Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: tjjLGNrj/l6tt5ISzntGlEwpf+JJrY5Whv/d/tpEPJI=
Subject key identifier: 88:88:BC:85:4C:D0:43:80:DD:74:F4:7B:94:33:2B:BC:2A:24:27:36
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0197CCF188D3068A8E249F863029A50DB121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 15C8
Signing time: Wed 02 Jul 2025 21:01:10 +0000
Manifest this update: Wed 02 Jul 2025 21:01:10 +0000
Manifest next update: Thu 03 Jul 2025 21:01:10 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: eig/aN1qUoVtS3t0iZEHZwKbhe/4/+ILR4lTdkZzlpA=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:88:d3:06:8a:8e:24:9f:86:30:29:a5:0d:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jul 2 21:01:10 2025 GMT
Not After : Jul 3 21:01:10 2025 GMT
Subject: CN=8888bc854cd04380dd74f47b94332bbc2a242736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:7e:c4:b5:a5:14:ff:c0:1f:73:ce:f3:d0:
0e:32:b7:cb:9c:18:4c:6a:d2:1c:35:d5:63:e5:7c:
07:e5:d5:bb:34:c4:6b:7b:07:9c:2d:4c:d1:42:70:
4f:3c:08:b0:c2:ed:0a:75:22:34:30:5f:af:79:22:
c6:b3:9a:68:b8:ce:cc:5a:de:54:ab:95:90:bd:c2:
f3:ce:af:57:33:72:41:b2:a9:08:a7:05:37:a1:ef:
f7:8c:41:ba:6d:be:d5:fc:46:75:f0:90:a3:90:4a:
75:d7:bd:34:8a:a3:e6:35:7c:2a:cf:db:93:85:62:
f4:65:16:a2:11:d4:35:0b:18:6e:15:a8:3f:6b:8d:
b4:9c:71:ac:07:74:59:04:9d:77:fb:2a:a4:28:ed:
30:0a:e3:f7:07:98:98:a4:d2:f2:c2:2f:a1:c9:b7:
5d:a3:df:8d:a7:18:8c:41:19:0a:fe:9a:52:95:5b:
f4:d2:81:67:86:c8:9a:a8:9c:63:4c:49:12:37:71:
bd:dc:7d:80:5b:13:14:ef:73:9e:49:8e:78:71:5b:
8e:b5:b5:b0:77:69:59:b7:8e:03:45:f7:1b:16:e6:
df:17:42:61:18:ef:db:a2:39:71:c7:ab:5e:9f:59:
46:17:31:e4:ee:ef:81:e5:83:7c:ff:d5:16:6f:2d:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:BC:85:4C:D0:43:80:DD:74:F4:7B:94:33:2B:BC:2A:24:27:36
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:00:ee:04:32:9b:b1:00:52:78:0f:ed:c5:0a:ee:1c:f9:
d5:6c:70:37:df:d8:b9:5f:cc:34:b5:1f:98:69:71:97:9a:44:
c5:ae:08:cf:84:1c:7f:fb:a6:68:d2:84:fe:9b:9c:57:db:50:
8b:b8:12:4d:9e:26:7d:66:5b:36:41:b1:a3:21:20:87:a5:69:
96:07:6e:30:44:df:cd:1c:2a:42:28:00:84:66:84:6f:ea:13:
20:08:80:78:09:88:c4:e6:17:9f:79:9b:b3:e6:b9:07:a1:ea:
60:64:7d:10:77:0d:3d:78:69:34:23:dc:ba:f1:51:48:20:fb:
bb:10:bd:45:70:93:a5:d0:87:48:9b:5f:79:65:02:cd:08:a0:
00:ba:73:f0:b9:e8:35:e3:f8:8e:55:3a:61:64:7a:0f:1b:1a:
95:34:fd:e9:1a:70:ba:0f:aa:79:92:d1:a0:45:d3:bf:30:69:
09:4f:f3:53:af:5d:4c:b0:9d:e7:c9:df:f4:ac:ec:cc:4a:6c:
20:5a:4c:bd:d7:23:b4:6f:0a:c0:7e:ff:9c:23:75:88:ad:bf:
14:96:7c:65:eb:73:3a:ff:c7:44:9c:1f:5c:a8:6c:31:11:35:
5d:24:6d:cd:ff:d9:37:ed:3b:09:4f:04:13:bf:2f:25:67:50:
9a:91:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:40 2025 by rpki-client