Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: 7WcWDSY4/T88VcS8+lk/byYh7xnrxgmVlLWksgx9Qwc=
Subject key identifier: 8F:E1:FE:BB:17:1A:8B:8E:60:3C:7C:09:54:A2:C1:1F:1F:DD:A5:D6
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 01976D745959B16FF8EEDC8623FB5880688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 0135
Signing time: Sat 14 Jun 2025 08:00:30 +0000
Manifest this update: Sat 14 Jun 2025 08:00:30 +0000
Manifest next update: Sun 15 Jun 2025 08:00:30 +0000
Files and hashes: 1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: imGpooX1QruEZkfX0xV4HsNXeSGlnem98zfrMorwfko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:59:59:b1:6f:f8:ee:dc:86:23:fb:58:80:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Jun 14 08:00:30 2025 GMT
Not After : Jun 15 08:00:30 2025 GMT
Subject: CN=8fe1febb171a8b8e603c7c0954a2c11f1fdda5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:e7:19:9b:45:55:8a:23:35:8c:e4:ea:d5:
e4:ba:02:79:66:e1:31:8a:41:a1:f7:b5:06:fd:9e:
53:44:a0:bf:b9:37:4b:d7:c4:53:0b:93:09:7f:1b:
d0:35:8b:a2:c6:22:a5:a6:58:0a:1a:7d:8a:09:c1:
ae:ac:d9:56:86:69:f8:5e:56:a1:33:cd:6c:fd:77:
cb:1a:43:74:1c:fb:10:2f:55:da:b7:3a:a0:e8:b8:
dc:84:71:6d:ac:94:7f:3a:71:53:c3:da:1f:45:3f:
71:30:5b:61:ca:3a:dd:a5:10:0f:6a:b2:43:eb:e2:
be:42:c4:a2:f8:37:c5:ee:9f:ee:ce:56:ca:39:bb:
8f:18:3b:13:0b:68:b9:8e:49:14:ea:a5:b1:d2:8d:
87:57:0f:57:81:75:c5:55:13:91:bb:59:38:d8:77:
32:f0:20:52:0a:46:a4:9c:ae:3b:98:9a:8e:e9:0b:
aa:07:49:40:94:66:2c:8a:35:b6:92:0c:32:18:7d:
df:4d:48:37:09:45:01:16:33:3b:1d:33:68:35:0b:
75:cf:85:0a:d3:47:88:f1:7d:06:f7:13:d3:21:6d:
50:03:96:61:a7:68:43:ea:d2:27:4a:0f:65:a3:dd:
da:73:d9:d0:2a:95:e2:29:c4:a0:6d:00:84:ae:05:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E1:FE:BB:17:1A:8B:8E:60:3C:7C:09:54:A2:C1:1F:1F:DD:A5:D6
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4d:c0:c1:14:fe:3a:f6:b6:a9:b5:21:dc:fa:67:88:0f:26:
87:74:b0:66:ab:dc:d5:92:34:d8:31:f3:88:a2:78:97:34:94:
44:04:a3:ca:1a:fe:65:26:14:75:37:43:47:8d:3c:45:75:d3:
61:84:91:23:ca:24:e9:d4:43:ed:2e:7c:43:a1:8e:7b:d7:cf:
50:87:22:52:1a:b6:0d:f5:41:7c:86:a0:be:5e:5d:1e:68:35:
a2:80:d1:52:64:74:48:88:b6:80:71:b7:56:be:a8:3b:b4:41:
67:5d:4f:66:17:cf:c5:e1:70:ff:41:79:c0:ec:10:8d:1f:6e:
06:79:6b:be:66:d6:70:d2:55:97:4d:61:b7:19:eb:4d:0d:fe:
d4:f9:26:a0:c4:b4:f4:c9:b3:1b:00:fd:39:91:d6:0b:78:8b:
60:74:05:f4:ff:e2:f0:6c:8f:09:8c:23:9c:c5:2e:48:51:32:
bf:b9:20:d6:13:68:27:e4:5a:9f:23:b6:2c:5d:c7:a9:85:32:
a0:6f:c7:cc:cb:72:bb:a2:f7:50:c3:34:0c:2c:b2:1d:e0:84:
54:d4:b0:50:41:87:12:54:6a:3c:98:25:8f:b6:4e:0d:8f:87:
dd:ab:8d:09:c2:09:da:68:d4:e3:c0:9c:b1:c1:ae:3f:3a:d1:
97:f7:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:26:59 2025 by rpki-client