Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json)
Hash identifier: XIfjmKW+Kg79rXpNb3DOZo+VM6HmRgxBq7cPkcnezwo=
Subject key identifier: 20:44:32:FB:2C:71:10:8C:B0:34:0F:23:A7:E4:94:01:73:FD:8B:63
Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Certificate serial: 01976DAB5DB1C6FCE6E2F0E301D627F7365C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
Manifest number: 0CDC
Signing time: Sat 14 Jun 2025 09:00:36 +0000
Manifest this update: Sat 14 Jun 2025 09:00:36 +0000
Manifest next update: Sun 15 Jun 2025 09:00:36 +0000
Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: +cJwzABHZe1En+QRzTDcVdmgcZ9iX3U3PIc3n4Tdgh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:5d:b1:c6:fc:e6:e2:f0:e3:01:d6:27:f7:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Validity
Not Before: Jun 14 09:00:36 2025 GMT
Not After : Jun 15 09:00:36 2025 GMT
Subject: CN=204432fb2c71108cb0340f23a7e4940173fd8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:2d:82:9f:0b:1e:af:09:9d:78:2c:db:8e:
9c:26:68:f0:27:8e:f5:70:2d:0a:62:1a:be:6a:36:
3b:a1:de:eb:cb:16:84:c3:da:51:b7:2b:a7:72:f3:
a9:2e:f1:d7:d5:e8:9c:00:b6:c4:6f:aa:34:c0:4d:
18:76:31:65:e9:da:f5:25:b2:11:d9:c9:89:99:f6:
f6:a1:b8:b5:38:aa:5a:92:1f:04:0b:29:32:12:22:
65:0c:1d:27:2a:65:28:3d:75:02:85:5f:bc:5f:35:
2b:63:c3:66:b1:9d:60:0e:ff:1d:3c:52:8d:de:b7:
a0:32:73:ad:eb:a6:92:26:bc:e5:22:7f:05:6f:a7:
3e:1a:68:1e:33:1c:91:28:6f:5c:7d:20:b8:f8:21:
f0:3b:d4:e4:96:2f:d5:21:18:a5:8e:0d:b3:0f:b7:
60:54:82:94:fd:85:6f:15:57:af:43:14:25:f2:8a:
50:d4:03:ec:6c:bd:66:cb:60:7a:2d:47:60:93:e2:
52:71:19:2f:ab:e5:2b:ec:bc:82:b6:a1:09:7f:6a:
36:84:ed:b9:8a:64:41:a8:74:bb:1e:1e:ff:ae:95:
53:29:9f:75:a5:59:a4:37:bc:3b:cc:3b:b0:3a:5e:
b4:02:20:eb:37:8a:70:3c:8a:b9:f0:0e:00:dc:de:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:32:FB:2C:71:10:8C:B0:34:0F:23:A7:E4:94:01:73:FD:8B:63
X509v3 Authority Key Identifier:
keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:08:30:72:6e:9b:b5:0e:d7:12:6a:58:96:9f:e0:01:bc:
0a:3e:64:62:e6:80:32:72:51:b1:98:7e:d5:8e:b4:2e:95:73:
8d:65:e6:3b:24:ac:75:d0:c5:30:de:00:c7:e9:d1:80:f2:38:
37:e2:ec:ac:1e:99:36:31:c7:5a:5d:cf:1b:49:ac:ca:f5:5a:
db:42:a3:3e:a0:70:1b:26:be:ef:65:51:8d:d8:69:be:22:15:
6c:04:94:4c:7a:8a:73:03:a5:2b:d6:e9:c2:47:bf:44:40:4a:
01:e1:7c:35:d7:ba:c3:00:2a:1f:de:60:d4:ed:90:70:d8:2e:
a8:c3:6b:a3:11:3e:31:d6:38:10:de:ab:58:57:48:ec:15:e7:
9f:05:1a:24:f4:47:52:72:65:85:9f:9d:30:66:86:d3:80:ca:
8a:3b:b1:ac:dd:03:4e:3e:ae:43:22:d8:33:b1:50:16:0c:fd:
51:99:4f:1c:8e:ab:d3:2e:80:7d:b9:6b:fd:10:1a:12:81:35:
48:fb:c9:49:08:a7:6f:4f:db:46:a1:fe:a8:93:1e:b4:3f:cf:
c3:46:9d:3f:e1:db:e2:41:04:57:6a:a5:03:29:73:7d:5d:5d:
08:2d:ca:2c:02:5e:fa:af:5a:ee:3d:89:8d:ab:63:53:a9:95:
38:35:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:43 2025 by rpki-client