Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier: T4LX9VIX1MdRDDx7RgXNlrOEHJzPaUK3dm96/1LrOK0=
Subject key identifier: 8E:A0:13:DF:94:03:66:CB:52:3F:49:1F:44:B9:B2:43:21:EA:C9:B8
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 0197B6A0DD19016E4424803A1F4A93CBB229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number: 0F60
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: 0UPnMu1cIBofIAJHustV9I51X1Vq/PDV9Ybq/rJZ0nc=)
3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:dd:19:01:6e:44:24:80:3a:1f:4a:93:cb:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=8ea013df940366cb523f491f44b9b24321eac9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:04:28:4f:65:83:c2:cd:48:75:e0:4b:6a:
75:4e:bd:bc:1e:a5:8d:ca:6f:9e:a6:33:0f:df:83:
0c:58:19:2e:d8:16:dd:f6:89:dc:ff:35:84:87:59:
a9:6c:20:19:43:8e:1f:34:07:65:1d:18:69:71:72:
16:32:6a:df:19:98:6c:cd:10:90:b1:4b:cc:d4:c2:
1b:b4:f3:aa:fc:0c:8c:70:03:f2:e7:26:71:ef:89:
0d:12:30:14:e4:5d:e8:bd:74:ba:33:19:c0:72:4c:
4b:95:9c:13:88:69:5c:29:6d:c2:05:8e:17:2f:38:
e7:27:0c:c9:9d:20:f9:e1:42:5d:7c:4a:7f:dd:30:
f3:d8:fd:b6:30:3c:e6:6b:3a:7c:62:d9:8c:6a:77:
07:ec:93:43:14:e6:a6:07:df:bc:d7:a6:ce:d4:0a:
39:1d:5f:0d:f2:84:e2:33:5c:df:ee:1e:63:86:10:
21:10:12:0b:ea:83:ec:9f:c9:68:22:1d:5e:16:0c:
de:44:10:42:0f:77:a9:a7:c5:d1:24:a8:eb:17:f9:
f0:15:3b:05:31:75:e3:63:1f:f8:4b:71:c5:3a:bb:
14:1f:8d:05:f2:36:8a:fa:8f:bd:24:0c:bf:0b:c0:
0a:51:0f:df:97:f6:1b:cf:72:51:5e:54:7c:95:48:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:13:DF:94:03:66:CB:52:3F:49:1F:44:B9:B2:43:21:EA:C9:B8
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:b7:f4:f9:3c:a0:0a:70:6f:04:66:28:2b:61:d8:f5:14:
bc:9e:c9:ca:6e:c8:62:6b:9a:ae:2a:2d:6e:36:af:28:81:ea:
3b:de:d0:20:48:4e:42:49:50:97:0e:0e:37:1b:74:bc:ca:b5:
80:88:c8:7f:e2:ae:c6:1b:c9:98:87:83:b7:b2:8a:c0:4f:19:
d7:3e:5f:51:6e:6b:85:75:ff:78:c8:e0:65:f0:f2:1b:3a:c9:
08:e4:1d:21:74:85:f6:d9:2d:9a:36:c2:b8:2f:f6:ff:9a:5f:
c2:3a:3e:83:b0:c5:c6:dc:68:60:dd:f6:36:f0:de:6f:f7:ee:
26:e5:8d:4d:59:68:32:50:fd:5d:47:04:ee:46:3c:f9:cf:5c:
50:0b:96:1d:85:56:a2:c6:16:c6:f1:54:3c:87:05:84:7b:c0:
09:7d:d9:40:2a:c1:eb:41:bc:d8:5a:5c:9d:36:c1:32:d6:29:
d8:ea:6f:e1:42:1b:e5:5b:4c:e3:d3:37:17:5a:13:a6:64:21:
ec:d1:68:fd:f4:1d:54:c5:0c:68:68:7e:3c:e2:02:ca:07:d9:
29:ff:c4:1d:d3:dd:a4:ff:78:44:1a:6d:dc:e6:13:3e:03:51:
c4:9a:6e:27:32:af:b0:ab:2e:43:62:fc:94:5f:ba:2d:14:ab:
95:54:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:51 2025 by rpki-client