Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier: IvsQYcWiviTNKwVlPNOvMS8+yy3dVKwGVG0jKH7wCQc=
Subject key identifier: 60:23:5E:B0:8A:4B:3E:59:26:79:E9:0D:C6:73:D8:E5:0C:7A:CD:11
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial: 0197B9A14B2C1CC6E26264E69580563B81F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:00:44 +0000
Manifest this update: Sun 29 Jun 2025 03:00:44 +0000
Manifest next update: Mon 30 Jun 2025 03:00:44 +0000
Files and hashes: 1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: G/4YyKMj8UD8Lsa1N3gYE+v8G/GIP4i+QYV6D+G68Ao=)
2: gL_kuMaqCBJwQIMIS7ldG0BgqS0.roa (hash: aP7wklS1c2nj/ZqiWpRJ5vMpKjr7pu6Ax9+m6w/ftd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:4b:2c:1c:c6:e2:62:64:e6:95:80:56:3b:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Validity
Not Before: Jun 29 03:00:44 2025 GMT
Not After : Jun 30 03:00:44 2025 GMT
Subject: CN=60235eb08a4b3e592679e90dc673d8e50c7acd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:7b:c7:a7:34:ce:8f:3c:5d:71:55:1f:6f:
4d:5f:f0:81:65:1c:3e:b8:0a:20:85:23:7d:fa:ca:
90:1c:6f:4d:ae:4a:1a:50:d7:6b:61:d7:08:5a:38:
31:7e:a5:98:62:9a:f0:f5:0d:fd:bf:bc:9c:d2:a0:
13:88:b5:12:1d:a7:19:a6:c7:f7:34:ca:2c:8f:9e:
53:23:cc:00:f0:99:dd:4c:a8:cb:fb:59:b4:ae:1e:
19:26:ef:7f:6e:f5:55:a9:c7:3b:a2:22:f1:6d:8c:
da:ce:65:f0:06:f6:a5:d3:de:39:61:41:28:e7:cb:
f3:ea:7d:8e:66:57:b5:bc:22:36:d2:00:b1:eb:e1:
64:19:45:7c:ef:c5:56:0e:e7:f0:fa:bb:a9:2f:67:
cf:68:41:d3:f3:cd:98:b6:24:e4:4b:f7:55:e5:69:
54:5c:10:6e:3a:25:f3:14:28:13:d0:02:25:fe:bc:
99:92:e5:1c:a9:30:6b:4f:39:6c:5c:97:b8:ae:a5:
50:27:46:b2:66:70:ae:25:a1:8d:05:ad:6e:a1:90:
ca:bb:c7:dc:90:fb:ce:bd:7a:96:9d:d4:d3:d3:ef:
5f:6c:1a:ec:3f:7d:8e:8e:8e:16:4a:fe:ac:e8:76:
0b:6d:3e:f9:4b:57:ff:cc:c1:1f:83:3b:8f:ca:f8:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:5E:B0:8A:4B:3E:59:26:79:E9:0D:C6:73:D8:E5:0C:7A:CD:11
X509v3 Authority Key Identifier:
keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:5f:3a:12:1e:81:1a:e2:07:89:b9:8d:91:5f:34:f4:f1:
a4:be:01:bb:8c:ce:d2:7f:68:61:b2:0f:ee:95:9e:6d:37:b9:
ef:69:02:b3:3f:ff:8b:a4:25:03:a7:f6:c7:82:30:40:99:52:
9d:1f:7a:50:16:9b:29:d8:0d:cf:f7:00:ed:07:34:1d:fa:80:
79:5c:8a:67:1d:88:eb:9c:ef:f5:11:8d:76:81:70:17:f7:f5:
8e:0c:ab:22:4b:b3:35:fc:fc:e9:02:85:fa:67:ad:59:cc:d8:
5a:da:2b:91:95:6c:e7:31:5e:07:86:b6:85:87:19:23:c2:4d:
79:47:c2:4a:00:dd:eb:ea:e6:5d:dd:a8:59:0e:11:ba:4a:dd:
c5:26:b5:99:36:1b:7c:94:9a:04:2d:33:c5:0a:95:f3:68:2e:
41:c0:4c:00:7c:f1:98:81:72:74:c4:d6:e8:18:56:a3:a4:76:
69:09:44:0f:4f:ac:b4:79:75:81:4d:49:28:99:3b:21:c5:fe:
fc:65:8b:62:85:fe:39:92:0d:6b:20:ec:17:ec:7f:ea:10:67:
2c:d2:e5:b6:45:29:f9:71:87:d7:33:40:b2:b9:cb:16:9e:fc:
79:c2:66:52:5b:3e:7b:76:e3:b9:59:67:b5:f1:f5:60:3b:b2:
ea:c9:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:49 2025 by rpki-client