Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: KmjdK9bQaDKai9uLSgfoUyHHcDXmnCZODyMhSIAkvks=
Subject key identifier: F5:18:1F:69:C4:7C:B8:BD:D7:2D:C0:FB:86:51:AB:B3:9E:E2:60:F2
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 0197B70E6E3C54B54AF9E4A7ED19DD9AF258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0EB8
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: cdlM6HKJjBWhSR+WQgWwvfmkB2GD3gCzQ19aGGf6taI=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:3c:54:b5:4a:f9:e4:a7:ed:19:dd:9a:f2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=f5181f69c47cb8bdd72dc0fb8651abb39ee260f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:9c:19:5d:9f:d2:69:1b:e3:4a:89:98:de:
2a:97:aa:c0:c2:33:ed:3b:16:bd:21:f0:bb:de:fc:
8f:82:25:76:d1:a0:0a:b2:f7:de:4d:2a:80:e6:55:
fc:87:1c:e0:65:65:74:d3:28:87:82:b6:6a:f6:77:
3f:b8:17:fc:57:86:48:46:29:ac:4a:29:46:85:50:
1f:62:ad:9f:a0:e5:13:05:45:85:d6:74:52:b8:99:
1c:65:00:e6:ab:86:ee:64:d9:4b:0d:15:a7:ee:80:
fe:fa:86:7a:1d:7c:67:9b:ba:56:2b:a6:77:5f:4a:
ea:54:a4:7a:09:4e:e6:59:4a:9b:a1:d9:00:15:4e:
b8:af:e8:21:72:53:02:c8:14:c6:6d:c1:41:c5:6e:
ec:ad:f9:b9:c0:28:10:e7:ad:34:1f:7e:eb:c8:48:
7d:cf:1d:88:fd:c5:3a:87:27:86:af:15:67:eb:bd:
58:51:50:1c:af:57:f5:a4:e4:47:97:35:cd:45:10:
26:c3:ac:ad:e6:5a:f9:b3:cb:a1:b7:53:76:e6:73:
6b:8f:21:38:16:ef:10:02:2a:15:cc:7e:01:78:ea:
59:64:f9:b7:90:a2:27:49:b9:37:79:92:d1:9e:c8:
5c:73:80:f5:13:cb:6d:55:0e:a5:ce:59:46:2b:fb:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:1F:69:C4:7C:B8:BD:D7:2D:C0:FB:86:51:AB:B3:9E:E2:60:F2
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:42:3a:a4:7d:e7:c3:d7:99:de:b6:0d:37:5f:12:01:c3:c0:
7a:65:24:94:df:01:a1:81:5d:73:2d:e9:b0:97:85:f4:4e:ce:
02:67:8c:1f:02:cb:90:1a:81:94:3a:91:59:90:59:82:4d:d4:
2a:c4:0c:5b:c6:a6:b0:40:f0:7d:8e:6b:ef:4c:47:22:9b:a8:
07:47:21:ee:2f:fe:bd:31:95:a7:23:82:d8:47:7e:fe:b3:75:
3d:b4:60:10:6f:86:34:a8:2b:93:7d:a6:2b:f4:87:f6:78:ba:
e9:38:94:a1:ed:36:48:f1:58:f9:99:8f:ff:9b:2e:1f:9c:3f:
ab:60:7d:03:c7:40:d2:00:a1:4c:a0:93:d0:39:d0:85:5c:02:
1b:aa:38:cb:cf:4d:c2:e9:ea:65:0c:64:1c:27:0a:62:b7:c7:
87:b0:58:5a:4b:c0:52:e9:32:ca:b4:82:1b:ba:1e:fc:c3:5d:
20:4d:a7:c0:e6:a9:22:77:a3:91:7a:c2:34:80:9c:af:29:86:
85:7b:df:f2:7b:f8:16:73:77:41:eb:a9:f0:4f:d6:5d:29:af:
d3:0e:fc:88:b4:10:54:df:31:1f:5d:91:1d:78:8f:12:91:a6:
fd:33:7c:bd:b1:44:7a:7d:79:a4:75:9c:39:1e:2d:d3:bc:bb:
ed:ae:55:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dm48VLVK+eSn7RndmvJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
EyhmNTE4MWY2OWM0N2NiOGJkZDcyZGMwZmI4NjUxYWJiMzllZTI2MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXWcGV2f0mkb40qJmN4ql6rAwjPt
Oxa9IfC73vyPgiV20aAKsvfeTSqA5lX8hxzgZWV00yiHgrZq9nc/uBf8V4ZIRims
SilGhVAfYq2foOUTBUWF1nRSuJkcZQDmq4buZNlLDRWn7oD++oZ6HXxnm7pWK6Z3
X0rqVKR6CU7mWUqbodkAFU64r+ghclMCyBTGbcFBxW7srfm5wCgQ5600H37ryEh9
zx2I/cU6hyeGrxVn671YUVAcr1f1pORHlzXNRRAmw6yt5lr5s8uht1N25nNrjyE4
Fu8QAioVzH4BeOpZZPm3kKInSbk3eZLRnshcc4D1E8ttVQ6lzllGK/sICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUYH2nEfLi91y3A+4ZRq7Oe4mDyMB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0I6pH3n
w9eZ3rYNN18SAcPAemUklN8BoYFdcy3psJeF9E7OAmeMHwLLkBqBlDqRWZBZgk3U
KsQMW8amsEDwfY5r70xHIpuoB0ch7i/+vTGVpyOC2Ed+/rN1PbRgEG+GNKgrk32m
K/SH9ni66TiUoe02SPFY+ZmP/5suH5w/q2B9A8dA0gChTKCT0DnQhVwCG6o4y89N
wunqZQxkHCcKYrfHh7BYWkvAUukyyrSCG7oe/MNdIE2nwOapInejkXrCNICcrymG
hXvf8nv4FnN3Qeup8E/WXSmv0w78iLQQVN8xH12RHXiPEpGm/TN8vbFEen15pHWc
OR4t07y77a5VPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:55 2025 by rpki-client