Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: kKdERjC/ULKwCZsoipfqMgHvReYP3htgi+StXRuyuuE=
Subject key identifier: B0:7C:60:98:2D:FE:6D:97:A8:3A:72:96:52:9E:8D:55:80:0B:3E:65
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 019893A4723F35E160C7FB5FD8F90C3A0D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 0568
Signing time: Sun 10 Aug 2025 11:01:24 +0000
Manifest this update: Sun 10 Aug 2025 11:01:24 +0000
Manifest next update: Mon 11 Aug 2025 11:01:24 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: JhCq3vW4dzDt52N+i5wQgF1qHYo+eli7ArBsvf7XgYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:72:3f:35:e1:60:c7:fb:5f:d8:f9:0c:3a:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Aug 10 11:01:24 2025 GMT
Not After : Aug 11 11:01:24 2025 GMT
Subject: CN=b07c60982dfe6d97a83a7296529e8d55800b3e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:e2:1d:09:9e:1a:41:3c:8b:e8:2e:dd:5d:
a3:08:ea:b3:dc:d8:ab:7d:71:af:ce:27:95:0c:7e:
36:05:f3:8c:e3:be:9f:ed:a7:5e:5e:e7:0e:18:cc:
7e:3d:68:1f:6f:df:51:4a:cf:f0:72:0c:c0:ac:93:
7e:df:46:1f:0b:89:6f:9e:24:c4:ac:5d:86:c2:bf:
f8:c5:06:b6:01:6a:51:ac:ad:73:ab:b3:fd:5c:7f:
1d:ee:27:e7:a7:3d:ce:56:92:b5:e8:57:6b:83:b2:
9d:14:db:b5:09:73:17:c8:5e:31:ec:ef:7f:2a:6b:
13:76:16:cb:0e:2c:58:b6:d1:fb:24:d1:3e:ee:5a:
d5:06:cc:88:03:09:97:b5:0c:67:6d:b3:bf:7e:b8:
86:75:fe:cc:9d:7f:51:92:db:89:e6:1b:a7:6a:d1:
be:11:4c:b7:64:d8:b7:3e:85:bc:df:e7:a5:97:c0:
67:3e:cd:00:f8:83:d4:7e:4c:16:8e:43:72:7d:f2:
b2:a9:8c:9c:9a:f4:0e:0a:35:1b:74:2b:eb:38:35:
cb:4f:3e:af:0b:de:7e:49:ad:45:8c:11:38:00:35:
5a:78:41:ae:6e:ad:10:72:a0:1b:0e:a7:1d:d7:f0:
07:06:70:38:b3:10:c9:7f:b3:68:e5:b4:a3:1d:b6:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:60:98:2D:FE:6D:97:A8:3A:72:96:52:9E:8D:55:80:0B:3E:65
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:37:11:76:31:2e:f3:8a:c1:69:28:84:33:24:d0:0e:6f:
a2:6d:08:b4:37:c7:23:fc:19:23:c4:95:ad:f4:27:d6:49:cd:
a4:08:29:a4:8f:fa:33:14:15:30:95:8f:f0:01:9f:9c:ad:19:
4c:c7:2f:d6:c9:11:0d:68:fb:a1:36:30:ae:50:cb:5f:61:6a:
0d:c0:05:9e:03:0e:50:ab:1e:e3:4c:26:8a:ad:ef:99:1a:e1:
6c:7e:3a:14:7f:31:e2:24:05:28:c0:d7:35:ba:fe:8e:1c:f1:
5e:0a:94:06:ee:a1:66:51:bd:9c:15:7d:8b:6b:c5:5a:fe:26:
5a:d7:da:ca:05:91:52:22:89:59:d7:c6:45:4a:e2:cc:fb:28:
8f:c1:b7:be:d0:29:48:e4:a4:1a:80:69:0d:ff:33:cc:95:c5:
ce:f9:d8:78:b8:fc:8a:a1:77:a8:2c:c3:95:6f:52:79:2f:16:
8f:a3:e2:8f:a9:4e:05:6b:ca:98:30:b9:a8:4e:2e:80:fc:84:
03:5a:ba:12:17:f6:80:43:9e:cb:29:16:1b:af:ab:7a:7a:be:
c8:f0:79:02:81:a8:9b:75:6c:cd:8f:bf:33:93:ed:26:7e:1d:
c3:3e:aa:91:1a:7b:89:a0:03:1b:28:81:31:55:18:c0:b9:0b:
5b:3f:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:49:19 2025 by rpki-client