Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: KM0dOpGwPWuss1m6+Y81lWpCxpnJsRkPZr2ZdAAyYo4=
Subject key identifier: B8:C8:14:AB:88:E1:C6:B6:11:66:F8:A1:D3:08:AE:A1:8F:FC:95:86
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 0197699789117046AB21151F126475F7F268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 14:00:28 +0000
Manifest this update: Fri 13 Jun 2025 14:00:28 +0000
Manifest next update: Sat 14 Jun 2025 14:00:28 +0000
Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: ZLGSFf5SKBz6NUmXqL5U0SbO+en+AsxTSnzAlO+w+4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:89:11:70:46:ab:21:15:1f:12:64:75:f7:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Jun 13 14:00:28 2025 GMT
Not After : Jun 14 14:00:28 2025 GMT
Subject: CN=b8c814ab88e1c6b61166f8a1d308aea18ffc9586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:95:dc:12:e2:d6:6b:d8:fb:02:ed:a9:04:
26:d1:a4:53:14:88:68:4c:d2:4c:c2:de:52:14:92:
34:3b:8d:4f:58:f6:55:aa:37:f1:46:40:e0:a5:1c:
74:a9:13:98:65:db:42:57:5b:2d:65:39:b7:89:f4:
33:70:21:68:c5:bb:f5:4d:10:90:d4:c3:4e:4c:ab:
37:e6:ff:a8:7f:ab:bf:4e:d0:59:63:d0:1b:d7:2c:
f3:dc:2b:2f:13:c4:02:29:9b:b4:84:ed:a3:c7:86:
95:47:b6:14:61:b5:b9:f5:c9:d2:0a:bc:c0:bb:34:
e8:3b:55:95:12:a7:72:78:88:f1:ca:14:ea:46:80:
0d:6b:94:93:bc:05:38:4e:de:c7:0e:cd:78:e9:b3:
d5:e3:7e:2f:51:6d:ae:26:32:80:02:35:4e:46:3b:
1b:c1:d9:39:e1:82:3f:06:21:33:c4:b0:51:7d:2a:
6e:f0:6d:e5:90:23:ad:6e:c2:98:10:93:0c:10:a6:
f2:20:13:fb:15:3e:af:4b:ef:8d:21:2b:f9:b2:69:
3e:a8:13:9e:8a:7e:30:65:e6:65:97:6f:51:76:52:
a4:ad:e0:a2:11:47:1c:71:1c:33:a8:16:42:de:18:
a5:54:2c:c0:a1:ce:2f:85:22:bf:4e:6e:1f:4c:08:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:14:AB:88:E1:C6:B6:11:66:F8:A1:D3:08:AE:A1:8F:FC:95:86
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:97:1e:54:be:19:1a:58:21:7a:3a:c7:1f:70:2a:85:d4:
98:16:8a:34:d0:c7:19:1b:41:b3:db:f2:5b:7c:52:17:ce:77:
af:1e:c0:9e:d9:b5:f6:22:32:c5:dc:5f:41:0a:45:2a:ee:92:
25:f9:48:07:de:8b:cb:4c:9c:a8:42:9b:27:2e:f5:97:b4:0e:
c2:9e:a8:fd:f2:51:65:0b:52:94:6c:16:ed:fa:58:61:f6:f8:
9a:f8:9e:bd:9f:61:1d:78:9c:2a:8b:27:ee:be:ee:56:98:aa:
c6:a3:d0:3b:8a:76:9b:7a:b5:99:90:e6:35:5c:8e:60:08:d6:
5c:12:83:ba:ac:f4:ed:08:4c:d2:e5:92:d5:0c:ac:6f:4c:6c:
b2:26:93:f9:76:cf:67:56:b1:6f:4d:26:75:bb:d9:12:0b:c3:
9b:17:d1:97:cd:7a:59:2f:f6:77:aa:92:27:48:39:d8:9b:14:
02:c7:4c:4b:32:a8:61:d7:38:18:9f:ba:cc:03:39:45:79:da:
ac:d5:9e:95:ce:9b:1e:28:08:58:66:4b:c1:5c:75:23:95:96:
2e:49:46:1b:50:7e:59:89:c9:8f:e9:e1:04:4c:1d:d3:f1:bf:
26:91:72:8a:cd:55:42:9c:95:6f:35:a9:76:4d:c0:43:f0:71:
b7:6f:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:15 2025 by rpki-client