Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
File: 6vl4jJlRMNcOrEbAayJmctJdQYU.mft (raw, json)
Hash identifier: UgzY7kJUP8ioW/F3VMKXL33XfUt/WUk2cIRUuQl3CdY=
Subject key identifier: 98:8B:7E:F7:58:B9:2C:D3:45:6B:FB:CD:6C:A7:B0:4A:8E:51:B0:52
Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
Certificate issuer: /CN=eaf9788c995130d70eac46c06b226672d25d4185
Certificate serial: 0197B6A1868D478F5F0BB56C9E6FBF9F4D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
Manifest number: 0AFC
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: 6vl4jJlRMNcOrEbAayJmctJdQYU.crl (hash: obwZZzvw017N6QmNDzxXFdS3t9mej/zm8/+lfGqMqrI=)
2: CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa (hash: fqcNc1mJfaykXu7IOGpmWN0xqLSHMqYySIqnsZGy/CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:86:8d:47:8f:5f:0b:b5:6c:9e:6f:bf:9f:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=988b7ef758b92cd3456bfbcd6ca7b04a8e51b052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:ed:b7:ea:5c:16:77:ee:ee:e7:70:ca:8e:
04:cd:b4:2f:d7:ea:7e:9f:c9:94:29:27:ac:a1:b5:
ab:e6:54:d0:3d:e4:5c:07:6d:52:b5:e9:4f:b0:71:
bc:78:a0:d3:f7:50:33:9e:b6:0c:b1:c5:61:85:5b:
37:42:da:b8:be:e2:05:f7:a5:78:fb:15:2a:6c:24:
1a:bc:81:38:b5:a1:44:8a:9a:10:90:55:12:6d:74:
44:80:76:33:33:38:bf:e5:c4:1b:03:06:ed:54:85:
0e:5f:d4:54:79:3b:82:2b:18:a1:f6:b3:94:e5:55:
b3:36:a1:7e:85:b2:6d:95:36:e2:aa:d1:65:f4:a1:
c9:ec:a5:20:65:08:de:ec:ca:e9:67:a6:94:3e:fc:
33:c3:b0:a2:1e:4c:a1:8a:94:bb:88:1d:e6:58:cd:
9a:de:8b:51:fa:14:f6:65:59:80:78:2d:21:ea:d2:
08:22:e9:ca:81:89:4e:3a:e1:08:17:e3:e1:b9:af:
c1:d6:7c:f9:e7:e9:ba:40:6f:e1:1c:15:f7:76:8d:
16:a6:2b:e5:dc:25:90:18:f4:70:e5:08:f2:ca:28:
2a:32:fb:48:05:9e:40:d6:00:18:d4:65:e7:c8:37:
98:98:56:43:43:4e:25:a0:3a:d1:97:b4:ae:86:8c:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:7E:F7:58:B9:2C:D3:45:6B:FB:CD:6C:A7:B0:4A:8E:51:B0:52
X509v3 Authority Key Identifier:
keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:80:b9:56:b4:a0:25:4a:28:ce:e8:58:32:fc:c3:6a:04:
22:c4:f2:f2:90:04:f6:f0:d1:1b:fd:b2:1d:09:41:95:fe:38:
7c:71:9a:50:05:20:08:c3:c8:37:a2:b6:43:33:8d:68:d2:d6:
2d:7a:ca:9b:ac:ff:2c:cd:c1:7e:13:93:f6:a9:d7:af:7f:80:
56:db:ec:d7:f2:13:46:f2:ef:46:cb:e1:a0:62:c4:8a:1d:3b:
11:b9:2b:dd:e8:e6:79:49:70:1e:b7:fc:08:1d:ea:09:5f:3f:
e1:97:d0:91:56:12:a5:69:d7:30:48:ef:fb:e1:c4:9e:07:54:
79:fc:88:ae:8b:52:e5:8b:54:d9:e9:ee:18:79:d7:c1:1f:93:
e8:dc:8c:26:ac:34:61:38:c0:0e:69:c3:c8:78:c5:5f:2e:e9:
4f:f6:19:dc:59:a2:2b:69:41:10:9b:c6:14:72:b8:9a:85:05:
b5:2b:8e:a8:4e:09:13:98:e8:55:ea:e1:d6:cb:7c:c7:0b:32:
d6:3d:a3:62:15:17:97:7e:b9:64:a8:50:0f:fd:d1:f9:84:47:
fb:43:62:a5:22:8a:db:91:d0:fd:c3:dd:0b:9f:f5:c9:cc:b9:
a6:c6:88:9d:43:13:ef:1b:22:38:53:bd:b5:e2:93:64:4b:9f:
a9:7f:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:54 2025 by rpki-client