Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: jORaPVikGuXf76zykyJO/5uNkSwj9+Nwqes+fHRBgvg=
Subject key identifier: D1:26:D7:55:7D:8F:EA:F8:44:DF:F1:91:21:45:AD:EF:8D:96:6A:CA
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0197CACC07B07339F65CC95523C4EB2D11B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0632
Signing time: Wed 02 Jul 2025 11:00:58 +0000
Manifest this update: Wed 02 Jul 2025 11:00:58 +0000
Manifest next update: Thu 03 Jul 2025 11:00:58 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: LfssUke6FTwr4Y8Zt8aBSNCrp82Qd/k6131N2I06wlo=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:07:b0:73:39:f6:5c:c9:55:23:c4:eb:2d:11:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Jul 2 11:00:58 2025 GMT
Not After : Jul 3 11:00:58 2025 GMT
Subject: CN=d126d7557d8feaf844dff1912145adef8d966aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:d2:e5:7f:1a:46:ea:6a:84:49:ef:6e:8b:
ff:36:9b:b8:56:68:5f:ef:6b:04:7f:1f:a7:6c:0a:
69:39:ed:a6:52:dc:3a:0b:8b:a9:f1:70:7b:d6:e0:
9e:42:b7:b4:49:ab:fa:9d:2b:2b:21:d2:fe:33:ff:
21:6d:50:e4:88:ea:a9:e2:3c:10:2d:1c:1f:2d:d8:
ee:c3:62:e9:b6:dd:71:93:86:3a:d7:a5:52:7d:8b:
e9:1a:5a:88:c5:b4:7e:5d:e3:d3:a8:33:0c:09:00:
a6:fa:e7:f0:d5:f2:af:5a:72:ed:ab:08:fd:48:2b:
af:d7:a1:16:48:01:81:66:16:e8:bb:7b:be:58:ac:
8b:9b:8f:e3:78:bd:e6:13:6b:27:0c:50:a2:06:f6:
30:83:07:e9:e2:96:ea:c9:d3:e4:69:a9:ec:24:b8:
df:57:11:e2:7d:2c:74:aa:88:b0:46:53:87:66:d8:
40:b8:89:41:9a:bc:77:5f:a7:cb:a6:54:dc:3b:8e:
d5:10:1a:48:00:a6:86:e5:88:0f:4e:95:2e:4f:57:
a5:01:09:f2:c6:ab:4f:ae:a7:59:aa:40:e5:df:12:
fa:d6:af:11:53:2c:e9:a0:fb:11:7d:5c:4d:25:34:
cb:2c:e2:22:14:95:84:89:06:11:25:52:23:b0:f1:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:D7:55:7D:8F:EA:F8:44:DF:F1:91:21:45:AD:EF:8D:96:6A:CA
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:d1:45:47:f3:ab:ad:52:55:9f:18:54:59:d0:90:82:0c:
74:c7:3d:31:a0:b2:ba:50:65:97:a3:68:45:fe:00:79:0a:70:
c2:39:fd:ca:e7:99:43:58:63:ef:fa:43:69:b7:5b:63:fe:7a:
f5:44:91:1d:e4:18:5b:f7:42:a3:02:14:c7:79:e6:aa:e5:03:
35:60:67:e8:ec:cb:81:4a:0a:11:a6:dc:94:b9:bb:40:b5:e8:
34:72:90:7b:c9:e6:a0:4b:03:60:d9:e8:ed:6f:a8:c4:04:87:
47:6e:e8:75:56:2a:77:f7:73:ea:a5:1f:9b:35:f6:65:f9:93:
ad:12:e3:45:0e:a0:06:d7:50:5b:a5:36:b7:06:38:75:e8:a9:
96:1c:f4:b3:20:a8:f9:b8:98:5d:c6:7d:20:d8:0f:ed:4b:5b:
fe:7a:77:04:ef:06:e7:ae:67:e6:59:2c:32:ba:e7:ec:15:08:
62:55:3e:04:c1:aa:b1:e4:03:33:a7:91:5d:86:14:2d:5d:cf:
3b:e8:d5:7e:ec:17:3c:b4:01:bc:7f:02:92:a2:f4:e1:5e:fd:
7a:32:43:53:ac:df:e0:b6:c6:0c:0b:1a:4d:bc:b1:87:b0:82:
32:e6:b8:43:e7:f2:cc:38:52:4a:e1:a1:77:58:3c:a4:29:ad:
5a:68:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:32 2025 by rpki-client