Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: IU5GMoPmpKwqJfd87UNsOcY0epMo/Vhw2mxFN3MHC3M=
Subject key identifier: 17:12:48:CE:32:FE:83:61:CB:D2:5A:CC:1D:36:CC:4A:83:D0:A0:5E
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 0197B6A233216725E833E6E23B3A52872104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 02EF
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: xHTvPHAPKRMiHT3AgmMKEU/iDsOY5k5nGCyk7ZcTGdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:33:21:67:25:e8:33:e6:e2:3b:3a:52:87:21:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=171248ce32fe8361cbd25acc1d36cc4a83d0a05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:8c:f8:d5:3f:67:d3:cf:7e:3e:d4:7e:f5:
3d:76:75:74:74:0a:94:22:c0:02:18:91:d3:30:05:
78:f4:a3:0e:93:ed:8d:0e:bb:2c:5a:92:06:b6:ab:
60:74:4b:6f:21:ab:12:9f:c6:b7:38:87:0b:cf:0d:
58:f9:88:22:d7:70:ad:76:6b:3f:4a:77:4e:c3:2b:
d1:c7:b2:fc:d6:8c:3a:b1:9e:2d:65:2e:ea:7b:de:
ed:f4:c5:91:6b:27:22:3e:5c:0a:51:59:17:ae:b4:
7e:b0:2e:09:40:32:7c:fb:ce:3c:e0:37:ae:b7:e6:
9a:fd:71:6e:ff:a9:e0:67:03:18:29:6f:f9:15:7c:
20:b6:b2:79:67:54:52:63:09:7d:17:fa:97:16:8f:
be:4f:0a:66:14:dc:b3:79:21:d8:1a:98:df:00:22:
28:c6:52:37:ba:67:9a:ad:40:71:5b:a8:1d:4d:a8:
73:fb:2f:51:5a:d7:64:95:34:c5:ac:82:dd:d7:c7:
0f:ee:bb:25:5a:a2:ce:e7:49:7d:04:61:86:54:38:
0b:08:47:4e:6c:56:30:d9:5b:33:53:52:bc:32:99:
24:26:dd:d0:ae:f9:7b:5c:d3:51:27:ae:b4:c7:6f:
c4:63:e1:4f:c6:01:e3:19:d1:35:34:ef:af:07:c4:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:48:CE:32:FE:83:61:CB:D2:5A:CC:1D:36:CC:4A:83:D0:A0:5E
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:10:9b:d9:04:02:b4:0b:1e:87:29:2c:82:34:eb:42:fa:e5:
34:9d:62:a4:73:05:a9:9d:e2:fe:96:d7:21:01:2a:8a:72:82:
29:0a:ff:fe:95:ce:bd:45:7b:0a:f4:09:f7:3f:91:49:47:cd:
3f:fd:42:a9:34:39:47:32:bf:34:00:16:73:13:2d:a8:9a:ec:
72:fc:75:31:e8:62:6e:b3:1e:3a:77:53:ec:01:b2:00:9b:fc:
03:79:dd:a8:90:67:c0:09:cc:1b:4e:74:89:da:47:0c:5d:af:
d0:03:2b:95:09:86:4d:4c:ce:06:5f:b2:5f:ff:8f:d4:d0:5a:
2a:c9:aa:da:c9:6d:c0:81:bf:82:c7:d2:e5:ad:43:16:26:f1:
ac:fa:b5:e6:1f:b9:e6:3d:dd:83:c0:b8:3d:16:91:1b:78:ff:
62:1b:26:e9:a9:f9:36:64:78:10:78:c8:ad:83:9c:b8:f7:94:
4c:ba:6e:c7:31:7b:b6:e0:5c:a6:1b:22:f7:99:35:81:26:9c:
74:10:bf:ed:ba:ea:9f:1b:f2:26:00:19:9a:fe:33:af:21:6a:
16:dc:a4:85:1f:0f:d9:28:e4:93:ab:39:e2:50:30:18:f2:4f:
9f:5d:9d:d1:94:f5:ba:e1:cb:65:2a:ff:7d:3e:ea:19:7e:15:
02:77:2a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojMhZyXoM+biOzpShyEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjUwNjI4MTMwMjUyWhcNMjUwNjI5MTMwMjUyWjAzMTEwLwYDVQQD
EygxNzEyNDhjZTMyZmU4MzYxY2JkMjVhY2MxZDM2Y2M0YTgzZDBhMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3uM+NU/Z9PPfj7UfvU9dnV0dAqU
IsACGJHTMAV49KMOk+2NDrssWpIGtqtgdEtvIasSn8a3OIcLzw1Y+Ygi13Ctdms/
SndOwyvRx7L81ow6sZ4tZS7qe97t9MWRayciPlwKUVkXrrR+sC4JQDJ8+8484Deu
t+aa/XFu/6ngZwMYKW/5FXwgtrJ5Z1RSYwl9F/qXFo++TwpmFNyzeSHYGpjfACIo
xlI3umearUBxW6gdTahz+y9RWtdklTTFrILd18cP7rslWqLO50l9BGGGVDgLCEdO
bFYw2VszU1K8MpkkJt3Qrvl7XNNRJ660x2/EY+FPxgHjGdE1NO+vB8QnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcSSM4y/oNhy9JazB02zEqD0KBeMB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRCb2QQC
tAsehyksgjTrQvrlNJ1ipHMFqZ3i/pbXIQEqinKCKQr//pXOvUV7CvQJ9z+RSUfN
P/1CqTQ5RzK/NAAWcxMtqJrscvx1MehibrMeOndT7AGyAJv8A3ndqJBnwAnMG050
idpHDF2v0AMrlQmGTUzOBl+yX/+P1NBaKsmq2sltwIG/gsfS5a1DFibxrPq15h+5
5j3dg8C4PRaRG3j/Yhsm6an5NmR4EHjIrYOcuPeUTLpuxzF7tuBcphsi95k1gSac
dBC/7brqnxvyJgAZmv4zryFqFtykhR8P2Sjkk6s54lAwGPJPn12d0ZT1uuHLZSr/
fT7qGX4VAncqLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:20 2025 by rpki-client