Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier: mzuxSTlgn6kqP90B5b/WwHIXBiiqsDK2Qi/r5Ehal6g=
Subject key identifier: D5:14:68:2D:DA:9E:E9:40:2E:93:1F:C3:49:A4:41:EC:3A:62:FB:D4
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial: 0197B7EA95EECF0D1159F0B0BBC933B6778A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number: 0278
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: qN8KSz01tbViWMCV+kUnXGW6CIz3cmxxEC9tBIjh7fA=)
2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:ee:cf:0d:11:59:f0:b0:bb:c9:33:b6:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=d514682dda9ee9402e931fc349a441ec3a62fbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:fa:ae:12:d7:a6:8d:f2:2c:f4:c1:b3:0c:
32:1e:74:f5:e5:c5:88:52:fb:0e:0b:a3:e2:41:42:
5a:cd:92:cb:aa:9a:ab:63:e4:31:2d:8e:c4:d6:de:
2e:bb:57:97:59:7f:87:78:81:41:e4:80:7b:3d:92:
63:82:b2:be:e7:50:31:85:f9:2b:3e:68:41:1a:44:
83:6f:7c:5d:e8:56:3d:1b:77:78:16:23:73:35:50:
b7:aa:cd:a8:37:17:9a:c0:96:6b:c2:f0:27:99:1d:
9e:ec:77:d9:c0:06:e1:a2:bd:16:92:53:e0:51:f0:
92:62:f6:84:e9:a9:af:00:8e:f4:d3:0d:52:64:25:
6a:06:03:a4:a3:48:24:cf:ae:2d:fc:14:22:0a:de:
a2:98:d7:f1:17:11:51:22:61:74:6b:29:68:37:e5:
c2:dd:9f:7d:04:c7:a6:31:be:33:be:c0:69:7a:4b:
a3:d0:c4:d4:08:57:22:76:5c:96:10:bc:f9:28:72:
11:f4:2b:c2:5c:b0:65:75:e0:74:c7:ca:67:ee:1a:
e3:4c:ff:7a:f1:6b:c7:1c:7d:04:8c:3f:ab:13:61:
10:76:8d:99:3e:bb:17:f4:e2:9f:9f:c2:0a:79:68:
89:0a:1b:c0:ae:aa:e3:cb:0e:b9:cc:0a:fd:a4:5b:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:68:2D:DA:9E:E9:40:2E:93:1F:C3:49:A4:41:EC:3A:62:FB:D4
X509v3 Authority Key Identifier:
keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:73:34:7b:a7:ed:ea:e7:bc:e7:3b:58:4e:a9:df:91:b2:
85:9f:28:29:68:7f:a6:fb:da:2a:0a:59:51:14:bb:39:4d:bb:
a8:26:6b:06:b2:9a:75:8e:e5:0c:18:14:62:85:9c:5c:9f:de:
d6:4f:58:9b:2b:cc:16:a7:97:4a:c7:b0:38:b0:e7:f4:09:80:
60:cf:87:4f:70:90:1f:96:c4:65:13:d5:0f:bf:a5:f0:4e:db:
1e:c5:24:d4:0b:16:6b:4d:9f:5c:33:13:db:8f:6d:99:89:60:
b3:95:83:ed:fe:57:da:33:1e:15:d9:03:93:00:59:15:27:01:
17:6a:c1:a5:c6:76:b2:c1:65:fa:aa:72:a8:5a:c5:fa:e4:7d:
0f:f4:60:1d:c3:71:9f:7e:d7:3b:1b:5b:7a:2e:07:04:d1:a0:
96:88:5a:9a:9a:89:d1:c7:97:f7:79:d7:50:ab:2d:5e:63:55:
0f:11:04:9c:eb:09:0e:c3:78:f6:f9:ec:36:86:5d:ca:96:47:
02:4c:77:09:e0:e0:b0:26:86:36:cf:79:7f:76:b5:55:a0:83:
08:78:aa:12:b9:14:65:85:e3:f3:73:32:7b:07:79:4b:16:ad:
b9:07:f5:65:ae:f8:a5:2d:06:88:69:21:28:b4:66:d0:a8:51:
fe:77:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client