Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: nAQJt6F+yXECS3z/hc06XuTFbuzFHezugRxZ/7oT0hw=
Subject key identifier: F0:13:FB:D0:E1:90:CC:20:9F:15:29:2C:FF:B3:41:1D:1C:D9:DE:81
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 01989600B17214E4A63DA00DB3D630EFC20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 22:01:24 +0000
Manifest this update: Sun 10 Aug 2025 22:01:24 +0000
Manifest next update: Mon 11 Aug 2025 22:01:24 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: Y4Lm5z0A4lHWz1cIw4scEjlbXl0EYamhPPedyz+48vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:b1:72:14:e4:a6:3d:a0:0d:b3:d6:30:ef:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Aug 10 22:01:24 2025 GMT
Not After : Aug 11 22:01:24 2025 GMT
Subject: CN=f013fbd0e190cc209f15292cffb3411d1cd9de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:90:44:5f:e6:4c:19:69:ee:fd:b9:b1:d9:
31:40:71:e1:01:08:6d:30:8c:d1:56:96:48:00:e5:
53:6b:39:a5:b1:64:23:f6:aa:55:6f:a6:cc:c6:60:
bb:62:9f:ff:32:3b:32:d8:f7:62:7a:93:20:0b:2e:
ef:be:b4:37:2b:72:d0:e3:e0:81:73:7f:15:c1:91:
f2:6d:87:50:ae:f8:7c:6c:b6:8d:65:92:a5:c7:b4:
10:25:a1:d7:34:80:38:84:0c:b7:60:10:5e:06:de:
da:0d:ce:fb:e2:56:db:20:8c:a6:43:2e:57:0a:d0:
73:45:75:b0:27:25:40:29:5e:54:48:90:ff:ac:d9:
5a:ee:98:96:c2:4b:3f:97:b3:9d:57:4a:89:ab:3d:
70:2d:58:97:4b:2f:f4:59:a2:b4:7e:31:18:37:c7:
7d:c0:6a:3c:43:f5:ca:c7:ae:b0:1c:73:33:71:04:
d5:4f:e4:72:e8:38:09:a2:78:64:cb:2d:e8:3f:44:
24:21:ab:95:87:25:ca:26:87:f7:32:d6:26:58:a3:
e4:37:c4:5f:c6:12:19:7e:00:49:d0:dc:5b:b0:13:
90:5e:bd:9c:e0:d9:17:e4:f5:fa:3c:30:e7:e4:b5:
44:69:9e:6f:d5:c3:b4:c5:ed:ac:6e:77:65:eb:16:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:FB:D0:E1:90:CC:20:9F:15:29:2C:FF:B3:41:1D:1C:D9:DE:81
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fc:2b:4e:da:8c:1b:66:8b:61:e5:30:7a:40:3b:23:1f:01:
b3:cd:0c:ea:2f:d9:bd:56:04:c8:80:e6:f7:b0:67:96:b6:18:
d8:6e:8c:dc:9c:8f:06:9c:49:57:89:8c:1b:a5:5f:b7:c4:4a:
ea:5a:f9:eb:a1:e4:82:3b:88:8b:8a:d3:04:94:48:42:67:c8:
d2:32:d1:f4:95:c9:df:fe:1c:1d:5f:9d:2f:8e:70:59:01:ca:
f9:b5:d4:1c:d6:1d:d7:5b:0d:d4:3a:7b:4b:ce:39:97:15:c4:
2c:c9:cb:91:87:8b:8c:97:ed:c4:16:e9:f9:98:58:e4:27:5a:
8f:c8:5d:ef:47:2d:6b:9e:3f:b3:e6:34:e0:5b:95:6d:8c:04:
df:d2:e2:11:7a:a8:f2:22:c8:45:27:83:d4:b1:20:96:7a:72:
61:58:b2:a6:46:05:04:a7:33:f1:34:5c:8a:7e:a8:63:a1:f0:
b8:ec:17:85:cb:15:5a:5d:c4:65:c7:b4:8d:21:87:7b:9b:a1:
ce:67:07:c4:1f:5d:0c:3a:05:14:3d:ec:13:76:f8:55:3c:bd:
9d:c4:a9:ff:02:bc:f0:c7:61:cc:db:7f:9c:cc:00:a7:80:5e:
01:eb:74:18:52:d3:3d:ed:5a:01:31:0a:40:ab:ad:15:c3:e2:
4b:79:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:18 2025 by rpki-client