Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: vUY07I0qnZ8blBwbNnj5ysurWSIEUWfDzMJdAZraYMo=
Subject key identifier: 2B:BF:30:CE:9B:45:B2:4F:22:47:93:6D:22:F8:78:48:F7:DE:17:4F
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 0197B6A0B3A7C28965069815B86BFF7B8497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: eOpawaZonOTMRQmgf4qYUC5tmnDwYJw0YnXsWD97nWo=)
2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b3:a7:c2:89:65:06:98:15:b8:6b:ff:7b:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=2bbf30ce9b45b24f2247936d22f87848f7de174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:28:cc:c7:04:3f:11:aa:f9:3d:7b:b7:fb:
2d:09:09:62:d9:32:87:43:43:e2:fe:99:83:6f:f5:
d7:e6:6e:68:ca:2a:2b:7a:40:03:56:e8:a0:88:1f:
4c:03:18:3f:f5:27:13:d8:1d:c0:8d:ca:47:b2:b3:
b7:9d:e1:81:54:39:d7:86:2a:aa:bd:ec:b7:59:27:
22:35:a6:22:41:14:1f:90:30:e7:94:a8:b8:06:38:
b9:4d:1e:bb:21:7f:e5:85:41:23:d7:7a:fc:54:63:
0a:5e:88:20:d2:6c:89:98:44:4e:0b:6b:fe:e9:e4:
3d:be:80:50:5c:df:f0:47:7e:36:ff:55:33:21:e2:
db:36:0d:91:89:22:2f:8a:b9:b4:a6:f4:c4:02:42:
03:25:55:bd:6b:b1:03:5a:41:2b:b9:47:bc:8a:a0:
4a:df:53:e7:c6:23:67:8e:bd:34:eb:7b:88:c7:27:
48:6d:f2:5b:ca:71:25:66:7f:70:f4:78:35:8f:a4:
b8:03:6e:51:66:06:77:1c:84:2b:1c:86:70:21:ed:
f1:84:42:4f:03:ef:5d:7d:e7:10:d9:c3:4f:68:d3:
d3:a2:1c:27:46:ca:ea:fa:61:f5:f7:04:03:c5:82:
a2:7e:87:85:68:01:3d:6f:f5:5c:70:55:ea:8b:80:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:30:CE:9B:45:B2:4F:22:47:93:6D:22:F8:78:48:F7:DE:17:4F
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2f:d6:7b:31:0b:f6:c6:da:2a:da:ac:19:9f:52:f0:93:2d:
a8:b8:4f:11:f4:8a:0e:9b:47:3c:9f:10:1b:91:6a:c1:6b:90:
2e:9f:b6:2d:af:c5:f1:2f:f0:79:9f:07:90:c5:8c:f5:bc:fa:
6c:5b:0b:09:5f:92:0c:d5:74:76:ba:f3:16:84:46:69:74:6b:
ca:14:04:21:54:6b:9d:c2:9a:5b:a5:b1:da:f1:24:7a:48:70:
80:81:f1:60:b8:fa:91:ec:70:ab:b3:fd:b8:f9:27:d7:6b:21:
ca:6f:d5:47:ad:b5:5d:38:9c:96:7e:36:1c:76:e3:16:e9:86:
54:b3:bb:87:ab:d1:b5:f4:9a:20:c5:33:a1:ec:11:db:21:bc:
e8:3c:72:88:19:c6:bd:10:5e:69:b9:e6:5d:17:bd:21:6b:4c:
68:95:8d:b8:6b:1d:38:68:8a:1c:d1:c4:3c:ed:6b:60:81:98:
2f:b4:8c:b4:98:8d:10:99:70:92:12:a0:de:37:88:83:00:9e:
30:91:5f:bf:5b:f9:0d:61:74:0e:50:a7:09:b5:87:70:39:5c:
dd:58:01:fc:aa:5c:97:31:8d:0c:b2:0e:0c:68:cc:dd:e1:9c:
54:a9:82:50:d5:a8:0f:2a:3d:d3:f0:a3:e1:da:ad:47:fc:8f:
af:f7:30:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLOnwollBpgVuGv/e4SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi
MTEzMzYwHhcNMjUwNjI4MTMwMTE0WhcNMjUwNjI5MTMwMTE0WjAzMTEwLwYDVQQD
EygyYmJmMzBjZTliNDViMjRmMjI0NzkzNmQyMmY4Nzg0OGY3ZGUxNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9cozMcEPxGq+T17t/stCQli2TKH
Q0Pi/pmDb/XX5m5oyiorekADVuigiB9MAxg/9ScT2B3AjcpHsrO3neGBVDnXhiqq
vey3WSciNaYiQRQfkDDnlKi4Bji5TR67IX/lhUEj13r8VGMKXogg0myJmEROC2v+
6eQ9voBQXN/wR342/1UzIeLbNg2RiSIvirm0pvTEAkIDJVW9a7EDWkEruUe8iqBK
31PnxiNnjr0063uIxydIbfJbynElZn9w9Hg1j6S4A25RZgZ3HIQrHIZwIe3xhEJP
A+9dfecQ2cNPaNPTohwnRsrq+mH19wQDxYKifoeFaAE9b/VccFXqi4AHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu/MM6bRbJPIkeTbSL4eEj33hdPMB8GA1UdIwQY
MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt
MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz
LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwS/WezEL
9sbaKtqsGZ9S8JMtqLhPEfSKDptHPJ8QG5FqwWuQLp+2La/F8S/weZ8HkMWM9bz6
bFsLCV+SDNV0drrzFoRGaXRryhQEIVRrncKaW6Wx2vEkekhwgIHxYLj6kexwq7P9
uPkn12shym/VR621XTicln42HHbjFumGVLO7h6vRtfSaIMUzoewR2yG86DxyiBnG
vRBeabnmXRe9IWtMaJWNuGsdOGiKHNHEPO1rYIGYL7SMtJiNEJlwkhKg3jeIgwCe
MJFfv1v5DWF0DlCnCbWHcDlc3VgB/KpclzGNDLIODGjM3eGcVKmCUNWoDyo90/Cj
4dqtR/yPr/cwUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:13 2025 by rpki-client