Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: kQY1/8yauV5NUzHghYDtknsj9EUbpMuBjCaJSnHu3N0=
Subject key identifier: 08:E5:E6:CE:9D:8B:34:D7:86:8A:34:1B:C9:DD:51:89:DE:E3:0E:DF
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 01976D3DC9B0456D143DC9C699D763338D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0D69
Signing time: Sat 14 Jun 2025 07:00:55 +0000
Manifest this update: Sat 14 Jun 2025 07:00:55 +0000
Manifest next update: Sun 15 Jun 2025 07:00:55 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: wpb/fHAjjBZNfl7zDep0YbuWIYWDfszDG745fyYRUeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c9:b0:45:6d:14:3d:c9:c6:99:d7:63:33:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jun 14 07:00:55 2025 GMT
Not After : Jun 15 07:00:55 2025 GMT
Subject: CN=08e5e6ce9d8b34d7868a341bc9dd5189dee30edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:f4:7b:34:43:83:83:0b:c9:0c:5e:30:c4:
b1:8d:79:0e:ab:89:7b:a2:34:b3:aa:b9:d8:b1:48:
ca:3f:2c:ea:e9:34:2a:f7:af:ed:46:b5:46:6e:f7:
0a:0c:b7:ee:89:77:df:a0:42:95:63:f3:28:88:4f:
b8:14:4a:75:d0:f9:ae:d2:4a:8c:52:ae:f8:67:51:
80:a6:2a:f5:cc:ba:ec:d3:f2:45:21:f8:bc:b0:50:
1c:3c:24:86:75:8f:aa:66:34:0e:ee:cf:bc:af:fe:
9c:f6:2c:d4:45:3e:e9:0a:42:a9:fb:ed:77:ed:77:
20:aa:34:60:4d:f3:f1:aa:38:f6:80:79:2c:10:ff:
b0:d4:81:80:ef:37:cf:3a:f0:91:f1:06:c6:33:3b:
5d:85:35:4f:f0:3e:c4:8b:84:0b:51:1d:24:9f:8a:
14:13:d2:7a:05:11:0e:0c:2c:09:28:02:96:8c:17:
db:46:c9:f9:0b:b3:dd:57:c9:9a:71:46:47:53:b1:
aa:76:7c:c8:35:87:88:47:0a:57:b6:69:cc:c1:ca:
5e:86:ec:16:c8:75:ee:cb:33:8f:48:bc:72:26:bf:
5d:7e:b9:c7:d5:3d:e4:af:db:11:43:3e:18:07:44:
c7:0f:a8:bb:b6:01:96:45:de:6c:25:57:16:cb:94:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:E6:CE:9D:8B:34:D7:86:8A:34:1B:C9:DD:51:89:DE:E3:0E:DF
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:23:da:bb:75:08:0b:3b:eb:25:70:8c:be:a6:04:5a:87:79:
53:ec:76:03:a7:3e:14:ed:a7:59:41:85:e5:08:4a:21:57:a5:
ca:0c:c7:d4:71:4f:dc:2b:f5:be:f1:9b:b2:1e:bd:f5:53:1b:
f4:8d:c4:8e:90:77:ea:2c:06:1a:09:39:2d:df:2f:6a:5a:a8:
7e:f3:de:38:c9:4c:d8:ca:08:25:80:7a:c5:7d:c2:b3:c9:e2:
e7:21:25:71:84:ec:7a:18:e4:f9:d7:7c:73:68:e9:f1:b1:47:
e3:28:3a:10:0c:0c:a6:e9:3c:8d:a1:da:d6:17:42:f1:2e:5e:
c5:07:79:7e:85:c4:4b:d8:5c:d5:c1:0b:77:16:32:b4:aa:0b:
5e:92:a2:44:e6:8b:d7:46:04:31:df:c8:93:d4:1c:e0:21:5e:
99:8f:39:28:3d:bc:d6:41:c0:1b:0e:15:76:1d:04:d7:a9:40:
3f:e7:7d:66:93:20:2a:52:6f:59:55:3b:2f:ca:ae:b5:30:15:
30:f7:ad:be:45:9d:11:b6:92:11:68:da:4d:3f:cf:57:cf:0a:
19:08:9d:2a:dc:5f:73:d3:90:23:9b:f0:ae:24:1c:5a:fa:bb:
20:95:d3:3f:2f:cc:8b:b7:ae:f8:70:df:0f:75:55:72:66:e9:
ed:77:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:40 2025 by rpki-client