Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: 661vVRblVQE00Dw2zk1MdClSpsvRA5Xygq323R3/Klk=
Subject key identifier: BB:D6:E5:AC:8C:A0:78:C0:CD:FB:DE:DE:64:D5:BA:48:E9:7F:DB:AB
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 0198D773503430D5BD5FD912A05BCD7B71FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 09B5
Signing time: Sat 23 Aug 2025 15:01:55 +0000
Manifest this update: Sat 23 Aug 2025 15:01:55 +0000
Manifest next update: Sun 24 Aug 2025 15:01:55 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: dUp+oIOfNkpNOAh2xzpA2FMHBppUax5hl5/TdJe+eRA=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:50:34:30:d5:bd:5f:d9:12:a0:5b:cd:7b:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Aug 23 15:01:55 2025 GMT
Not After : Aug 24 15:01:55 2025 GMT
Subject: CN=bbd6e5ac8ca078c0cdfbdede64d5ba48e97fdbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:bb:9f:83:9d:9a:a4:58:84:84:fe:90:45:
60:e3:6f:10:2d:9d:d7:d6:ee:79:1f:5f:8a:5d:8b:
04:fb:71:88:f1:ea:34:7c:7d:e6:ec:2c:da:97:5a:
27:99:09:f4:58:91:20:1d:56:aa:dd:33:97:51:b2:
65:2d:fd:88:8d:ef:cd:86:cf:2a:eb:7e:49:5a:e2:
1f:d9:cf:cd:bb:df:26:00:cf:21:25:33:79:fa:55:
bb:e2:e8:e8:d6:46:3c:e6:1d:01:c6:3f:91:98:88:
14:b9:a6:50:92:45:50:42:05:5e:c8:ea:a0:62:7b:
04:e4:dd:1c:d4:b1:6b:79:59:c6:07:3e:36:68:7c:
e8:02:d7:ca:1e:23:7d:73:a8:92:c7:a1:59:58:2f:
b6:3b:27:61:7b:0b:a7:2f:ca:c9:e7:18:7c:f0:de:
71:bd:4d:10:5b:d0:f3:fd:19:12:85:a6:1a:c4:d0:
f9:de:62:16:3a:08:9d:2f:4d:6e:02:82:de:e9:c7:
9a:d1:4f:7e:11:06:98:70:65:58:74:c5:69:98:42:
53:db:3c:89:1e:98:5c:8a:8d:66:da:79:2c:a0:b0:
9b:10:22:3b:55:2b:52:a3:59:3a:66:55:7e:0c:b9:
65:c4:b6:b8:73:f9:79:40:24:75:2a:be:e4:d4:83:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D6:E5:AC:8C:A0:78:C0:CD:FB:DE:DE:64:D5:BA:48:E9:7F:DB:AB
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5b:1c:4e:fd:20:15:d6:d0:31:2b:f9:b8:46:e8:a0:83:3d:
5d:24:dd:6a:c3:70:ad:71:3f:ec:08:18:da:c5:d9:eb:29:da:
d7:67:33:9d:67:dd:04:90:cf:46:e7:f7:dc:19:e3:26:bb:f8:
42:ab:22:75:c1:2b:02:f8:de:43:09:ee:20:8f:4d:f9:53:e9:
c1:13:20:37:9e:22:78:05:1b:2d:bb:9f:76:f3:16:75:af:52:
89:89:92:5a:f1:45:1f:c3:0d:79:42:d0:87:37:66:7f:8d:af:
fe:55:27:97:f0:6e:cc:0c:f9:24:f1:dd:d2:98:a1:97:fe:ea:
0d:92:5a:25:32:af:05:88:05:6d:97:8f:84:7f:d6:dc:f9:11:
0c:4f:83:6a:dd:83:ff:c0:88:2c:7b:75:0b:8f:db:42:6c:35:
a9:17:81:3e:d3:d3:8c:30:3f:df:4a:71:b6:d0:0a:da:45:ca:
28:72:43:78:3b:d3:d0:a9:29:06:cb:2e:ad:e8:dc:ad:91:10:
60:0b:ea:04:78:ad:3b:69:65:27:c0:0c:20:8c:ff:ab:b7:47:
c0:7a:ea:9a:76:da:38:60:9d:44:8d:dd:15:3d:e4:9b:73:94:
6f:7a:6c:d4:ec:c2:f1:90:f5:26:82:eb:12:ff:91:17:f1:15:
53:91:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:55:59 2025 by rpki-client