Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier: 9bk9juUtG4iIrtz1RWQtcdV5nXEqCh0oh3xQetzBnjA=
Subject key identifier: 84:AE:B6:E4:5A:A2:48:5D:03:29:81:1A:E4:03:A2:F4:81:FE:4B:09
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 0197B6A21297223E3CBE38D4BBB4CEA66BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number: 095D
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=)
2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: I0oTwiLhX9iffo69vMDSOHYhvhoGTLJgUqsjuX6ygdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:12:97:22:3e:3c:be:38:d4:bb:b4:ce:a6:6b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=84aeb6e45aa2485d0329811ae403a2f481fe4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:f5:2a:9d:aa:18:b6:6d:98:5b:78:69:6e:
8d:66:b4:91:53:7d:8b:7f:bc:89:4a:d1:10:c0:bb:
2c:b4:0b:51:7b:26:96:2f:3c:bb:84:13:96:5a:e7:
b6:b3:02:e5:4d:93:1f:56:fb:7e:9f:c3:c5:ca:77:
a4:23:b0:bc:06:cc:e8:14:24:62:e8:88:f2:af:3d:
1e:68:ca:73:96:6e:e9:a5:3d:cf:68:ad:ec:19:cd:
29:f7:7b:96:c5:f0:fe:52:0c:f1:13:c3:ea:9e:50:
23:47:5f:ea:c4:d0:43:33:4a:1a:6f:39:59:74:42:
e7:45:11:70:b2:e1:3d:be:99:b5:b0:01:5a:96:b5:
c2:c8:03:64:ab:d2:ce:fa:74:c2:af:35:e8:d0:c8:
7b:ff:92:be:72:3c:c9:db:a2:5a:ff:a5:48:96:b9:
57:2f:84:5a:bd:be:fc:d0:49:5b:e1:78:bf:01:9d:
19:a7:14:5d:23:60:e1:34:ab:69:9d:05:c0:04:f7:
49:7e:77:02:d9:2a:1b:a0:59:de:c0:ba:ac:3f:79:
b6:27:50:cd:07:af:76:e2:a6:a8:e5:d8:9d:c6:8f:
51:f2:3a:02:95:d4:ad:47:34:10:6a:95:fc:c4:4a:
be:5c:24:61:ef:63:a8:55:51:bc:6d:df:1a:1a:3f:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:B6:E4:5A:A2:48:5D:03:29:81:1A:E4:03:A2:F4:81:FE:4B:09
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:57:19:fb:89:24:6f:57:ad:0c:34:ff:46:3e:9e:f2:71:
bd:f3:9d:a4:2f:f8:25:79:af:93:15:e3:84:4d:b2:58:b3:29:
5c:4e:c5:00:a1:40:39:90:a8:89:8b:d9:a2:e0:7c:99:be:f1:
f0:6f:9f:a6:cd:d6:67:fe:fc:8f:24:05:70:19:01:7a:91:77:
a9:ca:dc:7c:14:54:03:0b:f4:f8:a7:a0:2f:72:e1:a4:c7:ec:
86:42:ef:8d:69:c6:4e:70:cc:72:ae:21:21:08:93:86:10:6a:
5e:b1:9e:63:60:63:e7:41:8f:38:b1:86:47:84:5b:58:5e:e5:
02:78:74:20:ee:da:c4:ae:eb:d6:f2:ce:43:48:f1:43:84:56:
89:56:83:41:83:6b:15:9f:de:21:69:22:f5:ec:1e:b4:52:86:
54:ee:94:61:4a:ea:53:8a:34:34:de:ec:dc:6d:be:84:df:f5:
7b:5e:f2:00:78:03:6b:9d:15:34:a1:3c:c0:b8:6c:04:c7:4f:
d6:9e:15:e8:c9:25:5b:21:72:7f:1e:f2:15:b2:5d:1a:ac:b1:
b5:59:ed:f2:26:b2:b5:40:f8:02:16:dd:24:cf:d7:1d:5c:9e:
e2:b2:2f:97:55:ab:45:a6:30:9a:6c:e9:9f:46:81:41:92:81:
fa:23:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:42 2025 by rpki-client