Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: IKVB5g7qy9nvA4fbGf45zTHJBXV+ADAyBCYijOoHGmM=
Subject key identifier: 6E:A9:BC:75:07:8C:E0:5A:41:91:DE:61:38:9E:A9:89:70:54:3F:FE
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 0197B70EC0EE3A5DC5672AD8E7F9AF304CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 09A8
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: 41xbqVuqp8vka2uWkzeHNM/eXWSrZb6HNYk+qamaz/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c0:ee:3a:5d:c5:67:2a:d8:e7:f9:af:30:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=6ea9bc75078ce05a4191de61389ea98970543ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:cc:97:ea:d8:2a:b4:1c:a8:d4:54:cf:0b:
03:58:d0:2c:d9:94:aa:5f:d5:74:12:42:7a:ce:1f:
0f:e7:06:4f:d7:dc:b2:ee:f5:2c:98:03:b0:40:8b:
8d:6f:3c:81:bf:78:2d:37:3f:87:94:e7:61:67:73:
65:89:ae:29:5e:58:2a:7a:6c:6c:70:5f:8c:06:79:
e0:0a:05:c1:23:73:90:2e:57:17:ea:de:e8:c2:87:
ec:ee:e5:a7:5f:28:c4:3b:67:f1:09:b5:52:e6:2e:
c3:ee:7c:98:00:22:39:2e:3b:31:95:24:bc:78:51:
be:87:bc:bb:9c:f1:23:b6:8d:a1:5f:84:09:7f:00:
ea:bc:ce:ca:5a:3f:90:cb:1e:7b:de:13:8c:cc:f5:
ae:76:da:08:56:af:ca:ea:3a:b5:d1:79:f1:ba:5d:
5d:e4:7b:c8:24:cf:9a:74:55:0a:ee:b3:c0:65:f2:
b9:94:0c:59:26:12:d9:de:20:e4:00:2a:be:da:02:
f6:79:99:b3:72:b1:79:52:5a:24:0c:58:04:f8:90:
49:d7:76:d1:ee:ba:44:af:a3:4c:f8:0f:fd:ac:ec:
57:00:2f:d7:21:82:8a:ed:ee:3a:41:a5:00:57:12:
93:9e:57:be:5d:6b:d9:d7:d4:18:a2:83:84:24:13:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:BC:75:07:8C:E0:5A:41:91:DE:61:38:9E:A9:89:70:54:3F:FE
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:f4:e9:d3:ab:8a:3c:2f:10:95:46:15:f2:96:f0:45:5b:
db:ef:0e:cd:3e:a6:ab:98:66:51:ff:70:d4:98:2f:ab:d9:8f:
ee:70:9d:bf:50:0b:8e:25:ae:bd:12:bd:b0:6d:8c:0a:c3:ed:
23:18:41:67:d8:9f:3e:b2:a6:20:cd:ff:de:61:b8:65:56:fd:
46:39:41:cd:da:e4:a0:96:90:05:50:00:1b:45:e4:47:14:2d:
25:5e:f3:ba:a5:f7:6e:f3:2b:2b:ae:80:4c:cc:59:84:74:1f:
21:a2:db:d6:81:62:34:6f:60:95:fa:5e:aa:ef:10:69:70:29:
93:70:03:a5:0a:25:95:0c:80:6d:d5:97:15:ba:a0:95:9b:68:
e1:48:8f:46:1a:1a:a4:e2:0e:eb:10:4a:3e:14:c4:23:09:a4:
a8:08:27:4c:6d:9d:95:a5:08:ff:0e:a5:77:50:08:49:ca:6c:
91:bc:dc:59:40:3d:31:39:91:4e:f7:21:0f:40:f4:f1:61:0d:
e0:25:83:63:1f:b6:52:52:26:dd:f2:3e:10:9e:c1:c5:a9:b2:
2f:46:3a:2a:5f:4d:06:27:a0:3c:0f:42:da:d1:97:bb:73:86:
43:a8:d2:31:87:bd:1d:14:27:72:6e:17:20:40:9b:ff:a0:db:
f8:11:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:10 2025 by rpki-client