Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: r7ADn/rklvelCvFM19qS2db1dy+lf1sbiZXl5TxCSBA=
Subject key identifier: DF:A6:D4:48:EB:90:7F:5D:FF:F8:B5:BD:23:DE:10:9E:6A:B6:DE:FE
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 01976EF5319D40EBF5DF2BADE9C0ABCDD052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 14A2
Signing time: Sat 14 Jun 2025 15:00:52 +0000
Manifest this update: Sat 14 Jun 2025 15:00:52 +0000
Manifest next update: Sun 15 Jun 2025 15:00:52 +0000
Files and hashes: 1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: WsK1CJg3GBJMDkIN3vxezrLwCKjSSwKAqMe/Kejke1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:31:9d:40:eb:f5:df:2b:ad:e9:c0:ab:cd:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jun 14 15:00:52 2025 GMT
Not After : Jun 15 15:00:52 2025 GMT
Subject: CN=dfa6d448eb907f5dfff8b5bd23de109e6ab6defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:53:ae:06:bf:44:a8:4c:89:0e:d8:29:a8:
4c:49:29:91:5d:02:82:16:dd:12:29:a5:1d:f6:a0:
ae:86:2c:b3:49:3d:06:dd:ab:4d:dd:2c:3b:e1:39:
48:27:db:9f:d3:3a:f0:47:81:bc:6b:ba:d3:12:bb:
67:1b:0c:11:c0:32:85:f0:c6:06:e8:c2:9b:1c:86:
7d:a2:aa:ec:f6:ff:3d:10:d4:83:09:73:43:3d:4a:
70:5f:a8:ea:fe:28:17:b4:08:10:08:26:63:2c:76:
83:f6:37:10:40:d8:1e:e1:96:f5:9b:8c:8d:54:49:
41:96:ab:75:5a:52:3f:d8:71:60:0f:e5:6e:1c:60:
69:0d:7c:8f:a0:dd:84:7a:0d:d4:5a:df:d6:9b:a6:
f6:fc:ad:c8:0d:39:d0:6b:39:26:4d:41:bf:d2:35:
a5:79:88:f8:f8:9b:d7:62:1a:82:40:3e:50:5c:8e:
9c:36:a8:81:0c:48:dc:48:9b:33:87:cc:68:38:f0:
96:87:9c:35:91:a2:6f:72:1f:04:00:e8:d9:1f:9a:
56:f3:07:28:76:cb:98:0f:d3:7a:9d:76:bd:f0:41:
05:e4:cd:ce:db:ec:7b:64:07:ef:9c:a2:3d:76:87:
9c:b7:63:c1:cc:47:95:49:78:0c:ca:77:76:e8:f0:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:D4:48:EB:90:7F:5D:FF:F8:B5:BD:23:DE:10:9E:6A:B6:DE:FE
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:6e:f3:eb:45:76:47:6a:1f:db:e2:87:88:34:90:71:ff:
19:b7:60:bd:12:cd:f6:43:f5:85:c2:a0:d3:d2:98:b5:5b:c2:
96:18:96:d2:75:c0:dc:12:df:de:71:a1:b8:61:1d:63:5a:a4:
b1:e5:a4:26:da:3b:a7:ff:0a:a3:c7:83:56:a7:13:0c:72:79:
65:04:93:f3:5e:46:c3:0c:7d:e8:08:72:4e:95:ac:b6:a3:b8:
63:7c:db:c4:be:80:22:71:ff:33:63:68:40:56:58:54:d3:a6:
53:65:56:4c:3f:6d:b3:9b:b6:00:46:56:24:9f:e6:a6:c2:70:
ae:2e:cd:fe:0a:26:3f:f5:27:2d:7f:d6:58:58:d3:31:12:9b:
c5:2a:7e:16:ce:eb:1d:3c:db:e4:17:09:f7:2d:c5:b0:54:95:
aa:2e:19:52:43:14:e0:54:64:fb:c3:21:9c:a8:db:f0:57:6b:
3b:98:b4:93:da:03:ec:f1:c4:f9:23:f3:d3:86:22:d1:ce:0a:
7d:c9:7b:71:fc:1a:01:cb:b1:cc:40:da:e0:5a:6e:69:ee:67:
88:9b:f9:14:8a:c1:d7:38:92:1b:09:de:ee:1a:da:b9:13:a6:
79:bd:51:08:f6:17:bc:8c:fd:5c:29:76:ed:e7:84:ef:d2:5a:
32:f4:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:00 2025 by rpki-client