
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: kicC5Gw0Ve9vVIefEGrEzeblrJ8R7rhwTbhbzRxVPag=
Subject key identifier: 2D:A8:7F:61:D8:EE:C5:2C:30:F4:B0:34:9F:28:D1:F0:F1:DD:B3:BF
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 0197CFF2967AC27554928512001A2EEE160E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 073C
Signing time: Thu 03 Jul 2025 11:01:11 +0000
Manifest this update: Thu 03 Jul 2025 11:01:11 +0000
Manifest next update: Fri 04 Jul 2025 11:01:11 +0000
Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=)
2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: axzRd1Y2WghyMAUulKfBd2y32gXCNdqFQ1ZO+A6Y1zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:f2:96:7a:c2:75:54:92:85:12:00:1a:2e:ee:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Jul 3 11:01:11 2025 GMT
Not After : Jul 4 11:01:11 2025 GMT
Subject: CN=2da87f61d8eec52c30f4b0349f28d1f0f1ddb3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:07:46:56:82:71:cc:38:d0:8f:7b:c4:d3:
ca:71:5b:ef:4c:95:00:d6:36:13:ac:fe:3a:2c:dd:
0b:08:32:33:2b:59:96:3a:c9:a4:d9:7d:48:26:02:
21:3e:eb:e2:f4:65:d9:c7:f9:8c:a6:af:1c:b7:52:
e6:43:0c:22:2d:ea:b0:4b:18:aa:9c:0a:7f:fb:35:
51:6a:ab:c6:de:a2:45:ec:76:c2:3d:7a:24:e3:42:
97:f0:b2:e4:ce:10:48:7d:10:08:67:94:58:5e:45:
a0:e6:81:60:e7:3b:22:07:06:56:42:86:8b:99:b9:
0d:8e:38:9a:50:e5:74:bc:3a:c7:4e:29:19:7a:4b:
fc:7a:1b:90:ce:94:14:05:61:b4:32:20:53:38:75:
de:0f:16:da:19:3f:3a:d3:35:95:44:2a:ce:4e:73:
0f:6a:51:16:e7:60:04:c3:a8:62:2e:21:6b:ec:e5:
de:04:e4:43:58:46:00:ea:0d:c6:cb:01:8e:b1:e0:
c9:63:f7:62:e9:1b:d0:cb:f4:7a:de:f2:c2:46:45:
ff:7c:c5:d2:69:3e:cc:5c:4d:fb:e0:9e:a2:4b:be:
0f:fa:d3:f7:68:7b:ca:bd:3c:56:fe:01:63:93:14:
d5:df:58:50:25:e9:54:46:cf:df:09:fb:78:01:18:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:7F:61:D8:EE:C5:2C:30:F4:B0:34:9F:28:D1:F0:F1:DD:B3:BF
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:0a:fa:6f:f4:47:57:7c:a5:ab:40:6f:1f:f3:dc:cd:22:
d7:25:f4:5b:6d:7d:60:90:ce:82:af:72:49:3f:9c:4f:59:5c:
c4:bf:0a:1b:36:8d:d6:41:9b:10:e5:18:7f:1b:08:2b:0d:ba:
bd:ea:dc:c0:1b:b5:93:a8:f9:29:99:ae:f1:25:b1:00:46:c6:
e6:96:79:da:a4:a9:b4:b4:e7:3a:ad:2c:db:83:fd:57:ec:8f:
e5:7d:2c:ce:83:8c:12:1b:b2:42:6c:3c:b2:8c:bc:1e:b3:00:
9d:0d:ff:eb:b7:4b:c3:1e:81:9e:fd:0f:44:5c:7f:4d:9b:d6:
30:b1:1d:b4:16:3b:4a:bd:3e:4e:c8:50:ed:6c:5d:e1:86:6b:
e1:9c:00:db:2c:e1:85:4e:94:d7:bd:d1:27:3d:90:cf:ff:fb:
3a:f1:c2:3c:8e:c0:69:6b:6d:39:c2:3b:21:9e:19:61:bd:f8:
bc:c6:f9:58:d4:2c:9c:e5:db:9b:26:31:d0:5d:85:7e:29:2b:
a8:d5:0b:c5:e0:a2:28:7a:61:ae:7d:c7:c9:b7:4b:5a:6f:3b:
e6:5d:70:cd:23:b4:bd:78:42:b2:19:f0:e3:81:40:6e:81:17:
08:7e:92:f6:83:b9:75:4e:28:34:ae:48:ea:ad:94:e0:a7:66:
f2:6e:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:46:59 2025 by rpki-client