Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier: g6RvoD6/O0XAobNtaQLNKg4uzX0Iu0u9UAPtI6OWAhQ=
Subject key identifier: 33:AF:8D:54:F2:D3:45:A7:47:9E:06:51:16:74:D5:4B:75:B2:1B:1D
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 0197703E9D59ABEEFB479312F106A52A3A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number: 03E7
Signing time: Sat 14 Jun 2025 21:00:41 +0000
Manifest this update: Sat 14 Jun 2025 21:00:41 +0000
Manifest next update: Sun 15 Jun 2025 21:00:41 +0000
Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: nqbEjQTo0HoDHG4TBSjE4LiqJiwl5fVIcTrTEXthaSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:9d:59:ab:ee:fb:47:93:12:f1:06:a5:2a:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Jun 14 21:00:41 2025 GMT
Not After : Jun 15 21:00:41 2025 GMT
Subject: CN=33af8d54f2d345a7479e06511674d54b75b21b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:0a:92:c6:e6:1f:c8:06:0f:df:ba:3a:81:
57:80:c7:b6:1c:8a:1d:a0:2f:cf:73:f9:b7:49:aa:
fa:56:bc:ff:0e:49:29:54:3b:90:f9:85:30:66:df:
8f:81:00:5c:d4:9c:0a:f2:92:e1:06:d5:08:d7:67:
7d:53:c7:c1:7b:f3:2e:db:56:6b:d9:73:70:a3:5a:
be:93:24:a4:ca:0e:29:3f:81:25:14:5b:94:e3:5b:
16:6c:cc:f4:f0:02:eb:6c:f1:c3:60:11:38:ba:21:
e0:f1:21:a7:45:18:ac:0d:d1:6e:56:e5:cc:87:a0:
c7:16:50:0a:f5:ec:8d:08:8d:c6:bf:8a:21:62:67:
81:45:64:b5:b3:2f:4e:75:e3:42:28:89:4d:a0:96:
aa:de:8e:b5:9f:dd:bf:a3:b0:24:57:aa:54:57:1e:
d8:da:43:a3:c9:64:c3:e5:d7:b3:30:20:48:81:d6:
13:1d:e5:94:d4:5e:8c:95:ff:74:4e:63:41:c1:e6:
36:25:bd:ce:e7:05:86:8f:be:e5:05:81:75:8e:11:
c0:b8:a4:97:e7:bf:d2:e5:50:b8:17:23:08:f9:85:
bf:01:9b:03:08:bf:03:8e:db:32:f8:25:0f:a5:d1:
6b:2a:bd:4b:cc:ff:c1:9c:03:ff:f0:c6:b3:37:91:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:8D:54:F2:D3:45:A7:47:9E:06:51:16:74:D5:4B:75:B2:1B:1D
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:d7:7a:17:32:98:34:f5:76:88:47:6c:41:7f:c2:99:7c:
fa:27:88:d7:91:34:88:6a:03:30:d3:03:69:36:c5:b5:55:60:
13:93:5b:eb:73:7c:7f:72:79:08:35:6f:47:6e:80:38:96:30:
7c:ae:29:c2:ca:5e:04:55:6c:7d:b3:ac:7f:a1:a5:1b:ad:8b:
9d:57:1a:5d:df:c9:13:94:c0:cc:38:70:ea:1b:a4:c0:69:a4:
79:9f:db:75:70:1f:78:a0:a1:19:4e:5e:3d:cb:f5:d5:42:ce:
88:df:1e:70:ab:93:46:48:58:09:2f:6a:0c:83:35:fa:31:7d:
e3:58:5c:24:38:32:ee:98:fd:3b:73:d7:a3:25:85:b9:df:c7:
d9:a7:a2:eb:49:d5:10:7a:07:6d:22:68:3e:b8:0f:41:f2:0b:
a7:c8:8b:92:99:72:03:f8:a4:19:ee:37:1a:bb:b1:5f:ca:52:
d7:08:3d:55:60:42:0d:d4:11:07:b0:e5:b7:d2:05:4a:db:44:
21:df:49:ad:32:b0:9d:d4:b7:ad:e9:d3:83:c5:e0:8f:c6:e7:
2d:4f:35:a1:85:02:fd:42:3c:6d:b5:d6:84:d1:63:ad:54:7f:
f2:a8:d9:60:7e:1f:9d:91:41:ef:da:a4:f2:e3:3e:cb:97:1a:
18:6e:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:10 2025 by rpki-client