Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
File: 6WM0sHIQirro8yHsTM50lMEPDvE.mft (raw, json)
Hash identifier: oDEmgX0VUKSC4gg9exAgoqZntjfItAXbcJBOawD+aBs=
Subject key identifier: 15:B9:2A:43:F6:6C:BE:F2:48:39:33:7A:41:E4:6A:57:FB:B9:7D:5D
Authority key identifier: E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
Certificate issuer: /CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Certificate serial: 0198D4727C5F5AD6A10188D5CCCEFE282A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
Manifest number: 0942
Signing time: Sat 23 Aug 2025 01:02:09 +0000
Manifest this update: Sat 23 Aug 2025 01:02:09 +0000
Manifest next update: Sun 24 Aug 2025 01:02:09 +0000
Files and hashes: 1: 6WM0sHIQirro8yHsTM50lMEPDvE.crl (hash: /118X9kFTNbdS4xtMobTeXLzVQ2noSzyDnqiow7FuX0=)
2: IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa (hash: p83I4mzsEqptIUVslTxPYw5YgkTpPheBBTxPCVXji0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7c:5f:5a:d6:a1:01:88:d5:cc:ce:fe:28:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Validity
Not Before: Aug 23 01:02:09 2025 GMT
Not After : Aug 24 01:02:09 2025 GMT
Subject: CN=15b92a43f66cbef24839337a41e46a57fbb97d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:15:68:6e:78:ce:98:74:0c:aa:26:60:93:d1:
a4:5a:f6:44:96:55:15:30:4e:57:e0:51:1e:7f:f9:
d0:8c:c5:e6:78:74:4a:1b:e0:10:fc:a3:c9:d9:67:
c6:d6:1b:29:71:27:ea:90:ed:28:c8:b2:0f:8f:ae:
e9:c4:69:87:84:46:0f:ce:de:e0:bd:44:10:cd:a4:
f4:61:9b:15:e9:83:e0:7e:c9:ac:81:bf:6e:f4:ba:
83:b9:77:75:9e:c7:10:84:21:01:75:11:ce:de:06:
ee:45:31:d3:81:7d:83:05:a2:ed:4c:a6:0c:fa:d8:
8f:b3:b1:fd:d8:f8:18:99:a6:c5:3e:ec:ed:54:36:
20:cc:d5:50:21:48:f3:c4:99:4e:86:31:6c:96:2c:
f1:b2:71:3b:0d:28:f0:55:76:01:2c:73:f3:ae:f4:
b0:3e:76:b6:d2:84:31:47:d4:f5:f5:90:6b:f0:a2:
01:97:74:0d:d2:4b:dd:ce:2e:f8:cb:4b:db:b7:a8:
13:13:70:bf:7d:eb:33:dd:9f:c9:35:91:15:b5:35:
16:fb:0c:70:44:fc:e3:1f:90:1b:6b:82:e5:61:a5:
7b:f3:ff:f7:5d:4b:d2:0e:a2:66:a5:c9:81:48:79:
d0:31:55:a0:69:ae:db:a0:47:3b:a3:68:46:9c:32:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:2A:43:F6:6C:BE:F2:48:39:33:7A:41:E4:6A:57:FB:B9:7D:5D
X509v3 Authority Key Identifier:
keyid:E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3c:33:13:b3:44:cf:a9:2d:e4:72:59:40:0e:ac:19:f9:00:
1d:ef:12:d1:e4:5e:bf:d8:e3:30:12:74:8a:f1:b4:20:82:29:
a7:ce:f1:20:30:92:a6:9e:41:eb:6a:c3:03:69:fd:f2:5b:b0:
18:27:d5:bb:53:27:88:87:9c:c6:87:d8:a7:b0:d4:b8:c6:6b:
07:a9:d5:c5:56:5e:86:4d:a0:ca:48:0b:9c:69:0a:e4:90:53:
d1:83:c9:f6:37:0f:fb:d9:28:96:7f:94:d4:32:14:2e:71:8f:
cf:16:ff:42:75:77:2a:92:4a:11:c6:fe:4a:2b:78:a3:ff:c4:
65:30:e1:d6:e6:3b:36:ba:63:34:09:5d:7d:95:17:fc:77:71:
cf:d2:44:be:f6:d6:f0:c6:77:05:12:1f:a4:ba:80:a3:c1:f3:
f6:23:ed:6e:42:c4:3e:b4:01:fa:48:dc:df:07:44:ee:b4:a6:
1a:a1:b2:08:69:3d:1e:00:92:c7:84:52:dc:0a:a6:28:04:ea:
f3:48:d1:6d:e5:f0:4e:1e:ec:60:f8:e0:31:f9:a0:9d:fe:45:
c9:ea:45:1c:b5:7c:a3:cb:77:09:a9:3d:59:e4:23:d1:e9:d4:
bd:78:2d:7e:56:53:5c:df:88:97:28:79:82:cf:1d:39:f1:e4:
8d:e2:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:21 2025 by rpki-client