Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: r08fEdNPvPO6VeebnG8UH4p3MBTeEKQDS0g+GtYb2IM=
Subject key identifier: 00:6A:8D:95:F5:6D:1E:78:CD:1B:76:1A:F4:A7:DF:2E:87:48:D2:CD
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 0197BA7E3A4E5E42AD19C08AF4E67D6827C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0A1E
Signing time: Sun 29 Jun 2025 07:02:04 +0000
Manifest this update: Sun 29 Jun 2025 07:02:04 +0000
Manifest next update: Mon 30 Jun 2025 07:02:04 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: 4RexLmgJ7HEYcoVnLzlEkJZT09Z3g9lQlXHKfhvGtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:3a:4e:5e:42:ad:19:c0:8a:f4:e6:7d:68:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Jun 29 07:02:04 2025 GMT
Not After : Jun 30 07:02:04 2025 GMT
Subject: CN=006a8d95f56d1e78cd1b761af4a7df2e8748d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:f3:84:fb:e6:1a:07:07:80:21:74:83:96:
9e:f6:c2:38:d2:02:fd:1c:ff:be:2c:b9:ed:cf:bc:
ce:e9:e2:d9:04:70:ab:5c:73:04:52:db:f8:2d:42:
8d:95:27:c1:12:2c:71:06:db:0e:91:07:b5:1c:fa:
6d:b0:cf:13:c4:35:f7:5a:21:77:1a:4c:91:78:86:
da:b0:9b:05:27:bf:b3:5d:23:ae:cd:f7:3b:01:49:
9a:2c:33:02:a2:66:45:ef:44:48:73:3f:89:ce:9d:
39:a8:4b:a8:1e:36:69:5f:06:85:8a:b5:3b:84:54:
49:d3:3a:d2:60:d6:a5:b3:17:df:b9:94:49:fb:75:
67:f1:1d:57:ea:a6:ab:fb:7b:a6:29:48:b4:7e:08:
b6:05:c3:10:17:32:54:27:f9:cf:61:a2:a5:f4:63:
99:6f:94:84:99:7f:30:00:dc:f9:b4:17:d2:b4:f1:
b9:dc:53:58:88:27:b6:88:b1:85:2d:69:0f:24:58:
72:ed:c3:8b:25:88:d6:75:6e:fd:67:59:5e:97:9a:
2e:05:ad:3c:76:b6:7e:fb:5a:59:68:e3:fb:43:33:
83:b9:13:e6:bc:d9:66:f7:c4:41:12:53:34:f5:9a:
fd:4e:70:41:bf:a0:c2:3c:14:fe:88:9c:09:94:11:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:8D:95:F5:6D:1E:78:CD:1B:76:1A:F4:A7:DF:2E:87:48:D2:CD
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:92:b7:3d:ae:f6:33:08:db:92:c8:32:a4:7a:04:dd:e4:
54:8b:ee:13:e8:61:74:9a:18:c3:87:de:33:c8:b4:0a:09:ce:
24:11:cc:24:2c:e0:9f:24:8b:f3:ce:36:cb:54:68:78:90:6f:
30:84:16:44:20:16:de:48:72:e3:ca:3a:53:ed:28:b0:e8:05:
8f:45:4c:7a:51:02:58:a1:4f:dd:d6:3b:c1:3c:31:6e:72:77:
ee:97:ae:a0:ab:be:82:f5:0f:57:43:4f:f5:18:99:67:b5:0a:
09:a2:23:29:94:7f:21:e6:ee:b1:18:61:7a:06:95:d2:72:d8:
aa:30:1c:bc:bd:81:fb:ed:16:72:31:b2:81:6e:0d:5b:07:4c:
ab:d0:6b:58:4c:4c:91:ee:c1:5e:02:3c:e2:9e:75:5a:a3:6a:
bd:d6:f0:06:c6:76:a2:99:a5:97:a3:b0:24:76:ca:50:64:21:
d5:b3:d2:9b:dd:e9:f7:d7:e0:b3:36:ca:8f:84:da:a3:d8:e5:
b5:25:21:17:59:54:d2:14:74:7d:2e:64:0a:fe:4b:d2:53:2f:
5d:73:fb:15:6e:b7:48:20:df:97:32:3e:91:48:ab:29:9d:46:
aa:55:ea:19:12:02:38:79:ac:08:2c:fe:02:e3:83:f4:e7:e0:
fa:23:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:14:22 2025 by rpki-client