Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: ByT9cJkGdNmqnQV0XCqnIBxJ+kswGCpNN0sRtYrRDEg=
Subject key identifier: BB:40:56:C1:98:85:FB:2A:C4:DD:50:59:56:04:F6:57:13:73:B5:F8
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 0197CACC96DE61B2FA19A5C88D62130A1CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 0508
Signing time: Wed 02 Jul 2025 11:01:34 +0000
Manifest this update: Wed 02 Jul 2025 11:01:34 +0000
Manifest next update: Thu 03 Jul 2025 11:01:34 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: tdevvEk+s3uoGtTBoU/wA6PIkQVGWZamDK9CbrpiIS4=)
2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:96:de:61:b2:fa:19:a5:c8:8d:62:13:0a:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Jul 2 11:01:34 2025 GMT
Not After : Jul 3 11:01:34 2025 GMT
Subject: CN=bb4056c19885fb2ac4dd50595604f6571373b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:07:6f:31:74:b3:a4:58:22:6b:ce:1b:b3:
33:15:4c:6a:55:81:aa:71:1c:4e:de:75:c8:35:c0:
87:da:c1:db:5c:74:8a:0a:1c:07:87:11:a7:0a:29:
44:b7:fb:fd:45:0b:1c:57:ba:79:fd:6a:4d:d7:de:
c5:21:9c:67:55:42:60:ef:29:4c:2e:a7:9d:33:29:
b4:0f:08:3e:03:36:41:c3:0a:76:e0:d1:cb:1d:a1:
01:2f:65:b0:2b:d4:99:a6:95:b1:83:23:b3:bd:e1:
60:99:48:28:0d:ba:74:05:a6:8c:7c:03:6a:6c:dc:
7f:98:29:e8:aa:43:2c:1c:0a:26:d2:58:55:87:c5:
3a:7f:1d:df:e2:ae:58:14:22:14:3f:bd:bc:4a:c2:
a3:8d:50:57:26:20:17:46:6e:61:31:5b:e8:db:42:
9f:62:23:73:15:54:c6:97:4c:ab:84:ed:47:fd:0f:
31:7a:a0:80:38:8a:9e:5f:bf:f9:ed:b9:6e:d4:d9:
69:b0:7a:98:72:44:20:69:f2:e1:e6:78:6c:54:d9:
81:eb:f7:d7:ba:f0:61:1b:83:75:e3:d5:f7:13:7e:
1c:94:3f:11:5e:75:cc:8c:f4:7c:44:48:c5:dc:35:
a7:b7:4b:ca:99:b4:ed:a8:6e:68:4f:4b:72:41:0b:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:56:C1:98:85:FB:2A:C4:DD:50:59:56:04:F6:57:13:73:B5:F8
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:76:a9:6c:e7:b9:fe:8d:9a:72:dd:fc:76:40:5b:3e:5e:
f2:0c:e8:d7:0d:e3:c6:82:5b:61:3f:a0:e9:1f:a5:20:a8:3f:
97:de:45:00:f8:81:f9:f9:88:85:e6:97:11:bd:e9:07:7e:9f:
26:e8:09:ea:38:4b:51:42:29:67:50:d9:4f:8b:eb:7d:c3:15:
c6:45:62:8b:58:e5:e9:41:c1:da:c7:d7:ca:49:3c:cc:16:60:
cb:40:b3:59:31:5f:17:b9:c5:b5:a0:a8:d0:c6:ff:59:bc:90:
07:29:24:58:c9:e9:cb:d2:52:30:85:60:86:ff:d1:bb:8c:14:
23:da:51:7f:f2:20:b2:a7:e5:3a:88:50:48:60:72:3f:a9:b6:
62:f0:35:4c:23:74:5a:01:fb:13:bd:81:89:68:0e:c1:17:6c:
34:df:d0:13:fb:fc:a0:95:2d:eb:ec:89:ea:d2:d6:6d:1a:bd:
4f:c8:40:f7:4c:43:86:2f:6f:e9:bb:30:8c:71:6e:f8:c8:18:
f5:78:74:3c:11:6c:93:57:8e:d8:1c:a4:a9:0e:e7:c7:4b:f0:
b3:35:58:94:24:91:69:96:d0:55:f1:5a:9d:4f:91:81:17:98:
55:7a:72:29:ce:18:f9:84:fe:dd:c0:56:8b:45:ec:33:07:e1:
45:72:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:13 2025 by rpki-client