Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File: MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier: 4xfSliBpqixuIbEd2BgPHJna9CxVK49RDMMCtA3lvbw=
Subject key identifier: CB:6C:A9:FD:27:C6:A7:67:2B:2C:6E:B3:D2:7E:22:AC:A1:D2:25:5A
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer: /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial: 0197B70F44162F7A1582C4CAAE3A48734F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number: 056D
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: iwKBZxsP0MW3h5AjVOhLLmaK477mjOMgxO67QXcNFK8=)
2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:44:16:2f:7a:15:82:c4:ca:ae:3a:48:73:4f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=cb6ca9fd27c6a7672b2c6eb3d27e22aca1d2255a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:53:65:f8:3f:5f:2a:de:89:38:99:f1:81:
63:47:a6:0f:d8:3a:d2:cd:28:57:9d:cc:3a:9f:0e:
28:74:eb:8d:31:31:ce:e1:a6:1a:00:e0:7e:59:80:
bf:b9:df:89:13:e5:47:f7:3d:bc:f6:51:6b:f6:e2:
52:f4:d0:a7:94:da:14:68:0e:e4:8a:47:ce:7c:ea:
a2:57:89:7c:cb:b0:91:79:1b:c5:f3:e0:2a:12:bf:
7a:16:56:69:57:1b:eb:ea:f6:85:6d:af:30:c7:8b:
53:5b:ca:15:38:35:78:88:22:57:0a:b5:5e:db:b7:
70:f1:54:03:d4:2a:6e:3b:78:14:8a:59:1e:7b:a3:
6e:4c:bb:17:bb:e7:79:48:44:26:ea:b3:b4:90:a8:
2d:04:3d:21:b1:89:3d:aa:76:fd:14:58:e6:62:05:
bc:84:a2:fa:5e:ba:82:3f:a1:dd:d3:aa:f9:c6:89:
5b:a5:35:09:ed:9f:f5:9a:08:92:9b:1a:c5:3f:41:
da:ed:7a:dd:28:c1:ac:b5:14:d9:64:5d:b1:63:99:
f1:d5:a9:6c:49:d1:e8:17:d1:c5:22:33:75:8f:56:
f4:74:03:fc:d6:c2:f8:54:c4:29:14:1c:a8:b0:21:
46:6b:68:cb:d2:3d:9a:69:77:65:a4:7b:52:84:6c:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:A9:FD:27:C6:A7:67:2B:2C:6E:B3:D2:7E:22:AC:A1:D2:25:5A
X509v3 Authority Key Identifier:
keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:c1:84:8e:1d:06:1f:af:10:13:9f:dd:db:43:02:9c:03:
89:b9:53:dc:c0:61:f1:a6:e3:3a:e0:4a:25:c5:a3:b9:a3:91:
97:2d:ab:9c:d3:46:04:43:30:9e:c6:44:b5:c5:35:10:84:36:
d7:db:e4:a6:6c:40:b9:1e:66:c2:2e:33:b2:68:63:38:e7:36:
48:15:54:c5:09:68:46:9a:4d:35:65:ef:2f:4c:a1:30:c6:0a:
9c:3b:01:b5:f1:8d:06:c7:4a:00:28:53:9e:f6:b4:cf:76:d9:
de:7c:78:2b:e0:c6:85:e2:a3:a1:6c:c1:0b:8f:98:a7:b1:f0:
aa:5d:4c:23:b7:70:9e:66:8d:32:58:4d:ba:69:5d:6d:e6:e9:
63:c0:29:34:bf:5e:f6:72:7b:4a:0f:81:88:f9:c6:da:b8:19:
df:8d:fd:8c:4a:cd:d3:ba:05:cd:51:ac:54:f2:9d:7c:a7:a6:
43:6e:6b:7a:96:fd:d2:5c:31:fb:8a:48:74:9f:a0:a0:9e:87:
5e:b8:79:0d:0c:01:9d:7d:70:8a:fb:0a:08:d1:a2:53:4c:2f:
04:04:58:b0:3a:04:61:e7:28:74:ad:83:c1:17:7d:db:18:cc:
dd:01:86:28:63:f9:67:f0:7c:b9:8f:c8:7d:d0:10:ed:6b:fe:
74:bf:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:33 2025 by rpki-client