Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: KAxQyfP6nmiHoXVP+d7WRjY9Qsc2AUdaiJ74FbqaOfA=
Subject key identifier: 75:32:8A:A9:53:62:46:42:5F:96:9F:4E:FC:AC:76:F9:DB:6C:F8:B2
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 0198D6611887A001E8865BA1ED43DFA957D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1396
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: mbmuSmy3ti35Eau0wP3uw5/kEZj9J9djGfXVkep3nys=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:18:87:a0:01:e8:86:5b:a1:ed:43:df:a9:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=75328aa9536246425f969f4efcac76f9db6cf8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:3a:6a:c5:01:c8:2c:6b:8d:ab:d5:ce:af:
3b:56:2f:75:bd:ea:f4:04:b1:0a:45:3a:2d:ff:55:
58:10:c0:d4:2b:67:95:5d:6d:1a:96:a1:b2:10:e0:
98:03:56:89:d5:64:03:a6:ba:fd:d3:5f:93:b8:1c:
11:46:ea:6e:b9:c5:ff:1d:e0:b8:09:c5:16:22:49:
b8:9f:ef:90:5c:49:32:2f:cd:f7:41:b3:74:52:3a:
a2:84:e0:74:a6:82:97:43:15:d2:5b:30:36:a8:f1:
45:6c:16:2d:e4:8f:1e:3f:9f:50:2d:5b:a8:93:da:
cb:76:0a:32:d0:be:7e:c2:4a:38:00:e1:4d:92:f1:
30:ee:a5:21:a0:40:7a:a7:cd:92:31:9d:8b:c1:7e:
81:6c:05:45:18:d8:4c:3f:40:06:73:29:72:a7:ff:
0c:0f:c7:a5:d4:a1:98:49:c9:9b:3d:e8:13:96:74:
5a:d5:52:c1:cb:dc:00:e2:31:24:9d:eb:bd:55:f0:
d8:f8:79:81:cf:24:44:44:19:6c:43:08:3c:99:41:
7a:af:fb:cb:d6:93:b7:50:c7:3f:e1:84:1a:82:28:
d6:5d:f7:6d:0c:54:52:e5:57:62:bc:5f:1f:35:97:
f7:70:01:52:dc:cb:7f:45:5e:07:29:a5:42:71:ec:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:8A:A9:53:62:46:42:5F:96:9F:4E:FC:AC:76:F9:DB:6C:F8:B2
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:de:da:4e:30:d0:de:8d:61:bc:a3:06:57:06:73:a6:2b:28:
be:b7:05:c6:dd:f0:49:d6:07:d2:5c:ac:0d:a1:64:31:ae:29:
d1:3a:f0:90:6a:db:91:e6:31:6b:31:84:6b:4a:fb:00:05:d2:
b2:99:7d:de:3d:34:f2:9c:21:25:91:d4:63:9e:c2:1e:b1:59:
4d:26:82:7e:7c:0a:85:d5:bd:dd:16:ab:da:88:4f:be:d1:e9:
89:17:07:f3:54:9b:38:6f:5b:4b:68:43:67:6f:63:20:76:35:
e2:34:72:1d:12:58:76:41:df:7a:92:54:9f:ce:7a:86:c6:28:
22:c8:f3:2a:c6:9f:ad:68:a5:26:50:0a:f8:ba:1e:86:90:70:
ce:87:9a:b7:fa:ab:89:41:b0:55:f5:af:0e:fd:42:34:f7:24:
79:37:36:93:36:bd:0b:20:82:48:9d:90:f8:c7:bd:df:24:27:
46:47:16:a1:9e:b1:56:6a:f6:ab:65:e7:29:06:f0:84:fe:54:
8e:3a:43:ca:ce:f7:c0:19:4c:bd:de:02:5b:7c:27:b5:c5:57:
8f:5d:bd:c9:af:08:48:da:b5:0d:df:5a:74:78:38:66:62:6c:
2f:5d:3d:36:a2:a0:e2:98:08:92:fd:01:c7:54:7b:12:b6:74:
a1:e0:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:15 2025 by rpki-client