Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: xD5+XTZcF7uPUSeoHM63FSwdvuf0+2ri4jl6Qsau6zw=
Subject key identifier: 4A:49:FD:5D:BF:ED:54:B1:9F:0A:7E:37:63:0D:C8:60:B6:75:DA:33
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 0197B70EC23ADEB788D94E002C2DAC84816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0C49
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: WDItpu8l3mp3wcKcgijwI4E+ZJZbp6fS3tSFb4N/dhw=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:3a:de:b7:88:d9:4e:00:2c:2d:ac:84:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=4a49fd5dbfed54b19f0a7e37630dc860b675da33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:15:39:f6:67:28:99:ae:69:66:e7:d4:30:
87:0c:c3:3a:d4:53:9e:85:bd:42:a5:c2:d5:a5:07:
59:70:f7:1b:d8:7e:ea:45:c3:68:78:c2:f5:31:61:
3c:9d:af:10:d5:40:0a:82:89:8e:6b:d6:c1:a9:00:
7b:1d:b4:af:6b:24:25:cc:71:a6:7f:77:53:bb:ba:
d4:a2:50:23:b1:92:c1:be:fc:74:84:af:3b:27:92:
5b:8f:de:dd:91:bf:d1:c2:d9:82:5d:ea:ba:f9:b4:
e7:12:48:b2:7c:e4:ff:be:de:28:60:08:d5:08:d6:
64:f9:81:76:0a:f6:14:e7:07:3c:73:c6:4b:47:97:
1a:fb:17:aa:f4:85:42:6e:71:2b:12:51:f2:cd:9e:
b5:52:5a:7f:87:af:d7:00:ea:99:f1:1e:d1:93:50:
cf:c6:a2:51:2b:fb:64:09:74:1e:d7:a1:2a:d6:c1:
29:dc:2d:a7:d1:a5:af:fc:4b:0d:bb:04:3c:76:12:
51:19:c0:02:22:2c:26:0f:11:04:ee:7c:a5:65:88:
1a:20:1d:f1:e9:83:79:cb:77:88:6e:e3:f3:8a:8b:
a4:79:aa:be:2d:b3:8f:e5:ef:6d:24:5e:dc:70:49:
16:86:a8:ae:6d:c8:3f:74:a7:be:02:a7:3b:12:57:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:FD:5D:BF:ED:54:B1:9F:0A:7E:37:63:0D:C8:60:B6:75:DA:33
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1c:1e:f6:71:b8:3b:4c:b6:b7:29:51:be:2e:f8:61:cb:9a:
96:9d:89:7b:93:24:39:2c:4e:7c:ae:e2:7c:e5:19:dc:af:52:
27:ce:c3:19:61:68:01:0a:8b:e3:b0:69:86:85:b4:d7:1d:12:
1f:12:5c:9a:81:ae:c0:f7:bb:ee:91:09:d8:14:dd:ab:37:dd:
a0:81:d8:3a:bd:59:45:64:6a:39:ac:14:da:c0:35:c1:55:5a:
eb:ee:bb:0a:82:91:06:84:70:68:3f:f6:8b:c1:43:7c:e4:d1:
7d:a2:36:83:b0:77:ea:cc:6f:71:40:63:c5:88:fe:6b:bc:7b:
ca:d5:ad:37:0c:8c:0a:a0:89:68:79:f5:84:79:41:63:19:91:
d6:00:15:d8:95:41:38:b1:7f:77:03:7d:62:cc:69:7d:b5:6d:
51:b6:42:f4:b4:d2:df:4a:3a:54:2f:41:7f:5e:df:5b:62:96:
a3:bb:28:28:f7:cd:17:14:23:58:b0:bc:45:ba:b5:42:9b:0e:
04:2e:86:85:9a:7e:1b:92:ec:c3:3e:30:fd:51:64:82:4e:b9:
45:e8:22:95:da:76:6a:6f:3a:9b:78:73:89:b0:a8:a5:17:5b:
7f:24:a6:36:9a:16:0c:a4:47:17:10:cb:dc:4c:f8:bc:ca:a0:
ce:7b:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:34 2025 by rpki-client