Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: LHR6UJXKQwvseiJ0W5JWTAgjVGDrxfi5TORMhxV1aSM=
Subject key identifier: C1:BE:8C:7C:CA:82:25:E0:A3:16:16:7A:53:C5:C0:B9:3C:05:D4:A4
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 0197B93377C98E878F98C124283172AEB108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0B14
Signing time: Sun 29 Jun 2025 01:00:46 +0000
Manifest this update: Sun 29 Jun 2025 01:00:46 +0000
Manifest next update: Mon 30 Jun 2025 01:00:46 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: TCZO5aINcKprSkLJNtHhmkyhI+MsddBmZc0FgDJaZ3o=)
2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:77:c9:8e:87:8f:98:c1:24:28:31:72:ae:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Jun 29 01:00:46 2025 GMT
Not After : Jun 30 01:00:46 2025 GMT
Subject: CN=c1be8c7cca8225e0a316167a53c5c0b93c05d4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:82:e9:3d:ca:ff:3b:77:51:b1:79:43:4b:
4f:b1:cf:08:db:cd:46:58:ba:3e:54:db:64:f8:4b:
97:75:26:ab:d0:01:71:a7:01:d8:59:12:a7:22:1d:
cb:7a:7f:c4:08:10:28:16:e7:d5:68:d6:42:d8:b1:
ec:3a:85:5e:c2:b5:ff:15:6b:5f:37:dd:f5:b6:e2:
cc:72:4c:07:4f:6a:eb:57:f7:12:67:ef:a9:a2:c6:
29:af:89:72:04:6c:fc:1c:8e:2f:6b:bd:a1:47:8b:
9d:c8:c5:2a:5e:88:c8:9b:47:93:1b:63:ac:87:36:
60:23:34:c8:a6:b2:bc:a0:6d:bf:e4:a5:1e:92:b4:
0d:86:f3:2b:b2:1f:e2:de:01:0e:99:0e:fe:5a:1f:
28:a1:8c:0f:48:a2:fe:71:6e:47:80:de:32:12:d5:
f0:a6:96:b4:bb:20:af:c3:2a:99:6b:d9:a0:e4:d0:
91:76:a6:2c:16:14:31:65:d9:09:1d:32:fb:7f:8c:
54:c6:f1:d9:ae:cc:b3:e8:c0:2a:ca:7a:1d:56:2d:
ff:62:3a:7f:fa:69:2a:88:24:36:c3:6f:e7:88:61:
b1:3d:c0:d8:1c:cf:ab:2e:c2:54:1c:1c:a4:ec:ca:
a4:87:ae:6a:f9:91:09:b9:ac:0f:d1:ca:4c:ce:f5:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:8C:7C:CA:82:25:E0:A3:16:16:7A:53:C5:C0:B9:3C:05:D4:A4
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:64:6f:cb:4d:18:af:08:5a:a9:8b:2b:81:fe:c8:23:6b:91:
94:95:d7:f1:c0:57:8f:ac:f1:13:ef:c3:e0:3e:78:c0:a3:78:
b5:d2:6d:2c:1c:f3:74:7f:91:af:cb:d0:99:68:41:aa:0d:b3:
30:21:20:6a:94:b1:bf:d9:d0:00:5f:e3:02:f5:73:c3:d0:fc:
eb:a8:55:1d:ae:b5:01:04:a0:c6:16:19:4c:0f:26:e7:9c:85:
52:70:58:9e:a8:a0:ad:1c:e2:cf:30:b5:02:e5:13:fd:56:9e:
ac:cc:27:b4:72:35:23:d8:c3:29:a6:67:2c:73:83:e6:26:69:
a3:2a:ae:90:bd:55:d0:72:29:2a:5d:57:61:fc:d7:fd:bd:3d:
56:25:a7:88:a3:bd:86:8f:c8:e5:51:ff:37:8f:9c:9e:2d:7b:
47:28:60:31:3e:33:51:9a:9f:3c:af:ef:f3:d7:3e:8d:e8:42:
96:7a:87:af:f8:f4:de:5e:dc:45:2a:4d:71:ac:06:c8:27:f2:
8b:7b:89:10:32:98:39:28:29:01:6a:95:66:30:af:6c:23:52:
2b:4f:3c:6e:0a:5c:67:41:22:05:5f:5d:56:82:4a:a9:f8:3a:
3c:ea:21:63:40:a8:1b:ea:8b:18:7c:b5:d7:8f:97:96:b7:ec:
e2:9f:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:01 2025 by rpki-client