Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: 2P8740peFbxu7P8EDscwRp+BcHWGP/OgEZ+FdGX0/DA=
Subject key identifier: 07:2E:79:88:5E:F4:80:CA:63:93:65:FA:02:21:7B:E9:0C:AC:14:E9
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019778D48E7C42EC6222715F378E4A27CE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 13:01:25 +0000
Manifest this update: Mon 16 Jun 2025 13:01:25 +0000
Manifest next update: Tue 17 Jun 2025 13:01:25 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: jKr775/988TyLtS7wjNDyPi16OqL/bit2zPqxr6SHyU=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:8e:7c:42:ec:62:22:71:5f:37:8e:4a:27:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jun 16 13:01:25 2025 GMT
Not After : Jun 17 13:01:25 2025 GMT
Subject: CN=072e79885ef480ca639365fa02217be90cac14e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:ec:54:9f:4d:e1:d3:05:65:b1:02:c7:71:
e7:d4:5b:cf:f1:7a:2c:a3:7d:2a:a4:38:aa:e9:65:
bc:47:52:32:95:3e:50:59:ff:b8:36:0f:82:c3:d5:
e9:b7:dd:63:32:be:12:76:33:51:ff:c8:eb:d5:fa:
e1:d1:c2:d4:f2:56:c3:56:a1:b3:9b:ff:52:33:51:
24:8d:e3:28:5b:6c:d1:95:3b:5d:b2:39:94:7e:6b:
d0:f6:7c:82:7f:49:69:bf:fa:29:1b:3d:0b:35:5f:
e9:b7:43:68:9e:ba:ce:b3:e4:ed:f2:50:65:44:57:
ae:64:18:9e:26:ad:93:98:c7:d4:83:79:81:d2:bf:
87:a9:c1:19:8c:dc:94:a0:26:d4:cc:4b:fa:a1:13:
d9:df:d4:98:be:f0:c0:a0:9b:b3:34:a6:fe:b3:de:
8e:0f:fa:46:d5:57:cf:ac:6c:5f:18:29:5a:81:d2:
26:83:fd:28:8c:f4:e4:d3:30:73:eb:f6:e8:b6:48:
27:d5:2e:33:64:c3:33:ff:fb:63:53:e0:46:0d:f7:
28:47:11:5c:67:b7:3c:3c:65:3e:4c:ec:91:30:c4:
61:8f:28:3a:31:df:fa:19:51:67:f3:2a:c8:1a:22:
b0:c3:fe:1d:b4:b0:1f:8c:7c:0d:0b:b4:df:1a:5e:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:79:88:5E:F4:80:CA:63:93:65:FA:02:21:7B:E9:0C:AC:14:E9
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d0:a9:d2:b9:f7:ed:85:9d:df:61:4a:fd:d7:62:b3:4d:65:
3e:a3:b8:3d:80:c1:55:07:10:cd:cf:55:5d:44:43:dd:48:61:
5e:cd:b2:1f:08:85:b1:57:b9:97:4a:45:0c:80:40:01:af:8e:
f6:83:22:30:6a:f7:ac:5d:62:7d:8b:b9:67:d7:40:93:86:6c:
23:00:cf:e8:30:c0:9d:26:ad:3a:31:2a:a9:cc:4f:40:52:47:
09:2f:10:d1:57:16:f4:4d:2e:4f:42:d8:28:c9:b3:d3:84:0f:
b7:f4:67:70:41:65:28:e5:0d:3d:7e:65:45:b4:ac:30:77:ed:
6a:17:6b:3b:72:f6:31:4e:e2:af:26:7c:04:1e:bf:48:e5:33:
a9:0d:14:4f:8a:82:05:e3:af:3c:39:ce:14:39:52:24:8e:61:
7f:9a:ab:c6:e1:2e:49:ec:8c:87:20:68:c7:37:e1:4f:cc:e3:
72:04:5b:8d:18:24:05:50:2b:52:c1:73:68:cf:7a:a6:58:ac:
9c:90:d0:cf:a7:9b:a8:e1:0f:a9:a3:2d:3f:13:41:a3:f7:8a:
7b:9b:1f:09:81:4c:26:c8:5c:43:90:8d:37:b4:11:73:33:7c:
68:68:02:a3:5f:e9:a0:30:58:a3:d9:bf:22:4c:e8:78:29:06:
9b:f3:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:14:27 2025 by rpki-client