Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: ftU8yr21tQ0wqMTDOQsJTl79jqHVeXUU5GhZqzIgIaI=
Subject key identifier: 97:BA:34:87:BC:A5:85:91:34:0A:3F:16:D3:35:D8:FE:4F:08:C0:D6
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 0197B7452192D7FF8695E91BD047D47B219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 10F1
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: RNIuW0bIsQDQzCmvREP+DaG2D7be4n/wTJur9PGI3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:21:92:d7:ff:86:95:e9:1b:d0:47:d4:7b:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=97ba3487bca58591340a3f16d335d8fe4f08c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:90:bb:14:a6:37:a3:3d:a8:df:fb:5d:6c:
5c:48:d9:01:bd:bd:5f:7f:17:57:93:44:08:14:01:
3f:df:9b:50:a2:cc:ba:aa:44:88:5f:15:51:87:08:
78:f7:24:b1:6a:b9:e1:d2:05:f6:ca:08:e2:08:bb:
56:af:b6:ca:07:20:71:9a:b6:33:da:b7:fa:b4:55:
87:1a:8b:d1:ed:42:3b:48:e8:fd:24:99:9b:46:9a:
98:af:e7:56:2f:75:4a:c9:d2:ff:95:bc:2c:a4:0b:
11:97:ce:ae:8c:69:51:9b:82:e1:3a:a9:05:3c:d2:
d7:9d:e5:4b:3b:c2:c0:96:27:b4:1f:39:a3:26:bd:
4e:e2:2f:bb:84:7b:43:d1:2c:4b:e1:7e:1c:17:3e:
92:b0:5c:08:10:71:71:fb:b9:54:0b:20:7d:58:a9:
90:b8:85:db:c6:a8:27:3d:de:26:e9:12:7a:c9:61:
9b:90:17:a3:66:be:97:48:f7:ce:ef:e8:46:8a:c1:
08:87:62:9c:b3:12:dc:98:aa:36:07:5d:04:c4:18:
c1:94:8a:dd:2d:fb:e6:4e:16:cb:46:2a:50:45:62:
92:71:e8:58:92:7f:16:84:0a:0f:1e:73:25:1c:d6:
2c:80:59:9c:3c:aa:70:cd:5a:bd:62:fd:7f:dc:bf:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:34:87:BC:A5:85:91:34:0A:3F:16:D3:35:D8:FE:4F:08:C0:D6
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:09:ad:99:50:1d:30:8d:4a:c5:16:5d:0b:5f:ed:1a:db:c6:
01:0e:c4:93:6e:34:f0:1b:4c:dc:90:14:fa:74:e9:ff:be:44:
e1:d2:cb:27:0d:50:95:95:7a:77:10:c4:14:10:27:94:e0:74:
48:7e:7a:c9:d8:c9:95:f0:b9:ac:20:0c:95:02:3b:13:2d:98:
c0:05:8e:1e:20:f7:ea:14:ce:e2:e4:ff:b7:96:1f:2e:54:7c:
db:c0:c8:3f:fb:77:36:57:14:51:71:63:e1:d4:c8:de:f3:54:
ef:89:2b:a4:bc:3c:54:01:cd:f9:d8:95:6e:f0:14:a0:0e:8a:
8d:2c:a9:88:bd:80:2b:a9:cd:35:1b:ab:22:35:38:c2:ad:a6:
48:55:45:eb:4e:90:a5:31:9f:39:07:f7:cb:69:83:22:23:7d:
72:35:16:0b:bd:f6:a9:d3:3a:d0:6d:f2:3a:7d:6b:45:4a:45:
be:0f:3a:36:06:f3:b3:83:1d:b8:4a:2f:07:ea:33:1b:4a:29:
12:50:8f:76:54:8c:29:11:5a:6a:44:9d:f6:19:40:90:89:fe:
d6:44:af:bd:73:99:d3:f9:25:fa:54:75:df:72:e4:f8:6c:96:
c6:97:ad:91:b4:52:07:0b:8d:ba:51:50:bf:96:26:4e:31:b1:
8c:a0:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:14:14 2025 by rpki-client