Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier: jl2qBFU+Vrhpk/pYw+J6WweMlXc1hS0GeZlvUhY9a6k=
Subject key identifier: EE:43:82:F0:3C:57:98:1A:B7:6B:4A:E0:51:14:F0:AE:1B:6A:55:BA
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 0197B7B32C5AF595A2523D961F2B0BE360FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number: 0342
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: nKJYvYDk39XOJB9uq87KLou6cnTb+eoUs3FrdQzvg7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2c:5a:f5:95:a2:52:3d:96:1f:2b:0b:e3:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=ee4382f03c57981ab76b4ae05114f0ae1b6a55ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:3e:d7:46:4a:dd:c5:de:e9:fa:03:43:0b:
1e:54:f6:bb:47:c8:f3:22:94:75:0e:1e:0d:91:4e:
fa:c1:44:e6:b4:af:a0:0d:0d:8d:f6:d9:2e:fd:1f:
a6:30:28:c8:4f:64:3b:07:87:f1:3d:b4:88:49:a2:
47:cc:ef:08:b5:71:be:66:ed:d5:9f:40:2c:f1:97:
6f:26:34:9d:b8:27:4c:a1:38:ef:06:89:d2:52:34:
f9:d4:ce:01:69:c2:0e:1b:25:97:a7:59:61:31:32:
8f:d4:37:c1:21:a4:2a:d6:d1:7c:4d:b9:50:4d:bb:
09:45:3e:13:5c:21:c0:1d:f6:d5:d5:c4:e9:9d:0d:
db:45:91:b5:06:e0:e9:91:e2:57:53:dc:74:df:0d:
e0:70:8e:43:26:71:0e:78:a2:b2:7f:46:ab:8f:03:
ad:fa:eb:bf:ba:66:ba:e8:87:f6:94:0c:a4:0e:ce:
cb:ba:8b:1d:87:da:cb:45:94:16:da:7c:e1:39:45:
4a:88:bb:bb:5a:63:a8:1b:e0:37:0b:e0:8e:8c:a8:
d6:5a:15:f5:ad:b7:48:f8:f3:32:9d:e9:30:6b:0e:
51:5e:7a:50:9c:af:41:70:66:16:57:62:cf:e2:39:
3a:f5:c0:c1:de:e1:07:93:58:b9:91:0c:27:13:aa:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:82:F0:3C:57:98:1A:B7:6B:4A:E0:51:14:F0:AE:1B:6A:55:BA
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:69:82:f5:75:9e:11:a4:15:77:f2:41:ef:a7:57:ac:95:ee:
e8:3e:3d:ec:61:bb:d7:77:50:f9:ae:0b:9e:7b:b7:e5:5f:61:
0c:b7:91:b6:14:3f:4b:55:6b:8a:f9:a3:15:0c:49:cb:57:d6:
2e:2c:e6:a8:04:58:4d:a9:73:d8:a5:e9:4e:71:39:a3:d0:cd:
35:09:e8:99:19:0f:12:00:31:54:4a:31:47:2d:bd:84:3e:d0:
97:ec:b0:28:0e:aa:5f:79:46:1e:96:22:f7:48:3f:a9:c5:90:
07:84:14:cb:24:df:f6:19:f1:a1:d2:3f:96:45:e7:c0:86:84:
e2:17:1c:14:99:d0:56:74:df:97:8d:2e:74:60:08:9c:6f:f7:
48:17:42:f5:9f:c6:f4:2c:1e:fa:b6:ee:82:cf:bf:4f:94:f3:
02:dc:47:1b:92:71:10:d5:04:fb:2c:3b:00:6e:3a:46:48:92:
80:9e:b9:5b:1c:1c:f2:0d:72:b4:35:8a:a6:b7:38:50:82:c8:
90:25:7f:b3:bc:17:90:75:f7:1a:f1:38:57:02:e9:b3:61:e2:
53:88:37:13:42:21:a0:de:d6:4d:4e:ae:57:52:21:52:87:f7:
ba:5c:67:77:69:b5:0d:b4:22:e2:de:37:eb:59:69:82:7a:ff:
aa:e2:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:24 2025 by rpki-client