Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File: 6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier: CeK6zQ2EIrGYU5JJ/mOgcFuCHQOVj7306E1Myc4l9Q8=
Subject key identifier: 20:E2:6B:17:88:E8:FB:66:17:DB:8F:BA:BD:54:9B:0A:F5:FC:80:3A
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer: /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial: 0197B6A1ECFAF88F6BA3490836BA01AEA6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number: 0A99
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: q9NYEAvrdP8DonKq0kTDMlrIXq4bvuGWJ3YB8RtkBr8=)
2: gWnW9lnMPM8qZ8END1_wzvVFr0k.roa (hash: c0ARRE6viXKVlOCnUB1u64Fg2irbTI2KZRKH/h8XIAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ec:fa:f8:8f:6b:a3:49:08:36:ba:01:ae:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=20e26b1788e8fb6617db8fbabd549b0af5fc803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:a1:66:29:09:c5:02:f4:f1:a5:c3:16:fd:
c0:d6:38:be:4e:cb:51:52:e9:a6:02:48:37:50:3b:
be:37:08:1b:3a:b2:67:ba:ee:48:42:e3:a7:30:b6:
7e:69:c0:af:c0:a8:d9:dc:a8:67:a6:44:ed:92:12:
cc:88:e5:61:f7:b3:98:9a:13:fc:da:6e:ce:6a:79:
18:b2:7e:cf:81:cd:f7:7b:9e:b5:d6:3d:3e:92:77:
d4:0c:22:8d:c8:ad:5a:99:08:f1:6b:7b:5f:0c:1e:
11:4d:46:2a:5b:e9:ba:71:73:d1:14:81:d6:78:6e:
dc:12:f6:34:e4:1c:47:68:45:4c:d6:0c:a5:6b:b1:
09:eb:37:1b:c2:7f:45:ce:44:8f:52:b2:f4:1e:ae:
7f:98:52:a8:eb:1e:05:39:28:62:eb:83:22:f5:e7:
87:83:d8:b8:20:99:8f:49:ef:04:5f:7b:91:89:13:
73:a1:0d:7e:3e:b7:ee:24:c8:4c:91:72:67:78:df:
d7:b7:b4:0b:a2:80:37:6e:c9:61:9c:bc:c3:05:c6:
3f:0c:7a:b0:8b:ee:9d:c7:c7:4f:d2:8c:c8:35:32:
d7:a1:09:82:2f:ed:8e:dd:50:fe:cc:0c:43:95:3c:
f9:b7:25:87:66:55:96:9b:48:61:66:8a:5c:34:08:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:6B:17:88:E8:FB:66:17:DB:8F:BA:BD:54:9B:0A:F5:FC:80:3A
X509v3 Authority Key Identifier:
keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:7a:6f:29:52:7f:a8:68:bc:7c:51:09:96:16:e4:22:45:
a5:33:79:b8:65:6f:cd:10:ff:0a:98:e9:fc:32:f7:57:27:dd:
bf:df:bc:02:4d:31:71:ed:2e:7e:d6:fd:66:2b:e6:5a:cb:ed:
aa:ce:ad:55:52:9f:4c:89:a6:02:15:45:09:2c:6b:ec:43:38:
5a:4c:93:87:ea:32:6f:46:7a:f5:75:1f:42:10:5a:29:ba:f5:
ec:96:b9:48:eb:1e:71:16:15:01:c9:6b:af:fc:d2:9c:d0:2b:
20:65:61:5d:76:1b:69:ce:25:32:c6:46:e8:56:e7:8b:09:fa:
f9:91:bf:47:f1:b2:07:c5:de:c4:c9:dd:49:a6:8d:31:86:f1:
d9:fe:cb:93:db:b0:bb:81:fd:7b:ae:40:68:3d:38:bb:5f:45:
a6:c5:70:2d:8a:73:ad:e0:33:6b:6c:c8:06:49:44:c5:46:fd:
21:35:f0:78:95:ac:40:70:b2:ef:5e:1f:95:0c:8c:b8:ad:9d:
58:fd:7c:2f:06:fa:d9:6f:69:bb:14:9c:46:a8:0b:0c:18:54:
e0:ef:4f:a1:78:41:fb:cc:e9:1d:e0:ca:98:df:8b:79:ce:3d:
a5:03:39:e9:f6:64:6b:f4:a0:7f:56:a2:19:9e:eb:3a:31:21:
12:87:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:33 2025 by rpki-client