Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: t5VTElzd5yRFianqQjG8IOHz31LkSQy3KPwE9r9jJ8U=
Subject key identifier: 3B:0E:5C:6E:D9:85:BB:C0:AA:EE:EB:83:F0:65:F3:5E:48:8F:25:C5
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 0197B7456CB3FD242E9C9DB1A5C6AF2C371C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 08F7
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: Ja9GuuqxJSdDpIs1zuSVIsJ8zNGFhbL06occpQE71xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6c:b3:fd:24:2e:9c:9d:b1:a5:c6:af:2c:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=3b0e5c6ed985bbc0aaeeeb83f065f35e488f25c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:f7:21:52:b7:d2:12:30:ac:40:d5:c7:51:
0a:3b:d2:d9:13:55:3c:01:49:2a:c1:18:6d:39:0c:
14:53:df:b3:22:eb:31:1c:ac:cc:a5:3a:ad:a4:e2:
ff:6f:2d:93:31:b5:05:a6:ad:bb:7c:89:f4:82:52:
b9:d6:32:1c:fa:1e:7e:40:8e:4d:b7:b2:d2:68:ad:
22:ac:ba:58:b3:c5:e3:7a:69:59:7e:ef:56:78:a3:
6c:21:16:83:da:5c:63:a6:35:8d:aa:45:39:4b:78:
41:33:88:e6:83:61:c0:f9:f2:4f:dc:e3:88:78:a1:
e5:44:7c:cf:d8:50:20:5b:ff:7e:7d:ae:ef:00:80:
98:5c:e7:22:93:ef:c8:9f:99:6b:bd:9e:1c:50:aa:
29:7f:64:57:d7:8d:21:76:4e:05:93:b5:05:cd:e0:
91:db:61:18:33:6c:50:10:9d:5f:b6:9f:16:c9:38:
e0:85:ba:1c:ac:f6:bc:a3:1e:56:1f:66:f9:f4:7a:
79:a4:98:10:97:99:57:40:4a:05:63:49:d5:83:d9:
a1:7d:ff:a4:2b:53:4b:76:71:d0:3a:15:32:3a:b0:
23:d6:49:e6:3c:14:c0:7e:df:c0:7c:69:e2:34:b5:
05:53:d6:61:b1:2a:fb:bc:8d:dc:fe:ee:3b:85:72:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:5C:6E:D9:85:BB:C0:AA:EE:EB:83:F0:65:F3:5E:48:8F:25:C5
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f9:10:bc:c7:1c:af:9a:92:28:6c:f8:7d:06:53:d5:7c:f9:
3b:5a:b2:da:c3:35:5f:37:56:63:7c:28:63:dd:22:6b:a5:e3:
da:53:e9:5d:80:c6:d2:25:a2:39:b5:24:35:71:03:14:cf:98:
cb:9f:9b:9e:06:63:92:bc:2b:17:22:8a:ce:68:f0:1e:4f:48:
24:f3:65:e5:29:af:88:ac:ac:3f:9e:25:6a:94:6d:84:be:c6:
71:80:eb:5a:6c:2e:bd:89:09:63:c5:c6:4d:87:c7:2d:dc:d8:
fb:97:01:d9:a5:43:fa:b3:78:2c:32:d0:a6:1b:84:d3:62:14:
21:fa:f9:cd:80:dc:d3:f2:53:64:01:79:1e:d8:00:0d:36:59:
78:50:8a:b9:2f:df:cb:d2:b0:91:c9:f4:43:e4:46:44:dd:88:
f0:fc:ca:99:33:5e:f4:c6:d9:46:6a:61:d8:57:19:12:66:ea:
2c:2b:f8:85:29:ba:eb:94:d8:82:df:b0:fe:cc:f1:93:8e:79:
17:92:03:f9:48:92:5b:67:66:ac:c6:e4:17:37:60:7a:ad:8d:
58:09:46:12:aa:55:c7:e8:5c:04:e4:c4:22:78:d3:00:bd:4a:
f6:26:f5:5d:1b:b1:25:a9:4c:81:50:2e:05:5c:61:7a:54:d1:
bc:6f:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client