
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier: 8Stm+yPWiMaKnHN6TNjxm0hiM0eDFn2pM74yZ0vegL0=
Subject key identifier: 1F:80:76:6F:77:41:94:FC:B7:D7:F0:C9:91:77:A7:BB:A4:B4:C8:0C
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial: 0197B70EC459668E06A840383F0DE2728B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number: 0582
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: HeBbSSo4QklJQyUdiaQV06SFKZkQQ8jvZcDVBnWQowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c4:59:66:8e:06:a8:40:38:3f:0d:e2:72:8b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=1f80766f774194fcb7d7f0c99177a7bba4b4c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:d3:5d:6e:73:c2:3a:ff:90:d4:7c:9d:43:
2e:8c:78:cd:32:eb:69:36:47:f2:19:a9:3e:bc:85:
54:c1:6b:74:04:1e:f0:90:97:7c:71:aa:45:be:be:
41:25:a6:45:41:cd:ae:2d:ce:7a:31:8b:9c:7b:f9:
e2:81:a2:b7:c7:06:b1:8b:00:3c:80:87:84:3c:60:
77:5d:28:a8:09:28:50:5b:39:d7:bb:bd:88:40:28:
bb:a5:d4:45:f6:6c:38:7e:ad:a4:13:d7:61:b1:7a:
b0:08:58:58:31:a3:af:5d:22:47:af:df:ff:5a:52:
bd:37:18:a8:f7:90:b6:2a:5b:8b:3a:9b:0a:d1:9f:
b8:3d:7a:8c:eb:b6:79:a7:d6:eb:b6:b4:db:71:55:
91:73:39:18:63:4f:df:59:dd:cd:79:91:e4:a3:4e:
04:4e:e0:87:a4:d6:c5:2c:c8:f7:ba:0d:1f:85:2b:
fc:0e:d5:96:a4:22:8c:97:27:4d:60:81:79:48:ca:
d7:1b:10:14:d5:26:ae:0c:e0:31:d8:91:8e:bc:c9:
f1:52:0e:d1:0c:65:f0:e4:0d:2b:b2:2c:2e:85:9a:
1a:7a:3e:ec:d2:9b:ef:97:76:07:b1:70:58:05:c6:
60:7d:a9:a5:a1:3b:0e:b7:92:d1:40:f4:5b:97:3b:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:76:6F:77:41:94:FC:B7:D7:F0:C9:91:77:A7:BB:A4:B4:C8:0C
X509v3 Authority Key Identifier:
keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:18:9d:d0:30:9e:68:4e:36:6e:69:80:57:4b:c3:57:4b:
09:d2:81:41:d0:6e:29:23:96:db:74:35:85:5c:0f:cc:eb:98:
e3:f9:d9:84:71:ec:a8:76:e8:96:fc:25:81:42:83:63:7b:f4:
18:65:24:47:52:98:39:af:68:f1:4d:0c:b8:67:3a:c8:32:47:
57:a9:2a:c0:fc:1a:7f:0f:3e:90:3f:00:70:a6:c0:67:65:cf:
26:06:f7:e5:88:fe:09:ab:fd:c6:ba:b0:30:8e:57:fa:29:eb:
71:18:ca:4e:6e:88:e2:68:eb:4f:13:e5:c8:3b:34:2d:08:24:
54:b3:21:c4:56:60:10:80:4b:4f:d0:4b:b2:ef:59:55:56:87:
9a:eb:3e:b6:eb:54:91:9e:2c:26:5e:99:20:de:28:7b:80:bc:
19:ef:60:76:19:b6:08:e7:38:50:80:44:2b:75:d0:85:e9:42:
9a:fc:dc:cd:29:ea:11:4b:21:b1:50:e3:53:43:f5:78:30:7f:
9c:e3:0b:dd:67:38:44:59:0b:97:db:d1:c6:3e:e8:8d:72:4b:
66:74:35:4e:84:74:e7:91:08:69:04:0b:31:c7:52:8f:b8:9e:
66:28:a9:c8:d9:a2:67:99:b9:ea:d7:c1:a7:d0:ae:6d:77:29:
a8:ab:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:04 2025 by rpki-client