Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier: jGZVLR+glm4UOooNu41WAlvp3SU+g/MLuXUR8RW9lA4=
Subject key identifier: EB:B4:4B:CE:32:4D:DC:43:2E:04:B5:58:03:DB:98:EF:D5:7D:E9:B9
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 0197B77C641AE8CF1C4339684B9892DE57E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number: 0A07
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: uUfWfJEGYkfsMIMXBtC/02DJgkqLXA7j8nsH5qi1rcI=)
2: ah-NG29pky0jPHEcgeOL-kOfH0Q.roa (hash: zKBnGYN4489QuBEbUaXwtDobGG4YVTXSMpaIv+wNvKw=)
3: zFFyOssEtNl2ZptlNvn-iw3yuoM.roa (hash: wU/a9ptBrD+06JSBz0EUZiC1M21vno+RkNOOYDTpTyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:64:1a:e8:cf:1c:43:39:68:4b:98:92:de:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=ebb44bce324ddc432e04b55803db98efd57de9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:ec:d5:2f:dc:75:b9:59:85:63:43:57:9f:
58:cc:f9:ea:7a:a2:09:65:3b:47:44:2d:04:cd:3c:
b1:48:b9:c3:6a:c6:57:72:44:97:77:79:df:f3:2d:
5d:6c:0c:d2:37:d8:19:44:e1:ad:9c:45:37:ba:db:
b0:e3:ed:fa:a1:15:a7:09:dd:c5:d6:dc:c8:1b:cc:
90:c9:02:05:93:60:d3:dd:84:78:38:d7:79:3c:e2:
a8:24:25:df:75:05:fc:93:9a:11:c2:37:cf:04:c6:
2d:93:1e:26:ee:e0:cf:0a:3f:b3:4d:27:1a:a9:1f:
54:bc:24:7b:b4:89:f7:13:b4:d3:68:f2:f8:42:1a:
73:6b:03:98:8b:6f:b1:af:e4:12:48:27:29:0c:e6:
1d:8d:e2:b6:36:bf:83:4a:98:f3:e3:31:62:8f:c6:
06:92:e6:ee:2a:b6:2f:bd:e5:58:9a:fe:d9:cf:16:
52:47:55:a4:da:fc:01:4d:bd:75:78:a0:7f:9e:20:
e6:99:5b:ce:8e:65:7e:9d:2a:e7:3a:d7:bc:dc:94:
d8:b2:de:f3:9f:35:37:81:d3:3e:48:1c:6c:d2:35:
55:f3:d3:73:f1:7e:d1:05:35:44:20:54:64:84:e9:
cb:e3:5b:7a:70:9f:76:f6:97:68:57:cf:d3:23:e2:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:4B:CE:32:4D:DC:43:2E:04:B5:58:03:DB:98:EF:D5:7D:E9:B9
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3f:90:a2:0c:77:6f:b6:73:83:3c:a0:73:05:e6:b0:30:7e:
0d:4c:45:02:51:48:3f:e3:f1:ae:85:39:c7:5f:ac:15:6b:59:
d3:d7:bd:45:cc:4b:3d:08:da:a6:4a:20:c0:b5:74:0b:97:9d:
15:0e:96:fd:df:fb:50:ee:6f:a7:d1:08:74:a9:52:8d:de:bb:
18:86:1b:f1:a3:ff:30:01:51:20:c2:62:b0:2b:d1:e2:a4:31:
7c:5e:be:d2:43:ed:88:4f:f5:6d:bc:ad:9c:f5:a5:76:5b:fb:
3a:f9:31:1c:31:6c:f3:9e:58:d3:e1:2c:29:39:fa:07:45:88:
88:7e:0b:63:54:47:92:f9:af:9c:ae:cd:b0:aa:7e:3e:90:cf:
7c:46:f7:31:35:f9:dd:ae:d8:d5:8b:65:36:b0:ec:19:6b:d3:
cf:98:d2:6a:e0:63:bf:c6:25:38:c9:2f:91:67:f8:cc:15:41:
7f:51:10:9e:2c:3f:32:84:a6:4b:52:a8:ea:97:de:d3:41:f8:
83:dd:60:bb:39:09:e4:ea:52:39:11:11:2a:7d:66:36:12:ac:
de:d3:80:45:2a:a1:90:9c:2f:0d:af:2f:84:ea:c3:6e:d0:69:
a4:b2:25:5c:9a:be:c5:dd:15:74:13:13:8f:a8:ca:f6:25:43:
75:b3:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:03 2025 by rpki-client