Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier: tO5ANTOd5jL+7kHpAc15QV64E9mECZ0QgfacDezYT2c=
Subject key identifier: AD:E7:38:C6:DD:FC:42:36:D6:6A:B2:37:8F:6E:4D:4F:B1:6E:25:93
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 0197D5191B1E387F99BBCBC65B0E34D0A0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 11:01:21 +0000
Manifest this update: Fri 04 Jul 2025 11:01:21 +0000
Manifest next update: Sat 05 Jul 2025 11:01:21 +0000
Files and hashes: 1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: azqHACATZqGACE0698JlfvRXphDRHFvMEqlraIIr48Y=)
2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:19:1b:1e:38:7f:99:bb:cb:c6:5b:0e:34:d0:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jul 4 11:01:21 2025 GMT
Not After : Jul 5 11:01:21 2025 GMT
Subject: CN=ade738c6ddfc4236d66ab2378f6e4d4fb16e2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:83:53:74:2c:eb:49:fb:3b:70:82:14:75:
77:06:10:38:f6:ea:b2:56:e1:f8:ec:7d:77:8a:8d:
e4:06:e9:a3:4a:91:e8:51:4a:0b:ad:34:bd:c2:54:
40:5b:b8:26:2a:47:80:b7:2c:8c:89:18:ce:48:07:
61:6b:99:02:7f:75:ea:f0:2b:64:b4:4e:d6:b3:8a:
8f:6a:b6:e4:6d:ba:fb:bf:a3:96:26:99:35:40:82:
3e:1e:3e:8f:11:de:f7:56:73:d4:87:56:ad:08:73:
d9:f7:a5:9c:1a:d9:1b:1d:d5:63:92:e1:e1:c3:b3:
69:64:dd:86:8b:33:10:b0:1d:c8:ca:5f:11:d6:1d:
fd:09:59:1e:be:04:20:2b:32:9f:38:8e:3c:e8:33:
84:d3:81:0c:98:a3:ef:3f:71:97:a3:77:15:d6:7e:
a3:75:88:0f:e3:8c:35:fc:9e:c0:ef:0e:7d:84:bd:
78:1d:49:9d:c4:31:9e:ce:a9:0f:5f:37:4e:2e:99:
01:59:37:7b:da:e9:41:d3:49:c7:f0:cd:42:0e:ff:
09:65:5f:73:56:7a:5f:e4:b6:4a:0b:5b:db:6c:ab:
79:7c:7b:bd:ec:c5:6a:aa:3c:08:ac:12:ac:17:7f:
74:ac:21:e1:b6:39:ef:24:e0:4c:2e:c7:27:7d:ac:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:38:C6:DD:FC:42:36:D6:6A:B2:37:8F:6E:4D:4F:B1:6E:25:93
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:bb:7f:aa:ad:50:4f:5a:4f:60:25:47:02:c4:6e:17:24:
ab:94:26:48:d8:85:86:e4:fe:cf:27:de:19:a7:30:49:17:92:
ca:52:48:25:74:72:a9:02:61:75:0c:bb:d2:f6:ef:3e:82:3e:
07:b9:de:a1:f5:dc:5e:da:7f:06:fe:87:81:78:b2:dc:4f:1b:
a7:09:e2:48:0b:58:f6:00:e1:81:8b:27:9f:32:04:44:58:db:
16:b5:ae:ae:2b:42:92:3f:4a:28:e9:65:50:68:d8:a4:7e:f0:
04:06:93:a6:40:85:58:44:04:d5:bd:0f:5b:61:41:dd:fd:6b:
b7:25:d7:92:a4:0c:61:06:97:f6:5a:b1:f0:3b:26:a9:fa:90:
e4:83:30:41:d6:fd:86:c9:86:60:43:5d:c5:a7:ed:39:e9:01:
d3:e3:fd:23:17:57:a0:40:1d:62:c1:96:0f:28:a3:e4:f1:38:
30:d2:e6:bd:01:2b:da:88:48:79:eb:1f:a3:79:5d:91:1e:27:
c3:4e:67:11:03:a3:09:e8:22:8b:cb:f6:75:c4:d1:c3:20:6a:
55:42:eb:0d:0b:1c:50:a5:b1:c5:60:3e:d5:a5:a1:21:44:12:
7f:f8:53:2a:b5:7c:0d:79:ce:f3:1b:a8:c6:da:89:9f:d5:8c:
1c:0e:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:18:15 2025 by rpki-client