2b:40:22:b0:0a:7a:57:f7:37:22:40:82:ea:bf:
dc:1f:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client