Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier: zhFA6L0zDaqm1AxD47nLks5YhEMOFSZka+l95GcOqeQ=
Subject key identifier: BE:BF:06:69:8B:EC:DA:CB:6F:0A:D0:58:0C:47:AB:2C:03:C1:39:27
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 0197B7454BA36152A46D81A18DEDDC87F284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number: 0308
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: APycDcuBnnn03YS8WbMxVoXCIWH37hIlsjZfkn643Lw=)
2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4b:a3:61:52:a4:6d:81:a1:8d:ed:dc:87:f2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=bebf06698becdacb6f0ad0580c47ab2c03c13927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:51:e8:8b:3e:2e:fa:34:fd:c6:9b:18:b2:
f3:5e:b0:f5:3e:3b:f8:76:41:e0:6c:30:5e:6a:14:
10:cc:f3:a0:14:5b:74:f8:76:2c:cc:0d:37:26:45:
f2:35:83:94:a0:98:9f:56:6e:0b:2b:3c:3f:ba:a2:
61:9d:82:be:04:6c:e5:99:6e:af:47:e3:8e:81:07:
d8:bf:20:9b:13:81:5d:c4:1b:44:68:cc:9e:26:ef:
e0:6b:63:ca:47:b4:9f:a6:b8:a0:98:17:ca:6b:20:
26:bb:4a:76:d0:b8:4f:ca:ba:73:67:0b:85:f2:0b:
91:4c:c3:12:49:4b:5c:23:9a:23:11:d2:86:79:00:
78:cf:9e:2e:56:7e:5c:72:90:ec:27:5a:41:88:1a:
9e:d6:17:c8:68:ef:b1:0e:be:b3:f9:31:36:1a:f0:
d9:81:0b:b5:16:a5:b7:44:93:91:8d:a5:19:e6:df:
b9:56:b5:5f:9c:db:43:29:77:53:2e:b0:2f:f9:19:
f0:93:5e:3f:53:99:bd:b2:6d:fb:55:c5:c6:e4:53:
81:b6:25:5f:36:41:d4:24:9c:57:01:2e:ba:32:6d:
02:f9:30:ec:ee:b1:3b:3f:8a:c2:c4:42:79:31:80:
98:28:3c:5e:d5:5a:ed:12:57:1b:87:4b:00:97:18:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:06:69:8B:EC:DA:CB:6F:0A:D0:58:0C:47:AB:2C:03:C1:39:27
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:aa:00:dc:8c:fd:00:da:88:85:ef:18:ce:21:47:7f:d1:eb:
d7:20:a1:ed:ab:4f:78:1e:3e:d7:92:75:70:ea:a8:52:68:dd:
9f:b2:83:35:f3:92:e5:7e:95:f1:29:7a:5e:5f:33:37:a6:30:
79:b9:aa:e5:44:09:23:3e:d4:4a:54:37:58:d1:51:2b:b7:f4:
08:a5:d6:8d:7d:ee:64:1d:40:ab:b2:d6:3f:58:7d:6d:93:0c:
1f:47:a6:86:bc:1f:25:f2:8f:07:96:a9:b1:f9:1a:ba:3d:f6:
aa:f8:13:54:6f:08:b6:93:73:71:99:9b:30:ec:88:67:0b:f4:
68:17:46:9e:cf:bb:31:85:fd:12:9c:38:a3:dd:ab:88:3f:1e:
82:a1:c3:fa:b7:e0:d0:64:55:7d:8d:e6:ee:75:5a:4c:f2:83:
83:f3:13:61:1b:75:cf:f3:c5:64:4f:d7:c1:b0:a9:88:d4:90:
0a:a6:1e:5f:25:3e:5c:8d:e4:d2:de:19:fc:5c:c1:61:0b:28:
4f:5b:d4:ce:7c:3e:b7:e0:18:0a:8b:97:4d:8d:b7:52:b7:27:
67:5a:66:1c:88:b9:a8:ce:ca:46:7d:76:1b:8b:36:63:41:95:
28:b3:d3:0e:3b:b2:03:40:7b:72:99:83:87:aa:be:44:c0:b6:
b3:56:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:02 2025 by rpki-client