Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: rzy18KMbM3WiF6KdVlZoCYB25a6RvjoO/C1WJxIE2yc=
Subject key identifier: DB:B7:47:35:B2:28:C3:E3:64:C5:D7:AC:37:14:B0:A9:DA:38:91:0C
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 0197B70EB80BA5D5EBE29AF49204BFE73201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0620
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: kNX5+AR+lyKGSBDWGwnTtqFnYfoiuJnbWt6s7/pX73Q=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:0b:a5:d5:eb:e2:9a:f4:92:04:bf:e7:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=dbb74735b228c3e364c5d7ac3714b0a9da38910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:ce:a7:24:40:d7:8c:e2:16:50:c4:8d:96:
20:23:d8:6d:b5:da:f3:eb:47:1b:41:fc:37:ec:1d:
7c:6b:60:cb:3e:0e:30:11:84:8f:51:94:a3:9b:a9:
e1:91:08:36:21:bf:26:03:1e:39:db:0e:a7:57:aa:
7c:17:da:df:05:bb:b3:8f:f2:bc:3e:1c:ec:f5:c1:
d2:af:9f:1e:bd:b0:a0:76:b0:31:df:ab:6c:29:d0:
95:3e:63:68:57:1b:63:72:f0:0c:c1:89:61:a5:bf:
34:a1:3e:55:d1:ab:f0:ce:62:5a:fb:15:5a:0e:f0:
3a:9b:ae:f8:99:e8:a1:e1:97:8a:0d:17:b7:6e:96:
15:1c:a5:93:c9:00:c5:f3:55:4f:1e:55:47:6e:f4:
56:2f:7a:cf:41:0e:31:7f:c2:34:02:2c:51:e0:4b:
21:40:f9:41:5f:bf:1a:4e:05:24:31:10:f0:75:15:
cb:c6:ca:87:7c:f5:b5:44:4e:fd:b2:26:5e:69:91:
5c:90:4b:0e:94:b9:dc:d9:d7:9b:48:2b:c9:b7:05:
f0:7c:4a:00:17:d7:2c:c1:d1:54:9f:d0:2e:49:57:
65:8d:00:f4:1e:19:dc:04:4f:e1:06:d3:ef:46:10:
df:eb:93:6d:b1:c4:17:4e:bd:21:6a:74:8f:0c:cf:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:47:35:B2:28:C3:E3:64:C5:D7:AC:37:14:B0:A9:DA:38:91:0C
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:fa:56:b4:28:5a:bd:a3:0f:f3:9d:39:d2:9e:4c:2d:b9:
cc:ed:49:f1:36:94:d9:a8:a8:ab:aa:96:59:41:d2:ff:a5:f5:
b5:90:cc:55:1c:47:ca:bf:51:81:3d:6d:9e:24:43:b9:29:52:
f9:b7:ad:ce:5e:8e:34:7a:e4:b6:28:2a:ce:c3:3b:99:64:f0:
42:b2:ef:cf:16:99:40:c0:ce:9a:49:f6:51:cc:2c:fd:ed:06:
15:3c:6d:92:39:e5:fd:1c:b9:94:ef:b2:54:b0:1e:68:01:bc:
66:6c:ec:94:b4:07:9b:83:fe:82:b3:cd:6c:67:1e:d5:8d:bd:
90:8a:07:d3:a9:6a:2a:12:08:0f:8d:b3:df:c6:70:4a:ce:5c:
87:27:ce:1c:7b:09:04:41:82:c8:38:53:6a:89:da:ad:d7:15:
92:8a:1f:46:c7:5e:02:76:06:bf:81:47:18:cc:bf:86:c9:cd:
0f:1f:e8:13:49:c8:4e:5c:12:37:d7:0c:9a:2d:a7:4d:c5:24:
f9:96:4c:80:7d:ef:3a:52:b8:ab:bd:e7:2f:20:fb:99:1b:b3:
09:ed:ae:d4:cd:e3:ab:84:eb:2e:f4:c8:b0:c7:d0:ac:0a:3a:
14:b8:7a:dd:ed:74:e4:e9:04:1d:e7:04:c0:8b:93:e7:1c:d1:
d9:ca:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:19 2025 by rpki-client