Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File: 6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier: atnKMYr72IMXeP8BtneytrH8BAONC8Qwd28F2hcc6lA=
Subject key identifier: E7:AD:04:88:77:5F:67:8F:56:6A:AA:A0:0A:BF:5A:19:47:D9:72:AA
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer: /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial: 0197B70E7486E4424D551E299ECF4DBAFF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number: 0935
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: VOzgtko0bwkNrRZqvX11GL0p0Zj0Dcluj0LM0ZfVimY=)
2: n5zZ8emiGJc39AvFCX_4g7V1Hbw.roa (hash: lqRnzTh86Fa5qo5s0AzLpFMvIZ+B4HTsCFIStL4pgaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:74:86:e4:42:4d:55:1e:29:9e:cf:4d:ba:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=e7ad0488775f678f566aaaa00abf5a1947d972aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:65:1e:52:f3:75:98:7b:04:6b:6a:c2:8c:
0a:aa:76:4b:79:43:c9:fc:9f:08:bd:60:7c:92:e2:
33:83:e3:8a:c7:7a:d1:3c:ee:36:7e:94:91:a3:81:
cc:bd:dc:c6:a9:8e:77:c9:00:df:a7:96:6c:82:1c:
27:f7:33:0d:00:b8:bb:8a:9b:23:ca:bd:d1:20:46:
eb:24:bd:f7:2e:b2:48:06:16:d8:0f:af:15:75:9f:
d4:76:9a:98:75:15:c4:08:af:7f:5c:5f:49:b5:f1:
ab:0e:2b:0f:59:a8:bc:c6:26:54:c6:06:e3:75:33:
87:66:9f:73:13:47:89:a3:ec:63:71:2c:fb:cb:79:
2a:8e:84:a3:61:a2:74:59:ed:ba:43:b8:81:dd:cb:
d0:14:4b:c8:1d:f4:3d:17:e8:a9:70:a1:c4:45:1a:
38:ae:d4:2f:4a:36:7f:96:1b:5c:2b:4f:62:a8:04:
40:87:12:ee:a7:fe:77:5d:1d:f2:a8:f8:04:c8:d8:
68:ca:33:5d:da:c5:00:e5:00:ae:3b:a8:12:93:e2:
57:f1:c1:58:4a:a2:89:55:f0:3d:7e:e8:55:5b:20:
d4:26:41:44:4f:08:79:ad:19:e4:fe:b9:63:63:b9:
e2:50:d7:50:7e:37:f2:eb:6c:80:78:d1:c8:70:e3:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:04:88:77:5F:67:8F:56:6A:AA:A0:0A:BF:5A:19:47:D9:72:AA
X509v3 Authority Key Identifier:
keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:85:8e:34:f1:3c:4a:a7:68:88:31:83:20:66:76:12:a8:
0d:4c:05:32:69:ed:db:ec:84:e1:78:74:94:85:ba:6b:a1:1d:
bf:e2:da:ad:ba:cf:9e:6c:41:26:e0:a4:d2:2e:f2:31:44:d8:
55:1c:80:24:06:48:12:48:6f:c9:a7:52:64:b1:dd:77:c5:e2:
4b:44:01:6b:21:81:1c:19:f0:c9:2e:04:bd:20:be:aa:ed:65:
00:40:a2:62:22:08:5e:37:8d:11:99:53:8e:ce:5f:85:47:13:
2c:01:94:8d:7d:72:05:eb:28:16:23:eb:55:42:2b:cc:32:3f:
14:24:7b:8a:0e:1f:c0:a1:b5:0c:75:07:76:00:f0:b2:32:c8:
b2:3b:3c:09:85:52:05:ab:b9:b2:71:b1:90:ea:94:4b:fc:c6:
a1:e5:44:58:2f:ee:dd:7c:dc:56:89:0d:9b:05:00:f1:ed:13:
3c:de:be:3b:85:65:b1:04:44:80:73:b3:d8:ee:44:cc:f5:7f:
c6:6a:5a:0e:96:dc:df:3d:c3:cc:44:1a:ce:ec:11:88:75:cb:
06:5a:26:1a:ed:9d:78:37:d3:59:78:98:70:16:7d:05:8c:ca:
60:f5:7d:a9:bd:25:a3:5f:80:4a:aa:22:90:40:00:09:bb:8e:
36:ac:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:32 2025 by rpki-client