Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: h95Tr9r8mwRneduyQtlQeWUggOsR2qM7dWaXWNb4Sps=
Subject key identifier: 8D:C8:DE:C7:BF:EC:75:B7:04:44:C4:B8:E8:59:87:FB:CF:44:C8:8A
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 0197BDEC0E1AF05073141399FAD6D5C59584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 14BF
Signing time: Sun 29 Jun 2025 23:00:53 +0000
Manifest this update: Sun 29 Jun 2025 23:00:53 +0000
Manifest next update: Mon 30 Jun 2025 23:00:53 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: QmjjLwWe/MilupOPzA9O6CKIj4FmV8bA/Jxy0ns5598=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:ec:0e:1a:f0:50:73:14:13:99:fa:d6:d5:c5:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Jun 29 23:00:53 2025 GMT
Not After : Jun 30 23:00:53 2025 GMT
Subject: CN=8dc8dec7bfec75b70444c4b8e85987fbcf44c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:7b:a2:cc:ef:82:62:7b:15:65:79:54:6f:
3c:78:60:30:c9:da:8e:8a:be:02:3f:f0:63:13:2b:
22:65:54:67:87:1d:05:c1:cb:4e:dd:ce:b0:53:95:
35:8b:3e:3c:ee:72:c4:0b:b4:65:fd:c9:61:2d:0b:
45:9d:9e:2f:61:13:05:e6:1d:67:12:bb:21:c4:04:
96:cc:cf:a9:aa:a4:4c:8a:58:3a:cd:a2:2a:e4:e8:
52:0f:1f:ed:aa:19:14:28:57:75:83:1f:7b:73:0c:
cd:e2:19:79:31:ab:2c:9a:c7:6e:10:37:cc:2a:38:
fc:2f:63:c9:e6:e4:15:36:b8:7e:25:0d:de:e2:e6:
d3:08:51:9e:62:b4:8c:d1:85:74:dd:9f:6b:5b:42:
bb:38:e8:fa:c5:d0:d3:e5:c9:79:1b:2c:2e:99:d0:
dc:e8:96:33:7b:c5:c5:5c:81:e6:37:bb:de:e2:5a:
8b:5f:90:24:a9:f9:40:b6:8d:6f:c8:23:3b:a6:1b:
90:dd:38:44:c1:da:14:b6:c7:2e:73:ca:8f:89:ff:
9d:33:e1:8f:b1:cf:95:13:bc:8b:7c:07:57:fe:2c:
12:cd:38:28:de:64:46:a6:97:6e:3e:3d:62:07:9e:
6c:b8:93:e8:14:70:cd:14:77:b6:85:7e:26:0b:0e:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:DE:C7:BF:EC:75:B7:04:44:C4:B8:E8:59:87:FB:CF:44:C8:8A
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d2:23:55:cc:7d:97:97:d2:62:35:a5:aa:85:55:5d:9c:5c:
5b:7e:f0:1a:a3:21:8f:1b:8f:f7:fc:09:45:e4:e2:1d:0c:54:
17:16:4b:4c:2f:af:19:5d:4c:ba:7a:3d:35:ab:db:03:74:ab:
88:34:cb:31:81:eb:5f:49:1f:fc:48:a2:1f:36:9e:be:c7:fc:
4c:a9:e4:91:78:f2:6a:cb:54:c1:0b:e2:12:b5:86:d9:d3:93:
c3:f8:e2:79:12:5f:77:37:3b:09:0c:73:d6:8b:44:9d:24:22:
5e:cf:4f:86:3c:4c:bd:9b:54:ca:f7:7c:70:b7:6a:9a:24:f1:
af:f4:33:99:f4:5a:4c:60:bf:ab:f0:d7:62:4b:0e:3a:97:4b:
9a:3c:e9:a0:60:a5:e8:ca:d8:90:45:e6:24:97:9a:66:96:8b:
6a:f4:d1:71:84:c5:0c:47:37:70:f5:28:9a:2b:fb:87:93:4a:
5e:ab:66:e4:ac:4d:af:81:21:e9:ce:5a:63:70:b1:ce:30:03:
02:60:70:2e:45:b8:4f:68:fe:27:90:59:26:8b:87:5a:87:91:
e4:23:4c:ae:19:72:9a:85:d2:dd:5d:56:20:b4:e5:84:ab:57:
7f:eb:c1:e0:63:da:83:05:59:c7:67:71:3a:47:81:88:71:1f:
5f:40:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:34:04 2025 by rpki-client