Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: QQCUGksPuP8YXILLqx6WnUafQqn6wcfDPLCVG8Vuzyk=
Subject key identifier: 1D:8E:3D:9E:43:EC:A9:76:4D:CD:5F:A5:73:99:55:1B:3F:BF:AE:98
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 0197B6D76D0EDD60C13B9C24566081BCE57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 0FF0
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: 5XEV-gEMIErGK0axVAW_a3kFgdQ.roa (hash: zrBYoY+XDrWBTYUlEabBJW1Q13TMvp0kauzANBjQtoQ=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: NLcDpws7vRWrs74mA8EdR4TzqGIIJEN/ydaZk9yKeTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6d:0e:dd:60:c1:3b:9c:24:56:60:81:bc:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=1d8e3d9e43eca9764dcd5fa57399551b3fbfae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:dc:09:07:2d:06:7d:37:7a:c8:34:74:9b:
ea:d9:d2:68:b7:d2:b3:91:59:31:71:d2:45:43:16:
e6:db:d6:5e:99:c2:dc:c7:be:4c:36:ff:71:a2:21:
db:b4:af:6a:ad:38:7a:13:b8:98:17:69:b5:20:47:
73:5b:13:eb:eb:5b:39:be:1d:56:2f:9d:7b:e5:77:
f3:41:93:20:5e:d2:1b:f3:b9:ad:d6:43:45:f8:c2:
6a:58:e8:8e:3a:70:c3:1e:01:eb:7f:95:0c:96:f3:
d1:d8:a8:a4:c6:23:9d:e6:81:6a:80:74:7d:71:08:
d9:53:41:79:96:47:a5:f5:79:77:b8:df:de:20:41:
99:d2:79:ad:73:ca:bf:3c:a2:da:8c:b8:6c:0e:21:
63:c2:d9:d1:84:3f:88:40:8b:24:f6:56:7f:04:b8:
57:0a:09:e0:21:c9:c7:bb:be:32:86:23:b3:17:30:
85:9e:bc:97:e0:82:92:06:2d:69:3d:df:69:4c:03:
c9:2a:67:b1:bf:5f:d8:dd:7d:8d:d8:ae:b6:a0:b3:
17:a4:5f:7b:5e:68:55:cd:82:0e:7b:dc:f0:01:82:
9f:c9:f7:9e:b5:d3:1e:9f:67:9b:83:8c:59:5e:e1:
39:6b:be:ac:90:e5:b0:3d:65:34:27:f9:a6:79:85:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:3D:9E:43:EC:A9:76:4D:CD:5F:A5:73:99:55:1B:3F:BF:AE:98
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:2e:f0:c6:b5:b3:95:d4:2b:99:d9:92:ca:5b:18:de:d1:
a1:c1:71:0f:9f:92:ef:84:08:99:13:4c:7f:9b:bd:2b:5c:82:
67:cc:5a:43:30:44:67:d8:52:3b:99:df:dd:f2:cb:a2:b8:c4:
55:7f:9e:46:bb:9a:66:c1:5c:11:5a:f6:ad:f4:42:40:66:60:
44:62:e2:bc:05:d1:97:7b:74:f1:b2:d8:12:ce:a4:96:39:3f:
89:e6:a6:56:7e:8d:84:67:14:6a:44:5c:f5:3d:7b:d0:3e:af:
7f:b6:e2:42:6d:62:c6:3c:14:ae:cf:73:2e:1f:6e:f3:e9:07:
ab:bb:da:11:07:0d:ba:d1:d1:75:86:09:af:44:e9:f8:e4:2c:
de:15:9f:68:b1:28:47:ed:ac:e3:88:b7:0e:0b:0c:30:6f:56:
f5:c9:8b:b8:40:bf:78:ca:40:6b:c0:dd:b0:c0:37:84:8a:7d:
88:90:01:fb:cd:b5:9f:34:9a:b3:0c:70:ed:a7:b4:8f:81:ec:
38:30:55:6e:2d:54:3e:b8:56:c3:6e:a3:99:b3:33:c0:95:7f:
5e:f5:f9:48:3a:cd:f8:51:b7:4b:18:9a:89:d2:76:cb:6c:97:
29:f4:40:9f:bf:7d:d4:b5:6e:7b:d6:31:59:57:9c:4c:04:67:
0f:d4:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:22 2025 by rpki-client