Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: HLMxx2FWZjPu1Lw+QOrDFYlEPuoC25Hgx/VDbxrp+UU=
Subject key identifier: 39:FE:4F:A7:FC:23:82:1D:B1:6C:7C:05:EC:6F:8C:47:44:1E:97:85
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 0197B7EA2460695EF205B0433CB286233DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 153D
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: tDYrimd3QT3+JvpN+urIu5PovzKreVDRA7TuDPgXN/A=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:24:60:69:5e:f2:05:b0:43:3c:b2:86:23:3d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=39fe4fa7fc23821db16c7c05ec6f8c47441e9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:18:5e:8b:08:e3:40:c6:0d:8a:25:d9:c4:
01:45:fe:8a:87:e7:41:90:a0:ea:65:06:a8:ee:d3:
bd:56:02:66:d5:b4:1d:17:e7:a9:9f:5a:d3:2b:0c:
8e:a1:49:a2:a2:96:f9:d0:b0:38:d1:86:ba:55:d2:
b8:e7:e2:a7:db:84:68:21:6c:33:49:d3:84:00:9e:
c5:a3:de:61:1c:92:a2:32:4f:d5:16:52:ea:67:6f:
0c:c4:66:62:77:b6:5d:de:0b:36:b0:85:7f:08:3e:
ba:26:e6:d3:36:63:68:8b:4e:d9:51:f1:e5:b4:7e:
81:0b:6f:53:50:87:61:b4:b4:57:52:78:3c:6e:4a:
3e:ff:4f:ba:ac:9d:28:b9:21:84:96:23:90:ab:a4:
fd:59:6b:42:41:03:66:74:38:44:88:bc:50:fd:e5:
47:84:6c:1e:a1:62:09:1c:8e:d2:6f:bc:1f:f8:4c:
e2:2c:c3:89:7c:4e:df:02:d5:f0:b0:9c:7b:c0:eb:
27:4f:dd:e4:90:32:4f:ea:7e:53:29:21:6c:41:93:
0f:5c:e3:c1:03:83:5e:31:98:84:cf:78:18:0d:1a:
82:97:60:7a:89:86:6e:ce:6f:0a:93:3e:95:f7:50:
b8:db:d6:59:c9:4e:17:3b:cb:48:5b:5a:bf:1e:ff:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:4F:A7:FC:23:82:1D:B1:6C:7C:05:EC:6F:8C:47:44:1E:97:85
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:b8:6d:6f:4e:28:7c:44:53:ef:b9:39:9d:45:1d:ce:25:
23:75:8f:b6:a0:67:f1:ff:bf:fe:f4:98:50:78:86:0d:3e:9a:
03:73:d8:9d:2d:26:a6:80:39:c6:6e:6a:83:71:7f:bf:01:cb:
86:4b:65:41:48:d4:5d:c4:7a:6d:c5:8b:17:37:fa:9e:22:b4:
2c:ef:34:2b:25:2d:c1:cf:0e:fa:5d:92:60:5c:5f:ed:38:fe:
3e:a8:49:04:bd:7c:c0:4f:8a:43:a7:ff:1f:88:a9:1e:73:3c:
34:15:9e:cf:62:8b:55:9c:dc:f1:ee:69:99:21:74:62:ed:a2:
ee:3e:e7:2f:01:58:95:0d:6a:62:c8:46:d3:52:27:a2:73:e8:
95:03:4a:d3:0e:f0:9b:d1:13:95:88:5e:2d:f5:4d:0c:9f:67:
1d:d3:c2:69:c9:25:2b:18:ea:31:8b:d3:5e:e5:7c:71:be:79:
7f:7a:4a:51:05:d1:77:18:19:f2:52:da:57:d9:00:af:42:68:
a9:87:f4:e8:4b:f4:80:99:fa:7a:5a:73:ee:8e:2c:47:1b:59:
08:e0:6a:8e:6d:e1:62:f4:2f:6f:89:93:57:23:38:19:1b:9f:
4f:99:20:ef:26:6f:8d:56:8a:04:8a:7f:30:b2:e5:22:28:9e:
0d:1e:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:46 2025 by rpki-client