Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: rnAKE2jR/JlnBjMs0jgYP0+aUehDX9gIv8twjNvl5t4=
Subject key identifier: 2A:BD:87:3A:F6:57:AE:24:EB:2B:DB:8B:1A:E4:3D:A6:25:AD:C3:F5
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 0197B9D936853A4EADBFBB3FCB460E0086AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 04:01:49 +0000
Manifest this update: Sun 29 Jun 2025 04:01:49 +0000
Manifest next update: Mon 30 Jun 2025 04:01:49 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: I4Gx0vmcoFU39yQUvXM06OoU5sVfdKAN6s02RifbLdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:36:85:3a:4e:ad:bf:bb:3f:cb:46:0e:00:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Jun 29 04:01:49 2025 GMT
Not After : Jun 30 04:01:49 2025 GMT
Subject: CN=2abd873af657ae24eb2bdb8b1ae43da625adc3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:0f:9b:99:f0:3c:2d:18:ba:fd:36:ba:de:
83:5a:14:fc:6b:7e:15:e6:fc:f3:6b:36:10:ca:d5:
66:8d:b2:5d:03:3c:aa:fe:60:b7:a5:5d:45:f9:3f:
95:fb:81:f6:19:62:75:7c:d1:11:7d:fb:f8:4e:10:
b6:1a:f8:aa:4b:e1:5b:6b:f2:09:54:df:20:79:fc:
e3:a0:2d:1d:b2:fb:01:f9:58:64:cc:0e:9e:d5:a8:
6c:23:65:f9:2e:2d:22:ad:e4:67:fd:9c:45:a3:b5:
cf:27:31:78:8f:fb:cb:b0:35:90:a7:10:13:61:3b:
c1:29:7a:3c:2b:1c:2a:0d:3f:e9:c8:0f:f1:4c:97:
4a:72:8a:f4:11:f7:93:d2:57:35:5b:80:04:3e:10:
58:96:49:57:6c:f3:a1:a4:5f:f9:17:8c:a4:df:ac:
27:1f:11:dc:87:e7:95:f4:0d:b8:d2:3d:62:5d:13:
b3:62:45:5f:f1:39:7e:0d:8a:7e:ba:1e:8a:04:bd:
47:20:b6:ca:d0:ca:31:95:25:78:d4:29:d2:4b:9a:
ff:47:5d:06:96:7c:bd:a9:82:d8:3a:ef:89:e4:bf:
fd:a1:ab:a2:61:08:a0:b3:70:c2:58:3e:0b:61:ca:
10:82:44:19:62:14:64:4b:8e:ee:d0:c1:c3:c1:50:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:87:3A:F6:57:AE:24:EB:2B:DB:8B:1A:E4:3D:A6:25:AD:C3:F5
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:94:00:1c:b6:53:03:78:51:08:4a:03:35:fe:e1:d3:07:
a2:fb:95:9e:63:4d:0a:d9:d3:eb:30:19:ec:39:26:5e:9d:62:
bb:e1:cf:f2:9a:c0:94:62:42:0e:18:4b:30:d1:f7:0b:83:98:
c9:72:92:e0:70:bc:17:8e:f0:b3:93:ce:7d:5e:51:3f:41:41:
72:ea:59:5f:fd:f3:93:9e:dd:10:3a:6a:49:11:2f:0d:da:9a:
41:94:fe:5a:51:ba:2b:8e:5e:52:44:f6:42:98:b6:cc:67:31:
41:97:0d:66:39:f8:bc:fc:38:9a:76:f7:0f:9b:ef:ee:5a:48:
85:82:60:76:39:9c:f2:96:59:fb:52:45:64:e1:1f:a8:33:10:
c6:3c:0c:bb:03:67:99:31:3a:c1:54:d6:30:35:2e:d0:f6:05:
97:b2:86:85:7a:70:b0:40:9d:9d:f9:f0:ee:b5:b7:d7:dc:c1:
a1:f1:4b:a4:93:c8:4d:bd:35:82:90:2c:72:2b:dc:d5:6f:f3:
08:d4:86:3d:bb:05:0d:d4:44:07:ac:94:a1:b9:df:98:e8:49:
cc:73:78:10:cb:18:6d:69:4b:55:c8:93:89:e1:72:6d:6f:a2:
83:7f:2c:14:21:cd:d8:ee:6a:b0:dd:43:38:17:6c:2f:b3:10:
24:02:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:45 2025 by rpki-client