Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: 4sbAfdNGfkO4yrpB6VLPnhyttC+9oEum1gTZJvuPqqk=
Subject key identifier: 88:49:C3:C4:8E:EA:19:F2:09:A6:39:B7:02:B7:83:D6:6B:3B:F8:A7
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0197711A6A74C8734E7C2DC874F27C052E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 13FE
Signing time: Sun 15 Jun 2025 01:00:46 +0000
Manifest this update: Sun 15 Jun 2025 01:00:46 +0000
Manifest next update: Mon 16 Jun 2025 01:00:46 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: SDExXUKg26FRmcIzPLdt9GTv3ryZJlZnejWZLCNNZ40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:6a:74:c8:73:4e:7c:2d:c8:74:f2:7c:05:2e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jun 15 01:00:46 2025 GMT
Not After : Jun 16 01:00:46 2025 GMT
Subject: CN=8849c3c48eea19f209a639b702b783d66b3bf8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:2f:c5:0c:cd:7a:9c:f3:15:d7:d9:5c:cd:
f3:c8:87:50:f6:44:45:08:3d:10:c9:b9:da:a1:75:
08:1c:00:ae:5a:0c:e5:3c:8b:df:0f:8c:ed:4c:76:
83:2f:93:ff:3f:05:7c:40:ff:5f:55:4b:e9:4b:af:
f7:82:b2:24:cf:94:4c:05:d9:2e:df:1d:25:1e:1a:
c0:44:b1:ae:f0:5d:d2:8a:a5:73:fe:eb:52:8a:23:
03:b3:39:7b:ca:2b:ef:a3:2d:4b:20:82:f9:a1:d6:
ab:61:b4:c0:ed:ff:5f:4b:01:5b:ab:6d:44:ef:81:
1c:a7:f6:61:a7:46:38:23:97:23:92:f9:9e:9d:62:
74:52:3b:ca:52:ad:e0:2f:73:67:9b:dc:18:35:eb:
fe:a2:bd:4c:de:5f:0a:5e:51:49:20:2c:5b:d7:af:
de:8f:23:cb:12:8c:ba:6d:14:86:0a:5d:18:cf:8a:
61:6e:38:8c:79:22:f1:f9:99:ee:11:12:94:64:10:
ef:76:88:35:66:e1:a3:43:68:a3:27:4e:d4:ce:2c:
b7:58:51:40:94:a9:d6:63:59:f7:84:00:20:17:a6:
0d:e1:54:d6:39:92:f3:98:96:46:43:11:d5:0a:fe:
7d:77:ce:b4:9c:7b:f3:a2:44:51:72:60:99:3d:84:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:C3:C4:8E:EA:19:F2:09:A6:39:B7:02:B7:83:D6:6B:3B:F8:A7
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3c:bd:95:9c:9f:da:5d:3b:89:6a:a0:4d:4d:a2:6f:2c:af:
fa:9c:0e:16:07:e8:ac:99:bd:ac:f8:72:3d:05:ee:f9:b5:10:
d3:f0:71:50:ba:65:a0:bc:ec:ad:4f:1b:71:6e:08:dd:fb:63:
7a:6b:6c:b9:89:44:72:0d:11:1e:f7:2e:29:90:04:ff:32:a1:
b1:c0:87:54:61:3a:57:a6:4d:0b:72:76:bb:ab:6a:24:f4:1a:
11:e3:ed:08:9b:f5:39:3f:18:52:41:98:ad:17:ba:fa:cf:d2:
c2:10:80:c9:1c:d2:5f:51:20:0e:0c:af:72:a3:58:7a:a9:cd:
f7:2f:6d:61:68:f2:ba:2a:7b:2a:29:49:7a:2b:da:ab:c0:7c:
3e:dd:88:e7:dc:b6:a1:31:92:5f:cc:15:1c:07:a5:d8:ba:b4:
f8:a2:6e:82:81:33:62:8d:a3:05:f4:ad:61:0e:a8:13:79:82:
da:5a:94:38:c8:b5:8c:c6:43:7a:7c:38:36:6b:b7:15:3a:f7:
14:d3:24:9c:e4:40:02:da:34:7d:71:43:cf:35:b7:f7:fd:7e:
ec:b3:99:03:fc:b3:63:33:b7:5e:4b:3e:fe:85:71:59:28:1a:
e8:92:9f:9c:2d:0e:2b:82:da:c0:94:29:3f:33:ea:0a:ba:11:
1b:15:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:56 2025 by rpki-client