Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: /Yir3D+VwCc4hQDbllVcdLQTogaZowrvqFOfNQqMe5s=
Subject key identifier: 3F:45:D4:0F:87:05:60:3A:0D:06:84:90:7F:92:7F:0C:8A:5E:D0:F8
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01988EEC7A2014EF4A944141F5AD8B1D1709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1371
Signing time: Sat 09 Aug 2025 13:01:59 +0000
Manifest this update: Sat 09 Aug 2025 13:01:59 +0000
Manifest next update: Sun 10 Aug 2025 13:01:59 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: aWyJWdaJzD7Sudt0nCm8c4mvQl+JLDeUd2qdVWSmPh0=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:7a:20:14:ef:4a:94:41:41:f5:ad:8b:1d:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Aug 9 13:01:59 2025 GMT
Not After : Aug 10 13:01:59 2025 GMT
Subject: CN=3f45d40f8705603a0d0684907f927f0c8a5ed0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:4c:2b:cb:1e:23:5f:10:1c:12:e7:6e:97:
7f:b6:38:3d:9d:87:18:84:6d:c0:1b:74:9c:83:3e:
59:aa:89:9f:90:c7:48:93:d5:24:25:4f:65:6a:d7:
8b:ea:c0:e1:b5:26:56:aa:fc:91:df:d4:9c:d1:e9:
68:23:f3:d8:4c:aa:e9:70:2f:68:c1:9f:ad:56:be:
00:4b:55:77:77:fc:69:54:08:1d:9e:2a:8e:a0:34:
66:a8:5d:2a:82:29:a0:2a:8d:6c:16:d1:94:4e:9a:
10:95:4d:e1:78:92:36:b8:47:91:90:82:d0:58:25:
99:6b:6e:5c:9d:c3:c3:f8:08:81:e6:aa:7a:60:12:
b8:ea:84:b6:45:ba:ec:4a:77:6d:29:4a:67:3a:6f:
91:3f:a7:35:e4:69:a9:b0:47:94:37:cc:0d:40:ae:
f1:b5:22:ae:6b:f8:ee:38:18:ab:78:54:fe:20:b1:
a1:4c:ed:e0:10:60:22:7b:2a:dd:e7:cc:96:3c:c9:
f7:30:d5:6e:64:31:81:9f:86:a9:95:80:e3:74:9c:
1a:d1:50:82:13:7a:2f:57:7f:3e:e6:ca:d1:ef:bc:
47:8c:3b:b2:df:c2:07:3d:fd:e1:9a:c3:a8:bc:cc:
cd:e1:96:6a:32:b2:ec:c8:2a:c5:ce:81:27:2b:b9:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:D4:0F:87:05:60:3A:0D:06:84:90:7F:92:7F:0C:8A:5E:D0:F8
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1f:5c:01:55:ae:d4:6a:86:24:31:f0:82:c2:1b:e7:54:61:
91:7e:92:7e:f7:b4:f0:e0:3c:08:1b:14:58:fd:20:8e:7a:6a:
b8:1e:69:30:ed:27:ec:fb:b8:1d:30:9e:9e:e0:e5:c8:ca:22:
20:f6:3f:3e:d0:3d:48:82:9f:20:0e:3f:92:31:64:54:b4:29:
15:f2:fa:6f:ae:be:45:16:d9:d2:98:03:a0:85:c6:da:64:da:
99:e6:cf:fc:d9:7a:0b:dc:b3:be:90:95:52:5e:4f:ff:c1:45:
0c:35:47:2b:08:0c:e9:79:fe:81:4c:77:8a:fc:4d:f3:86:98:
70:84:04:73:0d:14:4c:b3:5b:f8:80:94:47:d0:ec:6a:39:17:
c7:2c:73:21:72:b4:16:a3:98:78:0f:1e:64:7c:6e:18:86:a4:
f3:4b:39:7d:96:1c:1b:ea:ce:ab:22:57:d9:4c:13:8f:d9:79:
9a:d0:fa:34:75:c1:ce:90:f1:09:24:50:c5:86:4c:c0:99:1a:
92:8f:ec:9c:b9:9a:9b:b2:7d:10:6b:f0:a4:9d:cc:12:26:64:
d2:d0:ac:9b:b5:a0:31:8a:29:18:e6:40:b8:c7:09:96:bb:d3:
d8:40:61:29:f3:eb:a8:fb:bd:ae:73:61:bb:84:a6:16:98:dd:
16:af:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:47 2025 by rpki-client