Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: wdzKCyOFs4MU0IJlEKmYeFXkSweJT0eXkt8q6E/Ln4g=
Subject key identifier: 8B:29:5A:2F:C1:2B:F0:97:67:F7:E1:F9:F7:D5:3B:79:79:A9:A1:7E
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 01978ADA11F2C829357D2ED74382869A0BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 0560
Signing time: Fri 20 Jun 2025 01:00:36 +0000
Manifest this update: Fri 20 Jun 2025 01:00:36 +0000
Manifest next update: Sat 21 Jun 2025 01:00:36 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 2Kiyg+YomNz5eHoqL8/BSP3Rr+1qmNrRlHyx2qtnVm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:da:11:f2:c8:29:35:7d:2e:d7:43:82:86:9a:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Jun 20 01:00:36 2025 GMT
Not After : Jun 21 01:00:36 2025 GMT
Subject: CN=8b295a2fc12bf09767f7e1f9f7d53b7979a9a17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:0d:27:5e:74:ff:36:bd:f9:43:57:fd:da:
06:42:7e:4d:57:9f:47:35:83:f5:16:66:67:03:a7:
51:3a:b8:76:cb:6d:6a:01:4c:5a:e1:c2:34:1a:41:
c6:aa:98:37:74:56:c0:91:3c:56:f3:b1:00:c6:1e:
f7:3e:c9:ee:81:d1:bf:f3:33:65:3f:66:5a:c4:c6:
f8:b7:b4:4f:75:82:09:49:29:c7:91:3c:14:93:aa:
1d:ed:ac:d2:08:61:b2:a0:c5:4e:bc:73:fd:a1:5c:
57:ea:6c:9f:33:75:a7:16:bf:f0:6a:ad:15:f9:0d:
c8:05:2e:16:2e:23:bd:e1:89:f6:d9:a8:69:62:1b:
e6:bd:c2:bc:70:2b:72:18:44:1f:ef:34:a6:a2:e6:
fa:8a:ee:77:37:3b:50:1a:98:91:ca:1e:50:f0:c8:
b4:79:15:0a:86:6d:54:0b:5b:75:b8:2b:ee:33:d0:
cb:3b:5a:bc:36:cc:e7:07:66:fc:0b:3e:c3:3c:60:
3a:15:0b:56:1d:25:6f:b5:61:0f:f6:a4:8d:1f:fc:
de:fd:6d:d8:50:fc:90:27:19:aa:3d:21:7f:1b:90:
d4:af:7a:a9:e2:67:74:2c:b6:1a:d8:ec:d9:b7:b5:
da:d5:ef:53:ae:2e:a1:89:47:8f:92:ab:d3:6c:c3:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:5A:2F:C1:2B:F0:97:67:F7:E1:F9:F7:D5:3B:79:79:A9:A1:7E
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c4:80:49:ac:71:6d:6e:07:e5:79:4d:2f:83:3b:9e:4e:4f:
fe:34:52:85:cf:aa:c7:56:0f:bf:21:e4:b3:fb:75:fc:fc:9e:
75:4c:f2:a0:7f:75:4c:0f:1f:ba:ef:8c:a2:2d:95:76:5e:5d:
66:e5:fa:65:7c:bd:f9:c9:dc:37:d5:a7:59:72:14:a8:f6:74:
7e:34:c7:a6:1c:ba:24:c2:f3:21:21:9b:12:da:5a:64:c4:b6:
8a:af:01:ca:75:62:93:7d:b1:b8:33:15:79:e4:02:5b:31:3f:
a3:c5:21:97:74:1e:ed:22:ba:84:67:16:88:84:f6:73:23:8a:
1b:da:50:d1:fc:6a:69:12:03:ea:7b:06:15:0c:25:6b:fa:ae:
3e:e5:1a:39:04:e9:a9:ff:a6:94:46:dd:21:39:1c:1c:8e:a1:
8a:dd:54:1c:a8:0d:21:34:d8:a4:2f:73:a2:eb:99:ea:89:9e:
bc:c3:d0:4a:27:3e:23:b0:3f:4d:94:c2:13:09:14:33:9e:4e:
cc:f8:5f:5f:ef:9a:cd:15:e2:47:e7:c8:9e:a2:3c:79:ab:50:
b0:ee:9f:ad:3f:04:25:d2:5f:c0:d1:a0:8f:78:7b:a8:26:62:
91:57:11:d4:fb:bf:55:ea:d0:da:ff:39:2c:54:91:80:93:b8:
bd:e8:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:14:53 2025 by rpki-client