Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: 3Fr9cSG4xFz7ie2f+42OEc66FIegZpkyF/0vA3zLxmc=
Subject key identifier: 15:1D:21:1C:8A:FE:0A:CE:0A:1C:D8:C7:20:05:BB:75:EA:2F:68:C0
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 0197B6A1B59476DDC54FC895ECE1F11D40F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 05DC
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 90ziDT8eNbIQrbm1+NZigWqFUSA6YCtxyqp6HX5ld5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b5:94:76:dd:c5:4f:c8:95:ec:e1:f1:1d:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=151d211c8afe0ace0a1cd8c72005bb75ea2f68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:f2:87:e3:04:05:c2:91:9c:8b:a3:6f:47:
01:e9:3a:1d:8e:79:36:a4:30:a2:2d:85:11:e6:92:
08:18:99:9b:7a:8d:af:ec:c0:90:f8:af:98:15:9c:
bc:50:a8:a6:2f:82:21:2c:78:14:40:89:7d:36:d5:
90:6e:62:69:cb:32:ef:23:53:ed:46:c9:02:f0:c4:
a5:f3:36:4a:9c:f0:f5:26:df:38:cc:79:a4:66:11:
82:b5:3a:36:bd:70:03:52:a0:e8:27:99:79:3c:f8:
eb:f3:92:91:ca:ea:26:b8:76:e8:2c:e3:1d:e8:25:
4b:54:f8:37:ad:44:f9:8c:9c:69:9a:26:79:50:a7:
a0:64:88:8c:3c:ac:1a:77:08:5c:64:a8:aa:53:25:
14:4d:43:f8:6b:b3:79:4a:ad:ea:30:c0:f6:3e:1a:
7f:63:6f:07:b8:21:5d:c0:ad:f9:28:60:5e:02:73:
14:c0:a7:90:02:3f:39:72:32:de:25:4d:7e:e2:9e:
52:f5:f5:01:54:cd:cd:59:54:71:d8:8a:84:d6:6f:
a1:a9:5f:60:1b:83:0d:d0:3f:83:79:7d:72:36:1b:
fd:61:14:7c:94:29:75:9c:18:47:b8:9b:ed:ca:40:
75:1c:fa:9a:f7:f8:4f:93:93:85:9a:4c:7d:38:1c:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:21:1C:8A:FE:0A:CE:0A:1C:D8:C7:20:05:BB:75:EA:2F:68:C0
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:3e:82:45:6e:ed:11:43:16:52:a5:24:59:c0:2a:4b:9b:
d3:5b:83:d3:3f:b5:c8:3b:ec:7f:f1:6c:7d:cb:36:e8:28:8a:
d0:c8:39:0e:2a:1e:5d:27:16:31:ff:ef:0d:ba:34:24:6e:15:
fb:ac:22:5a:d5:1f:20:b6:7f:5a:2e:0e:36:89:c7:a9:63:0d:
40:77:32:60:30:02:86:18:2f:bb:71:7f:4d:83:cf:c0:48:3b:
9b:e0:18:ba:ca:ae:ae:35:64:38:5d:5f:a1:54:b1:21:0f:a4:
e3:74:6d:99:fa:bc:23:a1:b8:cc:c6:f6:ea:5a:9a:b8:34:4e:
9d:42:8b:1f:ef:56:c3:50:de:c9:53:39:46:fe:95:d6:fd:3d:
99:66:9f:30:da:05:1f:48:be:83:49:8f:37:9a:7a:2f:2d:e4:
87:34:04:8d:47:d8:35:51:63:7e:c9:fa:49:ba:90:d9:9e:15:
56:90:45:4d:d3:87:d6:f2:bc:4c:84:2c:22:cd:76:02:c9:82:
32:91:ac:fd:63:6d:16:55:51:db:a8:7a:14:ea:a2:21:5b:a1:
2d:27:41:62:04:79:7a:3d:fa:48:c1:0a:c7:38:ae:47:8f:8c:
8d:bf:ab:4b:03:f0:24:51:50:d6:b4:73:d4:df:ab:e3:c2:0c:
fb:d5:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:00 2025 by rpki-client