Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: +j8QsUqGGfo7DPo6x6JaVgVqfSLBTOOvXyJF8xIJLxA=
Subject key identifier: FB:83:46:01:BD:15:AA:C6:4C:59:52:8A:5D:BA:1B:9F:2F:51:09:8D
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 0197BB90040F17D0BA4EE656B5B877A69E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 12:01:06 +0000
Manifest this update: Sun 29 Jun 2025 12:01:06 +0000
Manifest next update: Mon 30 Jun 2025 12:01:06 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: UMLJRDFN6vTM5LOzVGPTqJy/P8/Ti7hBgCI/pAhhdz4=)
2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:04:0f:17:d0:ba:4e:e6:56:b5:b8:77:a6:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Jun 29 12:01:06 2025 GMT
Not After : Jun 30 12:01:06 2025 GMT
Subject: CN=fb834601bd15aac64c59528a5dba1b9f2f51098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:00:9f:08:f2:6d:82:8a:a9:cf:16:09:0f:
47:2c:61:0b:96:b2:77:74:04:38:36:9d:e2:8f:0d:
c4:cc:15:91:ce:5c:2b:93:1a:aa:e3:e0:bc:be:ed:
a5:ef:98:fb:bb:23:01:b6:dd:24:ed:7c:10:36:bd:
c3:67:80:3a:26:4b:66:cc:42:67:5c:34:4b:fb:2a:
1a:86:1a:3f:9e:dc:45:c0:b8:d3:01:cd:93:32:c6:
30:b3:95:bf:9d:e5:69:f4:6d:28:8d:32:85:36:4e:
24:63:4f:6d:0b:e0:61:99:54:91:5a:d3:c5:04:79:
2d:3e:0b:26:11:ca:b2:cb:08:4f:28:4e:07:44:ed:
a8:61:5b:2e:5d:a1:f3:5f:41:7e:7c:48:f5:d3:cc:
a8:0a:2b:17:aa:56:07:79:6d:57:d8:55:13:63:7b:
5d:14:62:2c:67:7d:df:43:dd:8d:83:aa:98:60:4e:
07:ae:c1:34:eb:fe:86:e8:2b:74:37:60:c8:10:99:
d5:ec:82:a8:4d:a9:b1:6e:b2:35:08:e1:d7:fe:3b:
f8:04:06:d9:6b:93:27:dc:22:bb:24:72:05:e5:9a:
01:1c:40:a5:69:c8:65:f7:ca:df:57:70:8f:96:7a:
c6:41:dd:e8:6c:e2:cb:3a:00:99:1a:f8:64:f9:40:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:46:01:BD:15:AA:C6:4C:59:52:8A:5D:BA:1B:9F:2F:51:09:8D
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:bc:58:39:97:16:6f:a6:44:d9:a0:71:6b:bd:a2:e4:60:
52:ca:a8:67:ac:ef:03:5f:e9:bd:75:71:04:40:e0:de:57:dc:
3a:0f:98:08:9f:3d:8b:01:6e:37:d4:9d:76:4e:3c:e2:8b:b4:
6a:ab:f9:7c:eb:5d:d6:08:c3:ca:42:d1:c5:9a:91:ad:db:24:
2f:89:b9:93:38:d8:c5:f0:47:96:6a:d6:6d:bc:d5:f0:85:57:
a5:fd:c7:e8:e0:a8:49:89:8a:af:43:85:87:5d:e4:64:b8:ba:
07:15:eb:31:da:1d:ea:09:bd:1c:4e:86:7b:52:ba:8b:b5:b8:
59:e0:7f:78:73:d2:31:8d:ac:0f:a6:05:90:c4:49:84:3a:26:
56:36:7a:c3:a1:f5:f2:19:0f:3a:b8:8a:b7:f2:9a:3f:c0:b8:
7a:07:5c:04:02:5f:b6:f6:7c:97:12:25:35:87:fe:eb:1a:cc:
d4:37:8a:8b:ea:53:7a:29:d9:fc:32:54:e7:f7:a6:29:0f:55:
8e:3f:b7:c3:92:ec:0c:90:8c:dc:3b:fc:59:4e:8c:ee:45:05:
34:17:87:7d:09:db:9c:c9:b1:8f:dd:30:61:f7:bc:2e:4f:ee:
5b:6a:87:58:d0:15:66:38:62:51:b5:05:e3:de:db:f6:a0:69:
e0:5a:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:14 2025 by rpki-client