Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier: kHyLMhMCTIHQ/phk19tm6phvGYbyjmrxS3M1nF8N9QU=
Subject key identifier: 65:11:4C:00:D3:E2:F7:1B:67:D5:46:CF:D8:2B:EC:67:EB:F9:BC:BB
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 0197B74537C9F19BFD169C9DE7B8F8E88EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: sR8RkPS4NG4m8IUiqPr87I8jsoc998q7OfTwjy9aXhw=)
2: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (hash: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:37:c9:f1:9b:fd:16:9c:9d:e7:b8:f8:e8:8e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=65114c00d3e2f71b67d546cfd82bec67ebf9bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:ce:ae:8c:b3:01:d2:99:bd:70:12:70:7b:
8a:16:59:13:c6:f3:57:3e:36:1d:20:21:29:85:b2:
b9:c1:bf:62:e8:67:c9:98:ce:f9:bc:d7:e4:94:1b:
12:db:09:8d:e7:ea:39:25:39:76:6b:e8:a5:22:f8:
ce:61:6a:71:95:f5:18:46:55:ff:6d:c8:b8:8b:09:
9e:6c:4b:13:ee:50:f8:54:56:8d:30:44:d8:2b:f3:
79:37:ab:66:68:03:e2:08:c9:d4:55:51:7f:94:0d:
84:b2:73:9e:a3:87:05:6f:ab:f0:16:a8:c2:bc:5d:
00:c5:89:80:3e:2d:94:5a:68:92:66:dd:98:61:67:
df:7c:55:72:fd:1a:cc:5e:f2:f4:e2:e7:aa:03:14:
86:5a:3d:17:1b:0b:0c:05:84:66:3e:ce:ef:11:09:
d5:d4:fc:43:8f:6b:5b:3d:63:ca:e1:b3:8d:77:c3:
44:65:63:03:da:db:5e:d7:58:b4:fe:b3:c9:88:ac:
aa:00:b2:c5:65:51:6b:ce:8d:a0:9a:d5:ad:60:3b:
76:10:0d:f5:68:60:a5:e5:7b:50:ea:db:e7:7d:80:
17:21:f7:8f:71:99:8f:31:d3:70:91:34:17:9e:96:
8a:e2:ae:42:fe:18:99:33:74:d3:78:ef:87:3b:0a:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:4C:00:D3:E2:F7:1B:67:D5:46:CF:D8:2B:EC:67:EB:F9:BC:BB
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a4:de:b1:b7:18:a8:cf:85:7e:33:39:db:2b:7a:df:68:15:
3c:3d:25:67:2f:30:2d:fc:d9:04:37:96:c4:20:f3:c2:b4:67:
48:57:e0:7a:7f:81:c6:25:4d:6d:b4:bb:38:42:6f:61:2f:6c:
75:8c:58:22:82:5c:95:5a:a7:84:62:6e:99:cf:d5:7c:68:38:
4a:ad:b3:e0:49:4e:96:a8:16:fe:77:ae:36:67:d6:53:2c:81:
79:3a:e2:f8:55:25:e6:94:44:00:09:e7:31:68:57:cf:79:c7:
6d:5c:bf:db:8f:df:bf:52:02:09:12:93:52:25:4e:c8:6a:91:
86:59:b7:ab:89:0e:c8:48:67:dd:56:63:13:87:65:44:01:60:
ff:63:77:82:9f:b0:b3:ff:fd:fa:8d:36:11:2f:12:5d:4f:83:
4f:50:d4:8f:60:86:f6:23:48:77:4c:b0:fb:bf:97:42:ba:3a:
b7:db:91:38:f2:c4:40:9c:ac:12:3d:bc:fd:93:c7:20:2a:f4:
e3:cf:2e:1a:1c:89:16:24:2b:30:7e:67:51:d0:1b:5c:9b:92:
9a:71:2d:a9:ca:c6:47:03:fc:b7:29:47:45:ff:07:5e:ae:db:
a0:b0:35:d7:bb:5c:bb:da:60:f7:72:39:c7:28:a4:9f:63:15:
cb:31:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:17:09 2025 by rpki-client