Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier: oWnle5S0yiUeIPtZ1JUNz40oI6hw1ovzj7gxzsFPszE=
Subject key identifier: AA:96:B4:6F:F6:03:B4:0B:03:A2:64:1C:96:DC:A3:A8:C9:AC:76:13
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial: 0197B96B0144A7713ABF147DD9C6775A5AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number: 0D10
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: rv9UL63Gvlu5yS8Abl+vq/egPFq4fPKpVW4fabS3GhE=)
2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:01:44:a7:71:3a:bf:14:7d:d9:c6:77:5a:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f4510444a17add7327146152943495ababb968
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=aa96b46ff603b40b03a2641c96dca3a8c9ac7613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:db:81:5b:aa:fc:1f:db:6b:03:4b:a8:f1:
59:7e:18:ec:c6:8f:c0:ad:dd:c7:f4:42:85:d5:30:
aa:4a:0b:c1:b5:e6:c0:ab:15:81:cd:9c:bd:fd:a1:
7b:de:ca:4a:04:11:1d:d4:c3:4b:61:50:31:b7:41:
97:2a:c3:ce:3c:bd:86:29:2f:9b:fd:13:74:3b:ad:
5b:d0:ad:50:c7:1c:44:4e:fa:2a:c5:59:39:44:99:
bf:9c:41:3f:55:dd:bf:85:d3:83:d5:52:67:f0:6e:
e5:d7:6b:31:f2:39:f2:64:e1:d9:26:14:90:c5:fd:
27:54:b7:56:6d:b6:2e:bc:23:57:67:a5:aa:14:bb:
d6:10:ca:f9:0e:d6:34:02:9a:3c:e3:e5:0a:80:57:
84:d3:49:43:b7:b4:82:2a:a5:9a:db:7f:90:71:38:
fb:75:30:ac:95:fb:c7:50:82:30:ac:ed:ef:0a:a1:
73:02:a4:f3:4f:82:e8:09:88:ab:99:8c:03:f9:6e:
ac:1a:47:8a:1b:d3:90:38:80:3e:66:57:c4:f2:49:
d8:39:14:08:19:97:16:88:5c:f2:75:62:6e:e5:7e:
b8:be:3c:e1:61:72:f7:e2:da:de:23:15:0c:e3:81:
46:3f:b2:a4:d3:5a:f5:81:f3:83:37:98:6f:85:cf:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:B4:6F:F6:03:B4:0B:03:A2:64:1C:96:DC:A3:A8:C9:AC:76:13
X509v3 Authority Key Identifier:
keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:25:da:37:1f:18:af:c5:49:62:be:25:64:f5:b3:ed:3d:95:
f5:ce:af:bf:b8:44:2d:47:0d:54:7d:d0:d8:33:fc:b9:9a:f9:
2d:78:b6:c5:6a:1e:c4:03:11:3d:aa:4a:47:05:03:c1:b3:d3:
e7:08:c5:c4:df:fd:4f:bb:2e:56:b6:38:93:d4:ce:ca:78:fe:
6c:c3:23:4b:3d:fa:f6:b4:c4:db:c1:e6:d1:88:cf:43:a8:d3:
43:79:a9:5d:db:e8:c6:ae:1e:8c:ed:53:6e:d6:53:1f:d8:57:
de:83:a8:de:3f:b7:6c:ad:b0:39:a2:00:34:b0:26:10:9c:49:
a3:3e:4d:04:46:ed:93:e9:b0:48:16:56:bf:1a:34:f3:fe:1e:
71:c5:e4:41:99:36:9b:f5:fd:48:e2:b9:96:39:c3:35:6e:40:
53:42:0f:b3:88:c9:cc:aa:26:6a:8b:d0:b9:da:35:2a:72:aa:
92:f5:ab:88:f7:a2:23:61:33:5f:17:c5:32:31:d9:c5:56:88:
a7:73:ce:d5:6e:5a:fa:14:d8:c5:32:03:9d:07:19:f9:69:21:
26:8c:87:71:e5:6d:1d:3e:74:78:70:12:5d:67:a6:89:a7:5f:
c9:e1:5c:34:f9:2e:88:00:92:11:3e:b6:a4:57:80:87:6f:20:
83:76:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:46:41 2025 by rpki-client