Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: t4qVJCW/4DXhl7M2DVr3E2ovEFb5TKRnumXEjhqGfpo=
Subject key identifier: 68:DB:00:1E:7E:7D:07:0A:B2:E5:95:F2:19:0B:18:49:46:D0:61:39
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 0197B820E19864A3D0C11735FD71721DB9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 0500
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: IB/JWk37PxwhR0OiwzZ6IcEMaCYY1OUfM4RyvMpmFpc=)
2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e1:98:64:a3:d0:c1:17:35:fd:71:72:1d:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=68db001e7e7d070ab2e595f2190b184946d06139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:80:0c:76:67:db:a5:c3:79:57:78:49:50:
a8:e3:65:f7:cb:16:bc:b7:33:8c:46:3f:32:57:61:
30:54:c8:27:4e:1d:d1:e1:90:b0:df:a9:3b:70:b4:
48:50:65:a0:49:db:8a:79:b6:7a:c0:7a:a3:bd:03:
ba:d6:74:53:a6:65:24:c4:93:80:de:8d:79:46:4d:
1b:cf:39:7f:4c:2b:ba:6a:d4:a8:09:21:b9:a8:12:
14:19:c6:99:e4:ca:0d:8a:71:63:1b:97:b1:6b:ec:
2f:bb:c1:9e:33:32:d4:ea:84:48:62:0c:59:d6:4d:
3c:6d:c0:a0:fe:d6:ac:40:ca:8b:18:62:15:af:7e:
32:a1:07:47:33:8e:2f:d2:fb:fd:76:a4:2a:6f:8f:
04:51:4d:c9:57:39:e4:e0:f7:cb:29:b1:28:07:8f:
cd:7f:ec:9f:9d:36:b3:b5:4d:65:bb:f8:92:8b:ce:
60:c9:6c:8d:e6:80:8c:0b:25:12:0b:b7:87:fb:38:
4f:d4:d6:cc:7f:8d:a7:77:9c:78:91:93:47:5e:00:
17:2a:a7:7a:38:d9:b8:71:a5:f2:4c:ad:65:52:b2:
17:e3:03:2f:de:d2:3f:83:3c:82:86:67:95:f5:e9:
20:48:7a:8a:e3:31:ef:41:5f:0c:b3:d0:d5:8e:7c:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:00:1E:7E:7D:07:0A:B2:E5:95:F2:19:0B:18:49:46:D0:61:39
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:28:87:dd:b4:12:5d:ae:7e:95:4b:5b:de:56:f8:6b:8f:
1b:0c:08:ba:77:e4:3b:3a:e1:b7:81:d0:99:70:e9:07:e1:20:
9d:8a:ea:f5:96:5a:ce:48:2b:a9:85:04:dd:16:db:63:84:2c:
1b:34:98:a0:e9:79:59:c4:2e:9e:20:51:3c:40:c8:7a:89:9b:
88:33:ea:ff:1b:db:fa:71:48:0a:ba:05:64:9e:67:89:99:5c:
5f:ed:f5:7a:fa:64:90:e6:ef:3a:0e:e2:e6:b9:0e:b9:b8:87:
cc:9c:1c:19:52:b1:19:40:d3:6f:67:b1:58:29:21:cb:93:d9:
89:78:8b:d3:c0:88:d4:b8:62:6c:67:c9:3f:d9:21:45:5b:d9:
48:58:11:5b:92:0e:b3:19:97:23:07:53:d5:8e:58:c8:71:9d:
20:26:15:53:22:66:e4:a2:dd:88:fe:eb:e3:d9:4c:2b:50:32:
42:d3:c6:16:66:5e:d1:6a:a3:dc:93:78:6a:db:cc:a1:c5:95:
e6:e1:bb:06:f4:74:a0:98:a2:4b:64:bf:4d:62:2d:24:f8:8f:
4e:db:48:e0:5c:46:ea:b7:85:96:af:90:26:b1:7f:97:b1:84:
0a:aa:3a:ee:46:be:3c:8e:e6:f3:88:e6:22:57:96:2d:65:6a:
1c:0b:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:38 2025 by rpki-client