Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: ZjUNyiNirN0eK+ODrP9rHjv2sRwBcgQ1Xy4AM0jYdNM=
Subject key identifier: 39:8D:E0:E5:B6:A5:67:EB:31:AB:4E:42:C7:96:C0:09:BB:AD:91:39
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 0197B70EA0A561F30D78F4DBCDB038C04F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: Xioif6zMSGHUBQiEf5Az7MW319ZqgycKFZhbOzHkIo8=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a0:a5:61:f3:0d:78:f4:db:cd:b0:38:c0:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=398de0e5b6a567eb31ab4e42c796c009bbad9139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:b4:5f:ef:d1:99:e1:f8:4e:a9:af:f9:ef:
ad:20:fd:22:7d:15:de:5e:39:57:9d:d0:bf:2b:95:
b3:74:18:ee:40:13:bc:d7:8b:31:bd:56:d9:b9:c8:
89:84:43:dc:a9:56:2c:71:0b:84:53:56:1f:1c:87:
12:9f:fa:15:7a:ad:f6:27:22:1e:8c:df:b9:7b:6b:
1c:25:e3:ff:a0:bf:81:2c:4b:7a:7c:1d:c3:55:1b:
f3:63:ea:a9:7c:21:fa:0a:46:df:a5:e9:33:c4:ff:
4f:6d:b1:ea:d0:65:20:3d:ec:5f:1f:1b:e6:76:89:
f4:85:17:2e:9a:fe:c1:19:86:6a:d7:10:02:7b:5b:
fe:10:d7:f3:c2:6d:db:22:9f:2a:22:1e:0f:ed:0b:
35:9f:f5:72:08:16:17:f6:7f:77:a8:3f:70:bc:5c:
2e:99:85:af:31:81:bc:c2:a3:68:20:aa:af:87:63:
09:ed:09:fa:23:a5:b2:b7:72:3c:91:ec:5d:2e:5d:
13:b4:85:12:d6:94:42:19:00:7e:72:a5:97:60:d6:
c8:99:14:d6:58:6c:42:8b:39:b4:40:d2:3b:a3:58:
77:aa:67:e1:b4:04:87:80:c8:8d:7d:81:bd:a1:25:
33:3d:fa:31:9b:a4:ba:f4:3c:2a:b2:2f:03:90:ff:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:E0:E5:B6:A5:67:EB:31:AB:4E:42:C7:96:C0:09:BB:AD:91:39
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:09:fd:45:ee:cb:27:40:83:33:2e:35:70:27:b7:5a:67:
ed:8b:6b:75:07:a8:78:9a:2c:df:29:d3:13:a3:8a:66:b6:1d:
bf:d2:35:7f:79:3c:22:bd:a9:17:89:09:dc:23:80:ea:8a:d1:
8d:58:4f:c8:0a:19:23:77:9a:e8:0c:2e:87:5f:6c:dc:65:4d:
fe:d8:db:45:83:6e:a8:0a:3f:ed:d0:9f:4c:16:54:90:a8:c4:
dc:a7:05:39:1b:16:4f:9c:b8:c9:d5:37:7b:c6:21:c4:cf:63:
6a:09:5f:06:6b:62:2b:80:64:56:18:ac:88:02:17:a1:fc:12:
57:e0:cf:58:07:10:88:d4:30:06:8c:c7:8a:62:86:be:b0:1e:
fb:55:9d:07:3d:8c:d0:b1:50:90:32:3a:58:83:50:a0:b1:99:
e4:87:a7:8e:92:4f:ed:ab:8d:1b:20:3e:17:f2:ec:99:aa:af:
4d:b0:ce:64:42:05:34:28:78:7c:ce:12:9d:c8:69:9b:e4:cb:
b5:11:9f:f3:a6:3e:7a:1f:c4:2a:46:80:c4:7c:8d:00:7d:18:
f3:b4:23:a7:95:1d:33:0b:7e:16:7a:01:12:2a:40:69:f7:77:
ce:3b:ac:54:c2:96:c7:d5:ac:21:9b:8f:d5:d6:b8:85:d9:03:
8d:d0:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:56 2025 by rpki-client