Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: Y0+I+5f2vZUCh12Dg/12/1YEvbto7/oK4YOvaVzorE8=
Subject key identifier: 89:66:8B:08:3F:59:03:83:68:B6:2B:DE:99:D9:4B:CE:79:D2:60:DF
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 0197B70ECFE640ED5E52FD00942FC12119A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0C26
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: 9Z/rLYdZi3ZFS2dTQjSDSEgwsASvt5GIX+gKKcUNuSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cf:e6:40:ed:5e:52:fd:00:94:2f:c1:21:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=89668b083f59038368b62bde99d94bce79d260df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:60:be:74:e1:68:fa:73:df:14:1f:cd:8f:
9e:f5:cc:4e:2d:8f:fe:bc:f0:eb:55:a9:c6:1c:51:
5a:f2:79:e5:5b:d1:e4:ae:59:24:f2:ef:05:e3:d5:
2c:5c:23:ad:92:cd:15:e1:93:ac:74:dc:1d:95:27:
74:b0:0c:48:33:e8:27:26:70:40:b2:25:c8:97:7f:
65:95:04:fb:ff:9a:0f:c5:9f:6e:79:36:4c:5a:48:
dd:d5:d7:88:72:88:65:10:56:e4:33:0e:6f:bc:d6:
3f:5a:cf:fe:0f:00:40:99:bf:11:d1:ba:09:90:35:
cb:99:e4:80:dc:c4:c0:68:9d:4d:d5:ef:86:f8:c5:
fd:7b:1e:83:bb:30:0a:9b:ea:23:88:05:8e:1c:73:
ae:91:6d:8e:31:dc:cd:b8:16:84:a1:b9:66:3a:bb:
4e:e0:b0:34:e7:a1:1b:3c:56:61:b3:63:a2:03:fe:
c7:21:28:ba:38:f9:5f:7e:67:01:2b:da:5c:ae:4f:
87:cd:0f:e1:3e:83:ac:58:e7:f3:4d:d3:3a:ba:a6:
bb:31:82:d9:d4:8c:b9:84:c0:39:9e:a3:34:59:96:
55:41:a3:4a:23:94:38:f5:ca:6e:62:2f:93:89:75:
53:a9:69:48:34:62:2b:c5:2b:0b:d7:a5:3b:11:81:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:8B:08:3F:59:03:83:68:B6:2B:DE:99:D9:4B:CE:79:D2:60:DF
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:59:78:4a:46:76:f2:7f:c2:0c:85:51:b4:0b:56:89:d8:e0:
de:20:a3:cd:d7:28:3a:57:91:32:f7:a9:5b:f2:6c:ae:1a:04:
11:07:dd:cb:eb:9d:9e:33:c9:78:c3:0a:92:13:b9:d8:b2:da:
34:6c:4f:ae:fc:37:36:54:da:2a:44:0a:86:6f:7b:31:ef:d3:
12:1a:02:5d:b4:e1:1c:44:30:6f:3d:ae:64:cb:1d:de:a1:be:
dc:05:c6:b3:1b:89:24:e9:00:ff:5c:95:b6:3b:c3:89:5c:3e:
36:9b:8f:9a:32:47:01:a1:45:6f:30:0f:98:17:10:5e:00:8f:
6b:53:0d:87:e1:fd:cd:22:e1:f6:21:8d:50:2a:ed:ee:8b:e1:
35:2a:b9:5b:12:fd:78:c4:ce:ab:ac:41:16:fa:e2:c7:65:ae:
3b:49:6d:e2:44:7a:61:9b:47:9b:e3:2f:8e:91:bb:c9:13:52:
97:78:30:4f:38:76:5b:d1:90:ca:c5:db:ff:85:c0:20:23:bf:
89:01:2f:f2:ee:08:8b:cd:ef:4f:90:32:7b:99:b6:1a:03:6d:
59:fb:82:9c:21:ef:51:92:66:79:57:a7:3c:04:a2:36:ad:26:
14:ab:3e:c5:a2:70:2e:d8:85:10:b6:0b:e8:c3:83:df:94:32:
f4:40:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:29 2025 by rpki-client