Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: 6uFx2kkh4rYgasIzhSQv1WXsUA29ayJAvSwA9Dzh4KE=
Subject key identifier: 91:C5:57:FF:3B:EB:70:0A:2A:7F:9E:DA:F9:A4:4E:36:6E:88:A0:2B
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 0197B6A12FA6A3A4143405C64AD6CAF6417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: /pXdK7rL1cLRb9ePavL0WH3VzTP8GudIJB221Kgql1s=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2f:a6:a3:a4:14:34:05:c6:4a:d6:ca:f6:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=91c557ff3beb700a2a7f9edaf9a44e366e88a02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:a1:6b:af:5f:15:f7:71:3a:ab:ee:23:74:
37:97:16:00:d9:a3:c3:e9:d4:9e:d9:93:16:79:fc:
88:e0:98:e4:be:9e:b8:1d:20:0b:37:fa:28:91:17:
49:87:39:e1:a6:b3:09:d9:7d:10:fc:5b:9a:ba:7c:
d6:5f:df:82:0d:1d:a8:91:ee:1c:b2:6f:9b:1d:0f:
59:f9:4b:b3:c0:23:4a:11:ef:f2:8c:3f:37:ed:d0:
3d:af:c0:70:d4:4b:e4:b2:ec:80:3e:92:3b:7b:13:
17:30:0a:a8:85:a8:5b:1c:1d:f2:2c:35:0a:f8:97:
51:8f:2e:9b:16:f7:1f:8d:17:b7:63:b2:00:0c:3f:
31:54:5e:9b:a7:50:e5:f7:43:00:bf:2b:81:d6:fd:
3a:4a:60:40:0b:13:da:f0:af:3f:17:48:5a:6d:98:
53:37:3c:50:a3:7a:9b:a1:8e:6e:f6:2f:2b:46:4c:
eb:67:86:e3:e8:33:95:82:5e:50:f8:b0:b5:dc:ee:
48:70:38:59:3f:f9:8e:99:e3:f7:49:9a:75:6f:f6:
64:00:8a:a5:3c:31:2c:3e:45:e5:d2:25:fc:c1:70:
de:01:84:bf:35:e2:66:97:4f:e5:0a:76:c3:12:aa:
cf:b6:e6:09:2d:93:2b:c6:1b:1b:03:3e:8b:37:4d:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:57:FF:3B:EB:70:0A:2A:7F:9E:DA:F9:A4:4E:36:6E:88:A0:2B
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:d0:8f:ea:db:79:e3:d0:65:d3:62:0a:15:6a:41:79:2c:
9f:6e:73:a3:41:35:a1:fe:db:d2:a3:15:6c:d4:d2:d1:aa:90:
33:43:47:4b:7d:af:91:8e:43:50:61:bf:1e:e5:d7:b5:2a:52:
d5:04:68:e0:b1:ec:40:ae:8b:a1:38:b4:20:de:4a:21:7b:55:
b8:4e:1f:7f:f5:3e:8a:6c:87:ce:f5:cf:9f:f3:58:f4:fd:ae:
4e:7f:a1:e1:e5:ef:74:e1:95:7b:a8:46:25:6c:ec:a0:fa:0a:
2f:fd:c8:1e:e6:17:9e:e6:ec:7a:f4:1f:8f:ef:f5:c0:84:13:
01:19:e1:fd:c9:16:51:98:d4:fa:cc:71:2e:20:c4:f7:2d:fa:
18:87:8d:2b:5c:91:3e:36:2f:6a:43:71:e6:67:75:dd:7d:84:
70:fe:07:cb:49:00:f1:80:39:21:18:80:85:6c:cb:30:1c:53:
2a:a1:55:e9:6b:1e:3f:ee:2d:f7:c5:ce:2e:1d:23:46:86:e1:
ad:1f:bb:3c:6f:2d:04:7d:76:6b:cf:1e:da:95:72:82:bb:6c:
b8:ab:df:20:ff:0a:7d:1a:cf:85:db:60:55:ea:2a:db:15:79:
8d:e7:ad:37:87:9b:b3:bc:b2:67:ba:f0:d3:1d:bc:3c:73:07:
72:70:27:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oS+mo6QUNAXGStbK9kF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTNmMzNjY2RmYzVmZTg0Yjg0YzE1ZjA0MzIyOTA2OTkx
YWY5ZTcwHhcNMjUwNjI4MTMwMTQ2WhcNMjUwNjI5MTMwMTQ2WjAzMTEwLwYDVQQD
Eyg5MWM1NTdmZjNiZWI3MDBhMmE3ZjllZGFmOWE0NGUzNjZlODhhMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqreha69fFfdxOqvuI3Q3lxYA2aPD
6dSe2ZMWefyI4Jjkvp64HSALN/ookRdJhznhprMJ2X0Q/FuaunzWX9+CDR2oke4c
sm+bHQ9Z+UuzwCNKEe/yjD837dA9r8Bw1EvksuyAPpI7exMXMAqohahbHB3yLDUK
+JdRjy6bFvcfjRe3Y7IADD8xVF6bp1Dl90MAvyuB1v06SmBACxPa8K8/F0habZhT
NzxQo3qboY5u9i8rRkzrZ4bj6DOVgl5Q+LC13O5IcDhZP/mOmeP3SZp1b/ZkAIql
PDEsPkXl0iX8wXDeAYS/NeJml0/lCnbDEqrPtuYJLZMrxhsbAz6LN02aBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHFV/8763AKKn+e2vmkTjZuiKArMB8GA1UdIwQY
MBaAFOpT8zzN/F/oS4TBXwQyKQaZGvnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQt
OGE0ZjYzZWE5YmYxLzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQtOGE0ZjYzZWE5YmYx
LzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDXQj+rb
eePQZdNiChVqQXksn25zo0E1of7b0qMVbNTS0aqQM0NHS32vkY5DUGG/HuXXtSpS
1QRo4LHsQK6LoTi0IN5KIXtVuE4ff/U+imyHzvXPn/NY9P2uTn+h4eXvdOGVe6hG
JWzsoPoKL/3IHuYXnubsevQfj+/1wIQTARnh/ckWUZjU+sxxLiDE9y36GIeNK1yR
PjYvakNx5md13X2EcP4Hy0kA8YA5IRiAhWzLMBxTKqFV6WseP+4t98XOLh0jRobh
rR+7PG8tBH12a88e2pVygrtsuKvfIP8KfRrPhdtgVeoq2xV5jeetN4ebs7yyZ7rw
0x28PHMHcnAnnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:19 2025 by rpki-client