Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: phTEK2BKpbyLZb23GCsBV3IDI3YlcTeFR6mt0X9hl9A=
Subject key identifier: D8:AD:2D:AE:09:9B:97:7E:C9:83:10:3F:3A:82:B0:46:FB:EE:C9:7E
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 0197C5382A5EE78F92706F8A96D844E7FEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0DBE
Signing time: Tue 01 Jul 2025 09:01:21 +0000
Manifest this update: Tue 01 Jul 2025 09:01:21 +0000
Manifest next update: Wed 02 Jul 2025 09:01:21 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: FxPTbCzmuDlo48ySpEtMUdlM3Rgk0j5PCkGxKFqnqnA=)
2: j4tHnGrI37J-Uw5Zk8yEN1rxtKo.roa (hash: esedRiMXohejdNKWmiW5x1YVWXeCqRdEj9LKCp9ppe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:2a:5e:e7:8f:92:70:6f:8a:96:d8:44:e7:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jul 1 09:01:21 2025 GMT
Not After : Jul 2 09:01:21 2025 GMT
Subject: CN=d8ad2dae099b977ec983103f3a82b046fbeec97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:ef:b6:50:46:8a:7a:dc:28:ed:5e:53:e9:
91:af:74:bb:cd:03:2d:a5:6e:b0:72:79:44:2f:a1:
42:55:5b:eb:72:63:4f:fd:1d:66:d2:b6:e7:4c:e6:
24:28:9d:e6:3c:76:83:c4:53:06:f1:cb:18:ee:60:
49:3a:cf:ff:07:a1:5b:8a:16:30:82:d6:16:e9:9a:
a4:80:50:52:9a:30:f0:b0:21:c8:b2:df:90:2a:ed:
37:69:03:08:5d:e8:5b:77:1f:79:f5:d5:94:d3:a1:
1d:ab:24:4d:db:79:7d:5d:fa:21:e1:5f:13:50:93:
56:fa:02:c4:a6:f6:24:3f:0a:02:0f:9f:3c:fd:93:
99:86:7b:2f:2b:f9:78:5b:53:b1:a1:46:f1:b0:9f:
15:25:5a:0f:98:2a:08:01:80:11:41:31:b5:82:4c:
22:db:e6:e9:99:49:eb:b4:5e:0a:d8:e9:f1:a4:98:
be:67:d0:bb:85:3c:0a:fe:3e:06:cd:58:88:85:6b:
9c:a9:17:0e:41:41:39:68:da:42:3a:82:96:13:31:
b2:e3:93:81:5b:e3:b0:90:12:70:98:3d:e0:a3:ea:
e2:c4:46:3c:77:f6:d3:01:f6:0a:9a:6a:9d:2d:20:
46:e1:3f:31:b1:d8:4d:2a:08:3c:9c:d0:b5:e7:de:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:2D:AE:09:9B:97:7E:C9:83:10:3F:3A:82:B0:46:FB:EE:C9:7E
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5d:2b:e1:8f:68:29:f8:07:d8:fc:d1:2e:1d:3b:38:a4:63:
33:7e:19:8a:5e:44:03:7d:cd:b5:a9:9b:f6:94:8d:d6:c3:e0:
eb:d1:a1:54:a3:87:15:32:28:51:4f:15:ba:bd:62:29:ab:52:
0e:37:0f:9e:1b:22:98:3c:75:76:39:53:11:78:69:de:af:a0:
dd:9b:92:fd:80:1c:ea:5e:12:20:5f:bc:f8:26:00:17:b4:9e:
0d:54:43:38:89:30:42:c1:8e:36:3a:b4:16:ca:a8:ab:9e:74:
55:8a:54:22:ef:06:08:b6:a6:cb:6f:26:39:01:06:2a:02:66:
ea:ff:b1:b3:17:7c:15:dd:02:df:b5:d9:44:77:47:5b:02:41:
a1:6c:bf:f6:28:d7:f8:9b:0a:f7:b8:a5:65:2f:fb:f7:f8:9d:
a6:8f:78:55:57:95:e3:f6:f8:40:cb:8b:46:89:0b:10:a7:93:
03:1a:c2:f6:5e:3f:5a:5e:fc:a0:18:16:51:1f:a3:07:05:23:
c6:c3:3a:1f:10:7a:c7:54:0b:db:e6:18:4f:01:27:ae:e3:32:
ac:e0:f0:ae:cc:82:ac:81:23:36:d2:16:51:eb:50:60:43:54:
c3:91:38:85:cc:ee:fb:4d:c5:3d:d9:cb:3f:74:7f:02:55:91:
00:d6:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:27:12 2025 by rpki-client