Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: k/ecbKxWWtM6WBDnEEusxBdx03ZsW6ztF+lFIQ4mWlc=
Subject key identifier: 02:86:72:D1:37:63:B2:D9:69:9F:36:7C:6B:2E:52:BC:0C:92:F4:A5
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 01976DE290A8D6F2957C251B4613FB1060C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 10:00:54 +0000
Manifest this update: Sat 14 Jun 2025 10:00:54 +0000
Manifest next update: Sun 15 Jun 2025 10:00:54 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: Acrngxz4YVxLU7xmx4Y1HwHEZ9AQ0Jg5h+ff4x1rqXI=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:90:a8:d6:f2:95:7c:25:1b:46:13:fb:10:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jun 14 10:00:54 2025 GMT
Not After : Jun 15 10:00:54 2025 GMT
Subject: CN=028672d13763b2d9699f367c6b2e52bc0c92f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:c8:8c:b4:8c:45:f4:6d:48:5f:b9:e4:1a:
80:13:2a:57:38:da:39:1a:41:9f:b6:f4:8f:29:99:
e3:6a:a4:ff:73:0c:5d:a8:79:b5:31:de:bd:06:4c:
29:8c:44:9e:f1:a3:1b:2f:f8:3a:8f:46:d3:bc:9d:
c6:ef:49:1a:bd:98:02:d9:c4:1e:aa:9b:1b:5a:fb:
ac:01:a3:17:35:3a:99:d2:54:0a:a4:6a:0f:50:9c:
9e:a4:83:64:ac:43:7e:62:2a:32:07:02:e3:6b:fb:
99:f9:e1:89:d9:33:a6:87:bf:53:fb:a9:66:39:5a:
b5:31:85:3d:54:d8:70:33:73:61:ca:a5:01:b1:42:
fa:92:d0:0c:b4:03:78:9b:38:6f:ed:b8:57:db:d4:
c4:d4:08:27:6d:ed:49:e3:ae:49:33:49:ee:23:70:
2f:1d:fe:87:42:83:be:52:97:08:dd:50:77:e5:47:
4c:55:b3:23:d9:f9:41:97:a0:08:2c:a1:53:42:3a:
f8:0c:43:c5:67:92:f3:00:d3:5f:44:05:55:01:09:
64:9e:93:b9:50:f3:6c:d9:ab:b8:bb:7e:14:10:63:
d0:f0:43:28:ca:fd:fb:6a:1a:75:76:0b:1c:7b:a1:
39:1d:1c:37:5c:e3:01:54:02:67:dc:bf:01:05:4b:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:72:D1:37:63:B2:D9:69:9F:36:7C:6B:2E:52:BC:0C:92:F4:A5
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:92:80:e4:3c:7e:94:54:f5:cc:fa:f6:c3:a7:b4:aa:75:5e:
15:fe:c1:ba:27:e1:26:e6:44:d6:0d:f2:ba:51:91:aa:da:8f:
2c:b0:ee:12:3b:2b:9c:7e:99:48:d5:c0:12:49:d4:bc:1d:33:
c6:65:2d:79:a3:9d:7d:95:29:66:c8:a1:25:2c:56:3c:68:4d:
c8:b6:b0:6d:90:0b:80:5d:ea:4e:8b:b1:ab:f9:59:9c:c9:93:
f2:49:08:9a:1c:84:17:95:53:7c:22:c0:e0:90:d0:c8:2a:7d:
75:da:cb:fc:e6:d8:b0:9d:26:9a:74:2a:7a:97:60:6c:de:60:
a8:a3:0b:84:cd:a5:f5:e5:e6:ae:1e:0f:e6:81:5a:c2:5c:4e:
b7:28:d2:02:24:a3:70:4f:7d:6e:1c:25:86:18:d0:9d:64:5f:
ae:f1:6c:ee:de:72:1b:5d:55:17:28:50:7b:97:24:0a:4c:de:
1b:93:95:a1:2c:42:18:43:a1:8a:31:79:05:93:8d:49:94:b7:
5b:06:24:35:4c:22:9c:75:df:8f:98:a3:48:5a:b9:fc:30:c2:
ed:b5:26:f4:15:6a:e9:0e:72:ef:8d:10:6b:d6:b9:23:e9:24:
c0:07:ce:cc:a4:14:cc:93:90:6f:db:26:ef:35:4e:53:f6:c3:
e8:a3:39:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4pCo1vKVfCUbRhP7EGDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjUwNjE0MTAwMDU0WhcNMjUwNjE1MTAwMDU0WjAzMTEwLwYDVQQD
EygwMjg2NzJkMTM3NjNiMmQ5Njk5ZjM2N2M2YjJlNTJiYzBjOTJmNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTLIjLSMRfRtSF+55BqAEypXONo5
GkGftvSPKZnjaqT/cwxdqHm1Md69BkwpjESe8aMbL/g6j0bTvJ3G70kavZgC2cQe
qpsbWvusAaMXNTqZ0lQKpGoPUJyepINkrEN+YioyBwLja/uZ+eGJ2TOmh79T+6lm
OVq1MYU9VNhwM3NhyqUBsUL6ktAMtAN4mzhv7bhX29TE1Agnbe1J465JM0nuI3Av
Hf6HQoO+UpcI3VB35UdMVbMj2flBl6AILKFTQjr4DEPFZ5LzANNfRAVVAQlknpO5
UPNs2au4u34UEGPQ8EMoyv37ahp1dgsce6E5HRw3XOMBVAJn3L8BBUuTcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKGctE3Y7LZaZ82fGsuUrwMkvSlMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5KA5Dx+
lFT1zPr2w6e0qnVeFf7BuifhJuZE1g3yulGRqtqPLLDuEjsrnH6ZSNXAEknUvB0z
xmUteaOdfZUpZsihJSxWPGhNyLawbZALgF3qTouxq/lZnMmT8kkImhyEF5VTfCLA
4JDQyCp9ddrL/ObYsJ0mmnQqepdgbN5gqKMLhM2l9eXmrh4P5oFawlxOtyjSAiSj
cE99bhwlhhjQnWRfrvFs7t5yG11VFyhQe5ckCkzeG5OVoSxCGEOhijF5BZONSZS3
WwYkNUwinHXfj5ijSFq5/DDC7bUm9BVq6Q5y740Qa9a5I+kkwAfOzKQUzJOQb9sm
7zVOU/bD6KM5sQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:17 2025 by rpki-client