Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File: 6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier: 6CkPFVA3S5X+qwosdla0K08qCHwZb0qKbsQVWyxUFOA=
Subject key identifier: C8:7E:CB:05:CF:62:A1:88:A8:96:E6:06:A4:F0:05:13:56:CD:C1:D7
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 0197B7B32E8605817404100766C9EBC6D781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number: 087F
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: x4/R8z9410wrxdaJ6O0N0S0bdPsCpDAv29+WdM51HMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2e:86:05:81:74:04:10:07:66:c9:eb:c6:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=c87ecb05cf62a188a896e606a4f0051356cdc1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:80:30:e9:74:84:91:32:6f:15:c1:e4:52:
ac:bb:95:db:b2:59:c3:e2:af:58:fc:d8:6e:09:9e:
ef:79:18:52:f4:77:74:9a:1d:fc:11:95:f7:f7:12:
b3:99:6d:5d:f5:b0:bf:47:7b:53:c4:e8:2d:b0:d1:
90:3f:64:2d:f2:95:5e:00:ac:59:74:29:ac:7a:1c:
51:ae:3d:e3:b9:f0:69:b4:00:37:cf:30:ef:d2:c7:
0a:a6:4b:ab:d7:90:a6:2f:be:1e:e7:d5:80:5d:38:
e1:af:39:2c:79:42:25:e9:9e:f1:21:fa:9b:eb:e4:
17:e1:8e:06:a4:34:df:49:6c:3a:30:3e:f1:0a:36:
1f:f4:21:c4:6e:6a:5c:7f:16:12:4b:8a:27:37:26:
fa:05:f6:71:60:1d:5c:7a:96:a8:ce:e8:03:6a:51:
40:8b:e6:0e:a2:10:4e:df:6e:a9:49:ef:a0:bf:65:
ba:e2:5e:ba:ae:b4:cb:fb:74:f9:9b:f5:8a:da:cd:
d5:b5:98:46:e6:4e:1d:e6:5f:cd:8e:70:40:02:37:
6e:2b:19:9d:62:ef:f0:66:23:09:a2:71:d0:b3:5d:
0b:1d:7e:bd:d1:df:8a:2b:f4:fc:29:dc:ed:6d:3e:
82:78:39:a8:ef:1f:9a:b2:d8:7c:60:be:df:a0:95:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:CB:05:CF:62:A1:88:A8:96:E6:06:A4:F0:05:13:56:CD:C1:D7
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:89:d9:b3:d7:5a:89:72:af:3b:26:39:35:2d:d7:ee:72:f6:
52:a1:ed:85:92:30:7e:29:40:96:19:30:76:67:76:b2:a9:df:
62:78:37:c5:89:0e:e1:84:60:c1:e6:fc:93:b9:2e:88:ae:f1:
74:4d:3a:32:52:87:ac:7a:67:ab:a7:a2:83:6b:03:03:23:f2:
80:3a:91:1a:e6:79:6d:b2:e2:c3:94:af:6e:ec:f4:08:72:fd:
d8:a1:44:b5:51:2f:91:8e:e4:e5:9c:87:d5:48:94:88:b0:1d:
89:ea:8a:e8:76:12:6f:44:36:ce:67:dd:f1:cb:ea:70:3b:25:
91:9a:a3:ea:c5:b3:1a:0a:cd:4d:d3:c6:81:d0:cb:cd:66:60:
f8:90:b4:88:9f:c4:00:05:f0:fd:90:bb:f4:c4:c1:52:06:32:
26:79:d0:0a:09:44:29:c8:56:0e:ac:2a:5c:54:11:8e:83:05:
32:ea:6c:8b:dd:34:d7:9c:68:1b:26:63:15:3e:20:fc:24:83:
16:f3:83:ef:31:51:d4:00:c3:ce:61:19:a2:85:c0:c4:a3:23:
e9:f7:ff:67:18:76:74:91:34:ea:e2:85:25:09:0a:8f:62:28:
fb:fb:64:b3:a7:45:d7:7b:ba:d0:1d:1b:44:58:37:d2:5a:99:
5a:59:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:07 2025 by rpki-client