Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: 08fleG/HXtJv5d1/IDVo8G7bYVh9J1Ko+la+VUjGoFA=
Subject key identifier: FA:D6:18:02:69:E8:08:63:92:1B:7D:71:A4:26:D0:59:62:FE:C5:81
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 0197B8213D5EDDEB9C6E88A99EC02A79B02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 0341
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: hhUbm+fKGIZ4Dhzu+9A6nBuqIVfrVOyC3twbMuZCNUY=)
2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3d:5e:dd:eb:9c:6e:88:a9:9e:c0:2a:79:b0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=fad6180269e80863921b7d71a426d05962fec581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:6e:15:f3:50:be:81:f2:ce:d7:cd:0d:aa:
f9:c2:9c:38:c6:a9:5b:8a:55:54:2b:a7:8e:c0:31:
7b:58:7f:1d:5c:79:fc:3c:77:48:8d:a3:66:68:4c:
ac:cd:99:ee:c4:b0:2e:0f:9e:42:11:43:48:d3:09:
60:9b:ad:58:c1:a0:e8:38:e8:5c:b6:87:aa:1e:8a:
8c:bb:57:9d:73:c8:41:fe:22:46:15:cf:f7:d3:86:
e9:7a:b6:49:94:3b:6f:16:29:93:05:b6:40:2c:63:
ef:d7:40:29:3f:3f:c1:06:3a:b0:49:31:f7:79:a8:
df:3a:d0:5f:86:78:92:e7:66:75:88:c2:5f:8b:42:
e0:36:b6:73:78:ce:56:14:2f:37:29:c9:5e:2e:ec:
4e:90:20:9f:f2:be:6a:e9:6f:35:84:5e:18:7a:69:
b4:29:ad:7c:0b:0d:45:25:73:6f:00:be:2d:3d:4c:
1f:23:a9:67:2a:17:85:8a:8a:7f:c1:9e:7c:cf:38:
d8:34:0f:65:07:73:74:57:bc:5a:e7:f9:ff:2d:af:
2f:2c:02:81:9a:96:05:1b:b1:7d:ba:19:19:03:a1:
61:c0:18:09:67:cd:ea:6f:5b:eb:8a:c1:71:42:79:
bf:fd:2b:e9:f2:1e:9b:db:0d:df:0b:f7:a6:e6:19:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:18:02:69:E8:08:63:92:1B:7D:71:A4:26:D0:59:62:FE:C5:81
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:64:f2:dc:09:0d:7c:84:ac:2d:c0:3e:7e:86:66:0b:90:eb:
23:7a:c5:5b:f9:51:76:39:4c:ab:bb:0c:26:bc:9e:78:cc:66:
48:e6:80:0c:a9:95:29:26:d3:ff:91:aa:3f:85:6b:3e:6f:29:
f8:7b:62:58:15:d1:e4:9c:36:ac:8a:40:fa:c5:44:1e:e4:9a:
bc:e1:45:f4:7d:77:fa:ea:16:2a:e0:7a:cd:79:fb:cb:a0:44:
58:38:ab:67:02:e9:d4:e4:81:c9:b5:b6:21:2b:f6:f8:fd:2e:
a1:29:e7:1d:37:f6:67:00:d7:6d:fe:f7:1b:e6:1f:c6:7d:53:
db:aa:12:63:44:50:39:58:35:9f:4c:6a:f2:14:f7:f0:74:78:
78:17:cd:2c:f4:03:9b:7e:68:b4:8e:8a:6b:a0:e4:8e:fc:79:
bc:e2:33:8a:9b:ce:d2:fe:78:19:7a:27:71:19:5f:14:09:fa:
71:bd:33:c4:87:94:ad:1e:cf:4f:65:f7:d2:1e:e2:54:ec:a5:
c7:56:2b:83:ba:bf:a8:9c:77:52:df:7a:b0:37:37:d0:cf:1b:
87:82:80:7d:46:45:18:a8:05:fd:66:22:36:4b:4c:de:4c:5f:
9b:b3:4b:93:1e:6b:f7:a6:bb:75:39:83:d5:2b:c2:ec:61:fd:
a7:9d:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:04 2025 by rpki-client