Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: KdcXO5ofA/0BEIrXGPmHTnbyd/Jl+t+TXx8X41bIokU=
Subject key identifier: A5:AD:21:A1:0B:4D:17:82:66:1A:58:A0:2F:89:24:29:9A:23:37:92
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0197B6D77723580A039D6CF463DEAD02D7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 13F9
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: bGtl1so+7IYI7B5pZRqlg++1Dk/o8abJ4z9+JaDbSw4=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:77:23:58:0a:03:9d:6c:f4:63:de:ad:02:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=a5ad21a10b4d1782661a58a02f8924299a233792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:16:03:e3:e0:70:0f:3f:4c:de:d5:dd:9e:
14:ad:29:21:b2:60:e3:2e:d6:35:04:76:44:4c:48:
ab:e1:64:d7:33:db:b0:9f:e8:bc:fa:60:bf:da:63:
5d:cd:a7:5d:34:a7:77:1a:51:23:53:91:4d:f9:f0:
ca:8b:da:a7:22:c6:b5:3f:d1:96:88:f1:62:6c:b8:
d2:eb:f4:b3:6e:da:fe:25:25:d4:fd:3e:ba:10:c4:
f0:f4:62:40:5c:d2:d2:1c:0c:82:c2:13:70:fb:53:
7d:54:59:2b:67:7e:20:6d:be:ad:99:e4:21:6e:de:
5e:72:12:16:9c:54:dd:b3:d2:03:8c:c4:6e:8f:b9:
b9:db:a9:f2:39:60:7e:6a:f5:98:be:82:58:ea:cc:
aa:4c:89:a2:fe:3e:4c:27:bc:69:53:25:85:42:e6:
ba:f3:bc:f1:b4:53:d7:0b:8b:a8:82:bf:9f:1d:18:
f5:81:fc:5b:85:3a:b5:cb:fb:13:ac:cc:11:02:1e:
3f:1f:e3:5c:2c:1e:0f:b5:12:7b:77:2f:fc:e2:0f:
da:cc:37:19:9f:41:62:4d:69:e3:4f:3e:39:81:2c:
a1:ee:c2:55:46:19:b5:51:d7:ea:03:89:86:f9:61:
e7:b2:ea:50:f4:59:5a:80:e9:6b:aa:28:39:1c:f3:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:21:A1:0B:4D:17:82:66:1A:58:A0:2F:89:24:29:9A:23:37:92
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:47:5e:4f:a3:ec:08:47:e9:43:88:30:fd:86:20:df:71:
95:c5:68:11:d7:06:dc:a7:3d:1b:6c:0d:14:59:7c:21:0f:bb:
8c:0f:bd:7b:05:5c:41:9e:2f:de:69:63:e6:1e:ef:8a:11:4f:
7c:36:c7:82:a4:dd:7e:25:9d:44:17:f2:fd:a0:e9:38:46:71:
6a:5c:e9:64:24:1f:8d:50:1e:0a:60:31:a1:60:df:18:06:05:
0f:23:89:16:09:4f:4e:93:c9:cd:a1:98:e1:fb:35:c5:96:28:
c6:84:07:b5:6b:c4:f8:a8:d3:92:9e:61:09:ff:0b:b9:04:c2:
d0:a8:4c:8c:f9:00:a9:54:b9:87:bb:20:c7:5b:8e:57:2c:01:
df:71:10:f3:37:c8:1c:af:3f:b0:f5:94:1c:e5:1a:c2:71:2e:
20:30:99:e1:40:60:c8:01:66:c0:fd:05:6d:84:e9:c2:6b:b2:
e6:c9:dd:8d:43:d5:d8:8f:ea:c7:cd:b9:35:45:c6:7e:31:d7:
71:a7:41:c6:79:d6:98:d8:6f:2c:05:44:75:fb:a9:02:21:b5:
bc:8e:ee:c5:ed:09:77:e9:c4:a1:3d:e3:ea:7a:52:9c:01:dd:
05:d8:3c:89:39:55:c7:45:22:95:1b:98:48:06:4a:35:65:82:
bf:5a:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:03 2025 by rpki-client