
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File: sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier: R5OdP30ghJge2WLKB8VDByE00uY5db9erxpmOBlK7yg=
Subject key identifier: C6:60:8F:D9:4F:01:3A:B4:A6:DA:A4:6A:E6:99:B9:92:64:C8:59:B5
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer: /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial: 01976997B4309D75CCA4031A64F02DF8352B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number: 020F
Signing time: Fri 13 Jun 2025 14:00:38 +0000
Manifest this update: Fri 13 Jun 2025 14:00:38 +0000
Manifest next update: Sat 14 Jun 2025 14:00:38 +0000
Files and hashes: 1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: 0Rra1QE3yAAUuTQ0+eBG75GwUghCvKEyE2LD/nDcIWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:b4:30:9d:75:cc:a4:03:1a:64:f0:2d:f8:35:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Validity
Not Before: Jun 13 14:00:38 2025 GMT
Not After : Jun 14 14:00:38 2025 GMT
Subject: CN=c6608fd94f013ab4a6daa46ae699b99264c859b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:dd:e7:c0:ce:42:40:4e:8d:fe:ba:1d:66:
df:7a:10:ee:0b:8a:58:69:8e:0e:df:4a:cd:b5:56:
c5:0f:be:03:43:a5:6c:77:4e:6d:3f:04:a5:64:4b:
50:56:6b:2d:83:89:ad:85:69:76:c8:57:55:2f:ab:
b7:56:5e:9d:34:b8:b8:46:13:8a:d4:e9:d0:88:4a:
e9:4c:fe:71:7f:e4:55:46:fe:b5:08:9c:00:47:74:
f0:d0:9d:fa:d3:ef:36:69:80:9e:5f:4e:8d:29:39:
9d:fc:48:4d:23:33:93:22:a4:8f:ab:65:2a:70:5a:
52:43:9f:5d:e9:f6:fc:ab:a5:82:bf:e0:02:ef:d1:
4e:46:9e:c1:c9:bc:67:5a:99:f2:e2:ed:ac:70:0a:
86:ec:56:8e:45:ee:82:68:4f:d2:2c:c8:11:5b:28:
c3:c5:32:88:22:00:da:98:fe:77:2f:a9:3f:5b:10:
de:fe:f7:ec:bc:d1:0b:93:e6:8d:56:89:92:5c:32:
70:f8:36:a8:b3:9d:a6:27:3f:46:e0:b5:cb:05:3f:
54:71:cf:fe:19:3d:b8:2f:c0:b6:09:a7:09:3c:1c:
6a:cc:67:40:bd:d1:fa:4c:82:cd:e4:3b:be:2a:70:
54:0d:ee:de:9d:1c:e0:4f:a9:2c:0c:68:63:72:11:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:8F:D9:4F:01:3A:B4:A6:DA:A4:6A:E6:99:B9:92:64:C8:59:B5
X509v3 Authority Key Identifier:
keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:40:af:e3:d9:50:16:5c:7c:82:8b:28:68:5d:85:20:06:
f6:05:02:a6:b0:f4:d0:40:1c:00:e8:7d:df:a3:66:be:43:ba:
b9:eb:c7:bb:f2:d3:1e:df:8b:cd:d5:a1:e3:6d:14:07:91:50:
8c:6d:27:07:5b:e5:9a:12:95:69:c9:d4:4b:3d:22:a6:ec:9c:
ef:41:2a:a2:82:fd:7c:fa:99:b0:6b:52:a1:49:19:de:e9:91:
ae:66:21:28:95:0c:84:29:90:0e:b9:7d:7c:78:4d:0f:71:86:
8d:00:20:20:72:02:f2:d3:bc:8e:57:56:10:22:7d:df:ee:85:
bd:05:2c:7d:d1:a8:75:9b:de:37:84:f0:6f:01:e2:43:fb:02:
2b:46:df:dd:39:3d:cd:4c:16:f2:e9:bc:95:f2:85:62:13:85:
20:b6:ae:c2:21:f8:43:e7:cb:fe:07:93:91:88:14:56:ac:27:
8e:70:c1:66:9f:d2:13:cb:5c:d2:87:54:d7:7e:b9:55:75:c8:
c3:7e:d9:c8:1e:05:db:2d:50:67:7f:94:89:47:cc:20:61:2a:
39:80:a8:4c:c3:37:26:59:af:63:c6:6f:c3:e7:3e:87:d9:03:
c4:cb:d3:e9:0d:75:2e:88:7d:d4:e3:8f:8a:fb:f5:9e:7f:90:
53:67:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client