Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: ZmcvFGlWptwGL0YGmpNxlJWsPP5jZi/Shkq1pHDVfkU=
Subject key identifier: 0F:6F:1E:15:05:BF:2F:35:AB:CE:50:0D:AE:3F:2E:1C:C6:4E:EB:13
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0197B77C03B5F9D41A31D45A9534803B1595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0D2C
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: 9jsDRyIZwYlyuKCRFzsgNT2vrWTY2pUW9dwILoSYVjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:b5:f9:d4:1a:31:d4:5a:95:34:80:3b:15:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=0f6f1e1505bf2f35abce500dae3f2e1cc64eeb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:ed:8a:c2:cb:02:e6:4b:24:e1:e8:d8:aa:
c2:ba:69:2d:36:b4:b5:ba:70:ea:cb:fe:20:4f:eb:
08:36:32:fb:1b:c5:97:ab:f3:0b:71:19:94:64:59:
33:66:45:86:13:53:da:12:90:35:fb:ce:33:72:98:
23:dc:f9:2e:e3:85:9f:09:af:f7:c3:a1:e1:a5:f1:
f7:1c:6c:0b:d3:0d:7f:5b:53:22:4c:40:bc:ac:44:
89:e3:e2:e1:bf:a4:e6:95:2c:04:7f:b4:a6:18:0e:
b4:fa:c3:f0:1f:62:cf:0f:6f:8c:ce:40:57:b8:91:
d1:dd:c6:86:d3:30:41:f7:3b:07:58:aa:16:ba:d2:
ba:e4:e8:c9:18:0f:b8:51:37:a7:4d:da:5d:fd:93:
b1:b9:95:7f:27:aa:e8:90:a7:52:63:70:4b:7f:81:
ad:64:f7:c3:ce:9c:87:c4:48:44:3f:e2:2f:1a:69:
69:00:2f:6f:fa:06:0b:45:98:c2:af:f9:c2:86:db:
a6:29:d0:96:02:54:c5:99:8c:85:0b:30:8f:3e:84:
ce:34:43:f5:63:5f:42:b8:ac:0e:e6:6a:56:16:19:
98:45:1b:88:55:5a:92:e8:cc:e5:ec:b5:2c:9f:2d:
53:45:9d:d3:29:6e:1b:3e:80:81:4c:70:89:8a:de:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:1E:15:05:BF:2F:35:AB:CE:50:0D:AE:3F:2E:1C:C6:4E:EB:13
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:40:80:2e:87:74:4f:26:d3:c0:18:99:b4:32:71:94:08:b8:
53:9b:34:21:6b:0b:6c:81:84:1f:76:93:54:82:02:24:74:cf:
29:6a:b1:95:1f:52:5c:e2:cd:58:4d:40:b5:e7:f2:5e:2f:67:
bf:53:7b:89:41:45:1a:46:e8:d6:0c:74:04:16:31:7d:99:8e:
42:73:91:29:01:b7:32:05:f6:dc:f6:b1:35:41:48:30:c8:96:
d6:a0:dd:98:15:f4:8c:67:e4:c4:13:79:38:d1:b5:70:c9:59:
c3:a0:c7:46:e2:73:bb:e1:76:4d:bd:9f:17:39:67:05:38:12:
b0:69:35:b8:a8:c0:4f:00:7e:cd:b1:b5:1c:d8:f8:c7:a1:5c:
f4:e6:fa:48:65:83:3a:47:f9:50:ab:bf:ad:ca:32:34:a0:24:
25:fb:0a:84:e9:e1:bf:e2:3a:8d:f2:29:d6:7f:bc:26:f7:8c:
1a:44:05:f1:6a:27:91:e0:d4:71:07:9c:3e:fd:bf:43:45:4e:
9c:52:73:5d:a3:47:83:60:48:27:25:03:99:e4:ba:df:1b:f7:
53:e6:39:61:39:a6:21:8c:96:16:9d:25:bd:c4:f4:bf:2a:03:
39:a1:ec:97:6f:81:89:ce:8d:f1:68:51:77:ac:1d:c2:16:c4:
e9:34:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:08 2025 by rpki-client