Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier: lja3a+N6zBuZT8vcChnxczsb+jIPwY3GITojavB0DWU=
Subject key identifier: 4A:62:69:51:56:E2:66:8C:2F:3C:E2:FD:E1:58:10:49:6A:9E:E1:9A
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 0197B74522344F97C8E0A49E65206B3660B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: s/uEXa6d7J/LNpY9FOnqFlPrYySvSW627BZSs0eO8vo=)
2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:34:4f:97:c8:e0:a4:9e:65:20:6b:36:60:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=4a62695156e2668c2f3ce2fde15810496a9ee19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:73:ca:60:00:dd:b2:aa:04:fa:f0:6d:80:
45:4c:f6:b4:7c:0f:5e:ab:4d:29:4d:ba:6d:d3:1a:
db:f7:11:60:83:f1:16:d8:ac:ce:a1:da:7e:5c:a0:
01:9f:26:41:51:ba:b4:bd:24:44:8f:da:ac:e2:7a:
26:c5:f2:e1:8d:27:bb:90:db:87:63:f1:b1:ce:1a:
5d:3f:8a:7e:cf:5a:f4:f8:18:5f:a0:29:59:49:2c:
02:40:f7:84:a3:49:0f:09:05:32:fe:46:3a:88:70:
3d:13:c6:ae:fa:40:0c:04:5b:d6:ba:17:1e:c0:b6:
8b:81:33:89:f6:3b:a7:bb:fc:ca:ed:92:8f:a7:13:
50:ac:ca:99:ef:c6:97:42:e3:12:3c:5b:af:62:ac:
1a:33:0c:67:7a:22:91:d7:b6:ae:ff:82:6e:11:f4:
0b:d7:9e:57:8e:1e:8f:61:07:fe:77:93:b5:a1:68:
9f:dc:be:ec:80:83:02:98:69:c3:56:e4:f2:1a:2a:
03:24:0b:ba:d1:4e:57:d9:93:ef:38:f2:30:97:1a:
50:f9:5f:52:c4:9c:fa:e6:8a:52:22:d4:3f:98:ef:
79:66:50:ae:76:e2:33:f6:17:47:a4:cd:fa:4d:d0:
b0:87:a3:32:14:62:d0:39:65:29:af:ab:bc:f8:a9:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:69:51:56:E2:66:8C:2F:3C:E2:FD:E1:58:10:49:6A:9E:E1:9A
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:cb:3d:f6:9e:67:10:dd:14:44:8c:99:be:25:a7:e0:10:
6a:0b:a8:6a:02:32:60:13:b2:62:ac:01:c7:2b:ca:77:1d:56:
0e:16:cc:59:1d:4a:2a:f2:b8:bd:42:4b:ad:d5:b5:88:10:fc:
2a:b7:05:0d:c8:e8:a4:ed:71:eb:e3:d4:9b:42:ac:eb:02:ac:
a5:1a:cd:83:96:c5:94:ce:7f:19:39:dc:e6:21:29:0e:f4:23:
cb:45:65:7f:90:3d:64:17:fa:77:bb:ea:78:e3:e2:e0:c2:72:
eb:fa:15:19:e6:e8:98:7e:e7:69:af:a7:ac:9b:ff:94:c8:26:
9e:05:21:20:15:ca:af:16:ec:ac:1e:0b:82:9e:97:2f:6d:2d:
ae:dd:bf:21:98:da:99:99:e3:8e:ba:5c:f6:67:57:57:a2:42:
94:8b:1f:d0:c7:0e:ff:ff:ab:b7:26:81:9c:c7:8d:0c:91:b3:
a6:85:f6:db:95:ad:bf:be:94:37:f4:9d:82:de:4b:5c:98:2b:
52:ac:bd:98:de:87:c6:81:36:81:9b:9a:93:80:f7:71:3f:f5:
07:cb:99:48:7b:a5:aa:95:fd:74:85:06:d6:ea:cb:66:fd:7d:
e6:7c:96:5a:8f:90:65:c0:27:33:52:c5:38:a8:cf:63:bf:59:
94:e7:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:13 2025 by rpki-client