Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: EqMmehZAR8x6yKh3IWXG6AQ4tjbf/8g49HljFj6dgrg=
Subject key identifier: DB:68:85:8B:40:72:C0:3D:B1:74:8E:B9:CE:AD:2D:AF:98:B9:B8:9C
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 0197B70E9AEB870110A1500F69668ACFA56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: 79Gk5Lb52uRJcqSCeBj6FZn7jwBNtgbV2O2NYvyctoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9a:eb:87:01:10:a1:50:0f:69:66:8a:cf:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=db68858b4072c03db1748eb9cead2daf98b9b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:6b:bd:30:15:3c:37:53:c7:68:9c:8f:a6:
20:b3:2f:fb:81:bd:94:f1:8e:56:75:60:f0:a2:35:
1a:4f:ee:44:e0:21:c9:cf:dd:e6:d6:8d:7a:17:45:
19:7b:e5:15:02:9f:e7:a6:40:5d:3f:24:6d:19:96:
8c:bb:ea:02:3b:08:ed:24:a3:01:03:64:38:86:76:
82:26:78:57:79:7d:cb:98:ae:6f:be:a4:4f:02:cb:
ee:26:3d:8c:66:c8:4f:b2:91:1b:db:d0:56:dd:90:
a1:bf:7e:d9:7a:e5:b2:ba:c6:91:52:e0:78:47:20:
f3:44:eb:17:ea:63:40:56:65:9e:5c:02:f2:7e:46:
5f:da:4c:59:53:d2:e8:46:4b:6f:e5:66:a5:66:0e:
6b:6b:bb:07:d6:93:fb:1c:4b:a5:12:96:ad:c6:e0:
7d:a7:18:24:25:80:8d:55:d7:cd:cc:a2:55:d8:8a:
fd:83:8f:fb:b9:f5:08:d6:89:a2:57:c2:10:a8:bb:
7d:de:d5:3f:a1:7f:de:1c:a0:e6:78:ac:bb:36:56:
6c:c4:b5:06:2c:c4:a9:72:eb:ad:b6:80:e8:9a:53:
9a:9a:cd:7c:99:86:d1:da:e1:81:48:76:f3:4c:36:
73:e9:10:79:cc:2d:c6:4b:52:64:57:77:f8:7c:73:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:85:8B:40:72:C0:3D:B1:74:8E:B9:CE:AD:2D:AF:98:B9:B8:9C
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:3c:7a:04:f3:f8:83:66:73:5f:81:00:5c:07:56:4a:54:
ad:47:e0:a0:40:88:99:1c:02:dd:25:dd:26:13:dd:57:98:c9:
c0:bf:ce:bc:4c:32:ac:aa:ea:89:7e:0f:bf:4d:73:8e:36:67:
81:45:a3:2e:da:7b:9b:59:69:42:45:04:00:59:3c:4e:cd:b5:
9f:9b:8f:aa:9e:ec:9e:ae:83:d4:cb:0f:a3:c8:c4:05:f3:da:
d0:6d:7e:46:c1:cb:9b:bf:c2:2a:67:7f:16:da:d6:9c:34:77:
52:2d:38:40:6b:22:87:15:1c:89:de:be:7d:48:9d:f1:07:66:
58:5f:0e:5c:21:6c:d7:a6:1f:45:40:e8:4a:c6:ce:f2:e3:9b:
0b:73:f0:9b:f3:ba:3e:a1:c7:90:91:32:d1:34:7f:a4:eb:30:
48:a4:ac:f8:a1:71:01:40:52:c5:90:b1:1b:ed:a8:5c:75:c3:
0a:00:ad:9f:a9:ab:10:bb:1c:f1:43:4a:88:29:37:33:01:53:
62:f8:0c:f5:77:61:4d:37:a8:7a:72:58:53:38:60:8a:ab:05:
f5:90:5b:b5:8f:6c:dc:eb:c7:be:3e:45:f1:89:89:ae:cb:cf:
0a:27:51:2f:fe:e5:18:ef:dd:6e:aa:99:de:6a:35:6a:20:8c:
b0:8e:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:08 2025 by rpki-client