Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File: 6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier: aq0ELC1KkyAMSHATiBLdSG9JMUraNAl8jwVA2fSnGeg=
Subject key identifier: 84:62:5C:27:0A:2F:F4:8E:08:B0:2E:6F:A7:15:7C:72:8B:38:8A:5F
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer: /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial: 0197B6A09EA472208E62999E40EA53A16352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number: 04A7
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: PvIcpl9qMQMA5KhAnv4aZIDEXc0t5JfYqfwUio71lCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9e:a4:72:20:8e:62:99:9e:40:ea:53:a1:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=84625c270a2ff48e08b02e6fa7157c728b388a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:c6:a8:cc:d0:0d:c3:25:dd:df:31:2a:fa:
6a:99:f0:0b:d8:72:bb:4b:8f:c5:91:38:40:9b:1a:
23:08:10:0e:e7:19:0e:3a:4f:ed:30:0b:2f:04:3b:
52:d1:9f:4b:d8:d8:3f:13:68:78:e9:c7:26:0e:f7:
61:1c:70:bd:0c:de:1d:80:dc:cc:7e:7b:c7:b4:fe:
b4:0d:d8:21:ec:87:09:81:98:21:c5:7c:64:8d:0e:
0d:1d:02:df:2a:c1:da:1b:68:18:cd:e1:db:32:f5:
80:df:8f:7f:23:50:19:c2:f9:49:c0:5f:38:56:f8:
8c:b1:1b:26:00:e0:85:41:fe:5e:f0:a2:b9:14:5d:
32:94:22:4f:b1:6f:f7:fd:94:54:5f:2f:2a:ed:ae:
aa:1b:13:ab:d4:a7:cc:ae:c0:e9:8d:76:7a:03:6a:
b6:55:d2:61:66:6a:15:7d:81:5a:2f:61:18:cf:80:
f9:93:44:fd:53:24:e6:67:a7:ca:fb:ae:bd:a8:f7:
6e:7b:4a:df:76:6e:ec:4a:ef:33:36:0e:7d:d5:37:
07:bc:f5:20:f8:fe:39:5b:96:51:a0:ba:a7:64:23:
2a:72:ad:c8:ce:09:9e:b3:4f:3c:fe:88:1d:a2:46:
50:55:fd:e1:c4:4f:5a:54:df:80:8b:26:11:0e:d7:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:5C:27:0A:2F:F4:8E:08:B0:2E:6F:A7:15:7C:72:8B:38:8A:5F
X509v3 Authority Key Identifier:
keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5a:6d:c9:38:fb:0c:fa:0b:c7:81:eb:84:ff:64:f3:82:1f:
3b:d6:45:f3:9b:a4:57:33:e2:e3:83:dd:c7:3e:85:45:8a:52:
1c:e5:73:c8:b4:61:2e:10:d9:0d:36:33:0a:7d:e3:ed:6b:b4:
c4:8c:02:01:1d:fa:5a:78:bc:9b:9b:74:10:e1:d6:97:cf:ed:
32:5d:43:d6:15:3b:52:28:bb:b9:f9:02:97:0a:f0:32:10:ae:
f4:28:47:48:0e:78:b5:d1:6d:b3:7c:93:b5:a9:65:63:c7:c6:
81:6d:b7:76:9f:3a:4f:f3:53:2a:0b:fe:c1:2a:0e:0a:93:c1:
cd:bd:ec:5f:89:86:ab:8b:c0:4f:ac:f5:f6:d2:81:bb:8b:03:
2f:51:5b:1b:f9:0f:46:73:7c:f4:a4:26:7e:59:62:05:bf:c8:
c5:90:1c:2a:7d:d2:f2:24:4b:f6:85:9f:d7:78:64:db:70:b2:
70:ff:8c:88:f1:69:2c:27:26:03:22:1e:4f:02:a7:c4:c2:1a:
3f:6d:c4:d1:e1:a1:c3:62:e9:01:14:64:4c:e5:a3:1f:13:27:
57:f6:fc:0d:85:88:f9:47:b3:98:35:d5:77:1b:e0:d1:a6:a9:
1f:fb:4f:f9:41:b9:16:64:0a:8b:ef:14:6f:4b:78:0d:fe:e7:
05:2d:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:15 2025 by rpki-client