Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: jy8c/IsNUOVMW5Yqsw5aGaG/6bF3Uwrfxo30TiioUic=
Subject key identifier: 53:E6:23:CD:79:9A:87:1B:9D:AB:99:31:26:21:B7:60:2B:7D:C3:F6
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 0197B6A064894947CE1CE74518F6F63103C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: 33
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: kpSFA8WQO4B2SpvwO01fz0rhm5G7ks3Uvo+3/6nZ6JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:64:89:49:47:ce:1c:e7:45:18:f6:f6:31:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=53e623cd799a871b9dab99312621b7602b7dc3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:90:f1:02:ba:39:72:b2:4b:09:d3:ea:43:
0d:db:7f:1d:b6:04:24:f7:c4:ab:17:99:63:43:63:
49:7e:5a:5b:ca:d0:22:c9:7f:60:a1:91:31:74:af:
a5:85:c8:ad:63:20:52:2a:00:50:af:92:dc:28:95:
84:b9:f0:5d:92:8a:30:89:a9:76:d6:36:cc:38:dd:
d6:f8:17:dd:4b:da:96:88:18:d4:f5:e9:c1:4c:5a:
97:df:b0:13:e7:d5:d4:a3:a4:fd:e8:08:f1:f7:80:
82:b9:be:6f:e9:8a:f2:89:87:7c:ea:a3:82:8f:a1:
10:05:e4:9d:a4:fa:54:f0:68:94:09:dc:90:e1:1f:
f5:39:f2:d3:60:6e:ef:5a:71:92:3a:dc:1a:af:a0:
ab:e1:db:14:dc:a5:ce:e4:1d:47:34:7b:43:ea:1f:
af:d4:a4:e8:51:e8:a7:51:5d:75:ff:44:7a:4e:02:
aa:42:5d:9d:fb:52:3a:ab:d6:f1:fe:f5:60:7f:a9:
fc:3a:e6:bf:93:10:21:0e:37:96:7c:1f:41:39:8b:
ad:00:c1:a5:0e:e5:47:74:8c:24:0a:fa:90:b8:bd:
b8:d9:e9:48:c4:e1:a2:85:2d:47:60:7f:0f:3e:56:
c3:b2:eb:44:c6:51:fb:b8:df:50:89:ad:a7:f1:0d:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:23:CD:79:9A:87:1B:9D:AB:99:31:26:21:B7:60:2B:7D:C3:F6
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:91:ca:c3:24:9a:de:98:3c:b8:03:b4:4b:12:7c:4a:55:
7a:15:b2:2c:02:f8:2c:d0:cf:f9:bc:b0:c7:52:44:21:9c:bb:
2c:6f:36:dd:c4:f2:49:b3:50:3b:f4:32:1d:68:dc:ae:0b:dc:
47:45:2c:26:0c:e9:09:6e:8b:f8:a8:eb:ab:54:ee:35:ba:e6:
a9:ab:b6:5b:01:5f:d6:89:ed:10:d1:09:16:c3:5f:af:9d:ef:
c9:2e:d3:ab:29:ee:a9:bc:0e:42:62:94:bd:ff:17:c4:21:4d:
ce:f1:9f:d5:50:9c:08:7f:94:6e:52:e7:c5:5d:8d:e1:5b:58:
dd:46:ec:d3:54:6e:26:2f:e4:92:d8:e3:1c:ee:d0:7c:21:a1:
c0:e3:4f:7d:d0:86:0a:14:78:c5:e7:66:75:65:5d:23:df:df:
6f:d3:e2:98:76:11:7c:3c:b1:d0:ca:e8:aa:2a:a3:0d:8b:cc:
e2:5a:94:18:88:c1:a9:48:52:eb:f6:85:c8:cd:f9:0c:a1:2d:
16:45:db:7f:be:9c:3c:18:bc:23:28:df:57:21:5e:1e:4c:5b:
40:0c:f1:55:0d:a8:fa:00:ca:f8:5c:db:a7:c3:a7:6e:90:a1:
98:6d:9b:1b:d3:76:97:03:9e:d3:09:5e:88:bb:f2:80:db:5f:
1f:a8:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:23 2025 by rpki-client