Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: 8DDp9FMX4PpnB9kQe/7N0mSMjeoRsdladbFvExk31E4=
Subject key identifier: 13:DD:69:0B:96:80:A8:E9:BF:98:33:36:20:D3:8E:24:EC:26:C0:7D
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 0197B88FD8758BB943268F84B1DBF077A320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 08E8
Signing time: Sat 28 Jun 2025 22:02:04 +0000
Manifest this update: Sat 28 Jun 2025 22:02:04 +0000
Manifest next update: Sun 29 Jun 2025 22:02:04 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: +AbLESS14RYPlfp1Mk96nHCuWtGumMTm3zi0eQOpqEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d8:75:8b:b9:43:26:8f:84:b1:db:f0:77:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Jun 28 22:02:04 2025 GMT
Not After : Jun 29 22:02:04 2025 GMT
Subject: CN=13dd690b9680a8e9bf98333620d38e24ec26c07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:4a:f3:73:23:16:91:19:46:e4:8b:54:6a:
28:3e:da:69:2d:a9:2e:50:26:0b:ac:e2:f8:12:84:
65:f4:ef:c3:83:e4:da:ce:98:1b:a6:42:7b:60:70:
aa:3f:dc:42:d8:86:25:c2:9e:43:24:a9:32:64:cf:
02:55:32:d2:ae:f5:5c:b1:b1:84:ad:cf:2e:58:66:
f4:4b:33:2e:6a:6b:bc:eb:0b:04:19:a4:08:41:f8:
ae:f7:ae:1f:86:72:d5:46:98:84:23:36:77:b6:c5:
dd:ac:be:de:03:a0:7d:f2:20:97:d5:88:8d:fa:f0:
73:bb:8d:9a:cd:65:1f:c9:cb:5b:fa:65:ba:6f:a0:
1e:e8:3c:d2:71:e2:a1:16:17:73:d8:61:60:d0:aa:
cb:dd:3e:79:4e:e6:dc:87:18:b9:e0:9d:e7:df:a3:
6b:e7:0f:66:dc:b8:cf:7f:fa:e8:70:31:86:c3:85:
42:b2:af:5a:5a:2b:3d:68:2b:7e:94:4d:a4:46:13:
93:49:9e:98:b1:fe:a2:3d:12:5b:b2:dc:40:e0:d6:
2c:ae:f8:1d:79:c3:4c:0d:4e:4b:86:7a:90:69:e4:
96:3c:6e:1e:9e:41:2a:46:90:2f:42:47:91:22:b1:
08:ba:ea:9b:9a:b7:f5:1d:b0:13:51:e0:f2:20:47:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:69:0B:96:80:A8:E9:BF:98:33:36:20:D3:8E:24:EC:26:C0:7D
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6e:69:ca:08:2b:1d:ee:a7:b9:fd:97:6e:cd:b9:bc:cd:6d:
af:a0:fe:b0:c7:b1:51:56:70:b3:c1:09:8c:01:58:6b:68:1d:
63:6b:05:9f:db:38:75:c8:82:db:ed:3b:79:b9:db:e6:48:0a:
22:24:91:47:c3:c2:ed:c8:da:8b:25:09:a8:7d:26:5e:27:b2:
ae:a8:b1:4e:7d:f9:6f:a2:e4:c2:2c:ca:a2:91:ab:37:63:4c:
53:d5:0b:9a:a8:b4:b7:e1:50:e4:e1:57:87:14:a3:84:d3:93:
55:a7:f6:59:d1:7a:5f:e6:39:5d:ec:a6:c0:9e:dc:33:8a:76:
89:43:6b:8c:20:91:fa:27:0d:8c:dc:68:02:f0:00:85:3b:7f:
f0:80:6a:99:45:25:32:17:98:45:51:a1:2c:e1:a2:29:77:58:
0e:29:59:54:61:43:11:2f:ab:7b:55:0e:34:44:47:2c:7a:4b:
85:fd:97:42:21:18:d4:2a:8f:0f:3b:ef:ef:34:ea:4e:3c:56:
88:cf:cd:3c:e5:5c:af:8d:50:00:01:e2:19:16:d9:f2:49:9a:
83:0b:d9:dd:fa:3b:00:c3:bc:c5:9b:a7:64:9d:2a:6b:a4:3b:
07:8c:af:7f:f4:6b:23:3c:80:1f:93:2a:06:2a:e2:8f:76:ac:
f6:de:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:17:12 2025 by rpki-client