Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: 2fbmB4EXd9tdDvv2QDm8UwyqX6I1y4fZtx+4ypBr0NA=
Subject key identifier: FF:05:BD:76:2D:29:09:A2:A0:25:46:00:A2:6C:55:A2:7B:F8:01:CD
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 0197696197A6E18EB348026AECF248EAE463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0D3D
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: D5PwDEp3fVaebRZgK382GldjyGGrLjqZIGrVD2OCNFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:97:a6:e1:8e:b3:48:02:6a:ec:f2:48:ea:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=ff05bd762d2909a2a0254600a26c55a27bf801cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:bb:ea:0f:0a:20:f2:70:e6:0f:ee:df:82:
0e:1b:82:aa:7e:4c:72:3c:3e:25:10:06:cf:5a:11:
1d:c4:b0:90:95:10:a5:6d:d2:e7:26:85:8d:20:0c:
59:ad:6a:89:58:0e:5d:2e:b6:d5:bb:8f:56:cb:24:
09:f6:c9:f8:ea:e1:1f:41:13:7b:86:3f:ec:53:d9:
ad:89:c4:86:71:97:11:94:e3:c1:1f:07:20:08:79:
d5:f6:d1:01:b2:8e:1b:dd:91:e8:8d:e0:f8:d2:8b:
2b:e1:7f:33:fa:c7:22:be:ac:3a:30:8a:a5:dc:03:
58:71:c2:ff:b8:9b:d7:3b:5e:af:df:7c:14:a9:6b:
a6:2b:61:5d:83:4e:97:cb:8d:0e:6b:bb:54:9c:ae:
1b:e0:30:3e:fa:fd:b1:86:47:a3:a0:a1:b2:d3:02:
45:aa:dd:45:fd:e6:6f:79:9c:ba:f4:38:75:04:26:
ae:b1:e8:8a:88:98:6f:a1:70:91:01:e7:f4:65:a6:
ec:64:ed:33:32:f2:50:dc:13:a8:34:5e:ca:00:40:
f9:30:5d:89:25:74:64:a3:3b:82:0e:d4:66:6f:cb:
d4:47:8a:17:2b:b4:d2:8f:26:82:44:bf:b7:85:d3:
65:85:e9:5b:f1:e2:60:3d:f5:0a:d3:b9:b9:da:bf:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:BD:76:2D:29:09:A2:A0:25:46:00:A2:6C:55:A2:7B:F8:01:CD
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:5f:9b:e8:e5:cb:0a:4d:fc:7e:3d:0c:e3:e1:1f:3f:eb:
bb:a6:e9:e3:98:2b:75:68:e3:61:27:17:07:1b:5f:59:78:cf:
f2:87:b7:f5:cc:47:7d:6c:65:5b:dd:ab:0c:0f:5a:e3:46:64:
30:44:8f:b9:13:d5:82:28:d9:dd:ad:72:e3:2c:f3:10:64:30:
57:de:2a:10:87:0b:5a:6a:2e:2d:c9:7a:bb:e2:b6:43:7d:6c:
c5:5d:3c:cd:66:bd:ad:7d:bf:d3:5b:03:74:10:b9:b6:b8:8e:
c6:22:5c:6f:e9:0c:91:40:3a:39:ef:7e:77:25:91:4a:26:93:
d1:52:18:ba:b3:b4:7b:60:f8:07:ae:21:a6:af:9e:62:9d:48:
c1:27:f3:2c:f6:38:48:ab:56:67:14:5d:1f:57:9c:8b:3d:c8:
91:eb:de:76:ba:d4:40:f2:30:f0:af:ef:9d:e0:0f:a6:41:06:
e2:df:73:f2:e2:3f:01:6a:0e:eb:6f:5a:a8:f6:a7:31:96:d5:
f6:95:93:ab:29:51:3a:74:0b:24:61:1a:48:b2:ec:96:ab:c1:
b1:11:2b:80:68:c7:ca:48:0a:86:fc:24:da:03:29:9d:4d:ac:
43:d8:f9:4d:00:3f:e4:da:f2:90:1d:fa:8b:e1:5a:ce:84:3b:
07:58:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:53 2025 by rpki-client