Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: CWT7EA+v3RHnBhXNLseerGJ6uSTwoTYQWcM3fXeJmy0=
Subject key identifier: 3A:1E:92:BD:EC:21:49:AA:DE:AF:36:22:D6:04:7F:CB:4E:5A:20:77
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019786FD32765B67EFA8CECF0E174D31988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 07:00:29 +0000
Manifest this update: Thu 19 Jun 2025 07:00:29 +0000
Manifest next update: Fri 20 Jun 2025 07:00:29 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: QH8s8IEnlYsmCGn+bqTddLIImnJAC5z6SHS5pb1QUIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:32:76:5b:67:ef:a8:ce:cf:0e:17:4d:31:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jun 19 07:00:29 2025 GMT
Not After : Jun 20 07:00:29 2025 GMT
Subject: CN=3a1e92bdec2149aadeaf3622d6047fcb4e5a2077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:97:86:be:0e:de:da:c3:bf:94:a5:10:a2:
e4:72:6f:fa:de:c0:2d:91:5c:d6:bc:b4:fd:d7:34:
f9:68:e1:08:d7:13:26:b3:cf:1d:5c:be:8f:92:57:
a2:6a:89:f6:bb:f9:74:21:0c:ac:f5:ba:10:40:1c:
d7:4c:19:5c:f6:12:ef:5e:ec:6a:66:fe:7f:38:65:
00:26:f9:4d:c9:0d:11:c4:73:3c:f6:2b:81:2d:8e:
6b:d2:27:20:c9:53:96:36:e3:55:8c:39:5e:e3:a7:
37:ae:d3:65:05:4d:cc:cd:01:6f:7d:8e:63:01:b9:
40:f9:80:e7:09:5b:42:e4:61:cc:86:48:d8:5f:1e:
c1:d0:19:61:94:83:f0:44:ce:a4:a7:9b:de:38:41:
a8:77:cf:65:a1:ec:28:02:cc:e9:df:b9:0b:f3:d0:
3b:3c:15:5d:31:50:e3:92:4c:f1:d3:39:af:43:43:
1e:52:bd:90:d9:31:53:9a:5a:5e:de:42:7e:07:cb:
28:de:2f:86:f2:d7:f2:32:37:a1:fa:bd:88:46:39:
a1:55:f2:c9:d2:93:62:f4:6e:6c:cd:c4:67:90:61:
13:ea:66:2b:57:9b:f9:8a:44:93:e8:20:35:9b:1c:
41:8c:84:f7:5a:fe:41:78:0f:08:c4:dc:19:ef:db:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:92:BD:EC:21:49:AA:DE:AF:36:22:D6:04:7F:CB:4E:5A:20:77
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4c:4a:38:a3:da:58:e9:51:6a:48:98:37:9f:fe:f4:95:6d:
ff:22:97:97:05:5e:f9:bc:2e:bb:f1:ee:3b:f6:47:ef:11:a2:
f9:f6:e7:04:f7:7b:d1:de:2a:8a:dd:29:6b:dc:53:ce:ba:95:
4e:8d:c1:ec:f5:4b:df:82:9e:6c:c8:20:ad:c0:8b:6a:1b:34:
82:be:2c:eb:4e:3d:23:cb:8f:1b:bb:27:06:6f:f8:32:6f:d2:
b8:9d:c0:83:3b:67:40:9e:f0:0b:cd:83:97:8c:8c:cb:71:45:
70:37:6b:e5:cc:1f:5a:4d:16:bb:8c:75:31:1b:e0:2b:b9:28:
6c:38:56:96:d4:5f:83:4f:d7:7d:0a:e8:1f:55:3a:0f:3f:2e:
ca:59:fa:85:52:52:95:58:f1:58:cf:00:ba:88:f6:80:ed:b1:
d2:b5:f0:7d:f6:13:57:bc:35:06:3f:d8:e5:b9:14:65:30:cb:
f3:5c:f0:ac:1f:d8:0a:98:cb:26:7f:01:e2:2c:87:8a:04:23:
27:ec:89:b3:5c:9c:f7:22:cd:27:45:38:38:b3:26:c0:bb:6e:
f2:61:aa:45:3d:50:20:ca:d8:4e:25:33:d8:56:6c:cb:2d:7f:
31:4c:77:8e:57:99:e1:43:11:de:15:8c:a9:38:73:f8:0e:3c:
fc:45:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:47:53 2025 by rpki-client