Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: PWdv9ldEEFUH7Wf7dFiOyo40W1ypgNPh6tBmkfE4B7I=
Subject key identifier: 06:D4:69:42:7B:98:13:25:AE:CF:DE:E3:6D:CA:F1:A7:79:10:89:5C
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01977AF9715C5983C292A6B366B955800E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 23:00:57 +0000
Manifest this update: Mon 16 Jun 2025 23:00:57 +0000
Manifest next update: Tue 17 Jun 2025 23:00:57 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: uT8pg1Ks9en56jqVge7oleLMv++baAaKgOL3ohkJREs=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:71:5c:59:83:c2:92:a6:b3:66:b9:55:80:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jun 16 23:00:57 2025 GMT
Not After : Jun 17 23:00:57 2025 GMT
Subject: CN=06d469427b981325aecfdee36dcaf1a77910895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:0b:98:ad:20:b8:20:f2:46:84:c0:4b:12:
0b:52:3a:89:7f:56:7d:8a:a5:a5:3a:04:9e:c0:f4:
16:db:78:76:f4:b7:83:d2:42:de:96:de:5a:3b:90:
fc:a9:56:0f:55:ca:f1:c7:07:91:84:e0:d0:cc:81:
16:25:df:cf:67:79:28:f4:07:36:da:64:17:d2:96:
cd:21:dd:e8:ac:1b:a5:ff:9d:a0:4d:bd:29:05:86:
06:c6:d4:49:d4:f1:fa:87:d9:4b:12:8a:96:06:af:
b0:1a:88:3f:ff:67:3c:d2:42:62:50:05:08:37:b4:
92:83:ce:92:47:f9:9c:53:0c:14:91:f7:f5:af:a8:
de:5b:3b:63:f9:45:e6:cb:01:b3:2d:43:1e:f8:af:
0e:03:ad:c8:6f:77:87:4a:9d:8a:8b:3c:3f:74:5a:
cb:bc:87:42:09:41:e0:d9:51:24:c1:64:3c:22:6f:
29:c3:1e:2e:3e:26:e9:98:8d:e2:31:d6:8f:15:e4:
aa:9c:4e:c1:5c:d2:13:86:65:f4:a6:55:2c:80:4c:
9f:db:f9:9b:a4:12:71:a9:87:aa:47:b6:7d:6f:48:
6f:36:69:d5:9d:aa:93:a0:09:68:af:1e:a1:28:06:
88:d9:ac:e5:05:03:8c:b8:14:88:14:1a:45:6f:96:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:69:42:7B:98:13:25:AE:CF:DE:E3:6D:CA:F1:A7:79:10:89:5C
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:55:2b:10:ee:06:0e:78:fa:44:6b:54:70:86:4e:3e:c4:6a:
b4:d3:b7:2d:b3:77:05:84:44:1e:84:7a:d6:c8:54:00:c0:e0:
27:92:1f:41:05:53:d4:3f:67:18:bd:5b:07:83:46:f1:e1:15:
32:75:f5:91:4e:1d:31:c2:39:94:14:20:7e:97:b6:05:7a:4a:
e0:dd:80:4b:1a:24:31:85:d1:cd:0f:6e:c4:83:e8:32:d4:8f:
7c:2a:d8:6f:e9:51:52:4f:f4:d2:d4:96:25:4f:92:8e:65:6c:
61:a9:19:5d:83:a0:6f:12:96:a1:e2:18:5b:ce:1b:db:6d:a1:
ea:10:de:fc:e5:e1:c7:7f:45:e9:a7:dc:dd:13:d2:12:f6:b0:
21:d3:9a:79:04:f0:2c:83:fb:f7:62:e7:a9:b3:67:04:bd:f7:
eb:d9:b2:ba:2a:6d:1e:93:1f:9a:c2:bc:ad:a1:71:32:59:cd:
56:59:47:5e:a6:1a:dc:4f:51:80:8c:08:0a:ba:9a:2e:41:fb:
02:5d:90:e9:e3:c4:ed:bf:e7:93:42:d1:82:bd:15:c5:52:53:
23:a0:b2:58:1e:e4:a8:fc:46:3f:ed:f2:80:0e:12:8b:6a:f8:
e5:23:6d:20:b4:ff:65:0b:0c:cc:a8:30:01:25:b7:34:b2:95:
a4:ce:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:35:40 2025 by rpki-client