Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier: OO5qxp2bn88ypPYPhLKdlxQXF57RTAv61AgTz1nVZyU=
Subject key identifier: 1F:89:CD:64:F9:22:E9:B7:C7:23:96:4E:DD:E8:76:C5:61:55:C1:FC
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 0197B77C49E06683FFB9A018D5C2AFB5FCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number: 0CEC
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: O5U1lIiYIwQCX168i8qK4+cvwAg8qxH8nnAKF0XaJ+I=)
2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:49:e0:66:83:ff:b9:a0:18:d5:c2:af:b5:fc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=1f89cd64f922e9b7c723964edde876c56155c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:e7:ce:93:ca:39:f4:2a:49:52:e8:79:b4:
3e:dc:d9:45:86:e4:d1:58:2c:d4:de:8c:c9:75:9f:
79:f1:6e:58:a5:5a:3b:66:24:ee:2d:78:7d:03:3c:
f6:57:2d:69:fd:e0:04:81:55:e9:96:8a:94:83:1f:
e6:ac:31:e4:69:97:52:8f:3e:5b:5b:a3:50:e0:29:
a8:f5:dc:43:ec:c8:7b:d0:95:0b:6f:a0:a1:f3:ec:
54:f1:ec:f8:70:e8:a5:f2:a9:ad:a9:54:01:91:5f:
c4:7a:36:6e:d6:78:42:66:bf:20:c5:55:5d:41:94:
21:5c:f2:4a:43:31:f1:f1:8e:ab:b6:17:2f:ee:11:
d4:40:28:6e:97:de:bb:1f:27:ce:d9:30:0e:37:2b:
c3:d5:d0:25:1a:a5:ca:64:09:4b:d7:55:a0:d2:86:
24:22:0a:12:ec:4d:07:8a:b5:2a:ff:e3:c2:76:82:
45:d2:d8:2c:ad:40:56:db:e1:38:e5:db:17:7d:36:
b1:2e:3b:03:b8:0e:ef:02:fc:2e:e2:40:f1:50:6b:
66:3a:fc:a0:9e:19:84:cf:c5:e8:46:26:39:90:c8:
f3:e8:b8:77:9b:85:7b:91:91:26:c0:7c:ea:e9:67:
d8:f3:05:3c:8b:ec:81:26:78:73:b6:a3:d5:11:bd:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:CD:64:F9:22:E9:B7:C7:23:96:4E:DD:E8:76:C5:61:55:C1:FC
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:e2:57:b7:42:8d:12:e8:2d:90:05:6b:71:5e:f6:ea:d2:
ff:96:f8:a9:2b:bf:81:b7:59:73:82:f8:a5:a5:14:6b:0a:31:
6e:4c:1f:09:d5:26:ef:b4:0c:7f:ce:64:9e:97:2a:a0:be:aa:
20:69:22:ef:3b:84:fb:0b:b9:ac:54:bc:4f:33:25:67:8b:11:
1b:e9:59:4c:4c:17:f5:05:45:9f:5f:68:f0:84:a5:ca:f3:bd:
38:4c:18:b6:20:11:57:5b:52:db:bf:96:c0:0c:be:3b:0a:80:
b0:17:11:f9:f7:0c:e9:33:ab:a0:ec:5b:86:8b:5e:a4:5f:e4:
5b:23:bc:65:b9:d8:ad:56:a2:f0:6f:80:d1:82:38:32:6c:c7:
2d:fd:1f:51:42:74:27:2b:96:2b:df:fe:69:75:41:bc:2e:e7:
29:e9:79:63:1b:5f:07:42:04:6a:c6:89:3a:5d:04:e9:e8:e1:
3a:ac:57:80:cf:5a:9b:0a:56:e3:8b:a2:34:60:b9:44:03:8b:
4a:23:05:87:20:2f:83:12:31:7f:23:47:f1:9e:a5:13:8e:0d:
d4:7e:d0:3a:91:5e:67:96:0e:10:e5:99:27:bb:c7:03:09:ab:
d9:77:19:20:2e:99:df:8e:de:07:40:e6:34:2a:91:3d:f2:4a:
e9:ea:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client