Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: aN7rRO4/WOqS1nmTpCrf50Wwfkb0ZAzVqLnSJDu+pPM=
Subject key identifier: 65:FE:07:EA:41:02:71:DE:3A:6A:52:AA:BF:76:54:A5:56:C7:94:9C
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 01976FD11CAF1AAB624B13359681B434F74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 08E9
Signing time: Sat 14 Jun 2025 19:01:04 +0000
Manifest this update: Sat 14 Jun 2025 19:01:04 +0000
Manifest next update: Sun 15 Jun 2025 19:01:04 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: 08lrMymJAnyK+Vdi6DMpeafuixfpTRFmE13Lsdex278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:1c:af:1a:ab:62:4b:13:35:96:81:b4:34:f7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jun 14 19:01:04 2025 GMT
Not After : Jun 15 19:01:04 2025 GMT
Subject: CN=65fe07ea410271de3a6a52aabf7654a556c7949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:3e:0b:69:76:90:90:6c:04:42:48:7b:2f:
e5:2c:dc:88:55:76:b3:e1:4a:17:be:97:ba:54:62:
f3:5c:c1:6e:f0:07:d1:ed:8c:b9:84:14:29:9c:e9:
f3:47:9d:44:2c:db:44:89:a9:8f:79:5e:a2:de:25:
db:be:81:b2:d8:29:23:05:ed:93:72:8e:bc:0b:89:
0e:d2:07:3d:a3:6d:5a:8a:ef:33:68:aa:28:08:b9:
94:9b:af:b1:48:38:1f:40:6d:e8:e7:32:86:10:ae:
b6:f1:5f:c4:99:14:14:78:68:8c:96:b5:af:ca:84:
10:70:00:b0:6d:be:ba:33:2f:a4:22:cc:bd:5f:4f:
dc:3b:ff:67:87:98:af:f8:71:50:1e:08:7b:af:66:
e0:f5:ef:f1:e4:f1:2a:8d:dc:78:9d:bd:bc:18:b7:
f7:8c:0d:85:09:4d:81:8d:2c:fe:fe:ba:a0:95:fe:
2f:bb:0d:09:de:7a:c8:22:12:e0:df:20:db:a8:b4:
2d:2c:43:68:38:de:6a:47:83:fd:84:82:54:f7:42:
5a:cb:6a:88:70:7f:42:dc:47:5a:1b:e9:e8:a7:c2:
72:7b:52:78:85:85:6b:ca:d2:4b:05:f6:3e:aa:31:
fc:97:fb:b7:6d:f1:01:01:a6:ba:67:36:97:ca:2f:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:07:EA:41:02:71:DE:3A:6A:52:AA:BF:76:54:A5:56:C7:94:9C
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1d:74:d4:b0:85:32:b5:1e:0a:ed:7b:83:0f:91:ba:eb:a3:
60:ee:82:2f:e4:8a:f7:e0:d4:38:f8:21:b6:22:b4:7b:a7:70:
0a:3c:0d:59:69:12:8d:19:fc:02:7c:ab:92:8a:83:64:da:c4:
15:f9:af:15:73:40:07:bd:c3:ea:dd:fc:dc:fb:e2:59:e2:7c:
04:59:04:e1:a0:57:90:92:8e:67:85:2d:7f:a2:77:02:a7:a0:
a5:55:e8:15:28:3a:8e:2e:1c:f7:be:8f:d6:a7:2c:cd:94:79:
e8:9a:f4:ab:ff:3e:ea:1c:84:58:6a:5c:70:94:6c:e4:04:c0:
67:a6:14:5f:db:b5:d5:d6:d3:a6:d9:12:88:82:8a:e3:0f:a5:
22:d4:5e:33:db:dd:9f:7a:54:f1:a6:07:19:f0:b4:85:41:dd:
1c:36:d7:01:19:95:18:a7:4c:e3:d3:f1:81:51:8c:35:84:4f:
7a:23:40:72:1b:8d:e8:20:97:34:ca:f3:af:fc:c2:cb:1c:e2:
ef:c1:5f:a4:00:58:6f:48:8f:ec:ec:d4:5f:09:11:86:1c:46:
9d:40:27:43:0b:2e:75:cf:e1:8e:a8:2d:11:cd:c5:90:fe:07:
bd:76:e3:60:61:a0:b9:66:f0:c4:71:32:8f:03:22:b4:e9:17:
a8:e4:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:42 2025 by rpki-client