Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: 2ew4g6pG2OIyAr7LT8h5crPneac/6FwRei9Y6xl82NY=
Subject key identifier: E0:AE:CE:3E:81:73:BF:BA:1E:D9:61:45:26:02:B5:6D:4F:3B:5D:5B
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01976F62D147BB7234BA173ED7C19151157E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 04E1
Signing time: Sat 14 Jun 2025 17:00:36 +0000
Manifest this update: Sat 14 Jun 2025 17:00:36 +0000
Manifest next update: Sun 15 Jun 2025 17:00:36 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: DwLNO5IlaDJyTPadkXT4ahImQeYbFYvErWbSwVQUQ+o=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:d1:47:bb:72:34:ba:17:3e:d7:c1:91:51:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jun 14 17:00:36 2025 GMT
Not After : Jun 15 17:00:36 2025 GMT
Subject: CN=e0aece3e8173bfba1ed961452602b56d4f3b5d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:84:43:d9:eb:24:61:09:e6:d1:8e:d6:db:
b5:e1:17:c9:57:af:c9:c4:a8:39:1e:53:67:66:1f:
47:3c:e8:d7:56:23:2e:e1:f4:a8:d8:83:30:71:32:
14:04:38:88:8d:67:10:c2:64:3e:4c:aa:7b:b3:9e:
ef:5b:09:a2:b5:fc:ba:c2:42:2b:14:3c:a9:56:a3:
e0:24:ac:fa:0d:55:42:22:e1:e3:d6:df:ef:7c:10:
e4:3e:a9:f5:0a:d1:49:e9:ba:f9:36:3c:d5:22:64:
7a:d4:38:ff:5a:b8:8d:cb:32:91:51:eb:07:7d:31:
06:37:fd:7c:08:d9:72:ce:fc:22:09:0f:b2:b9:4d:
7d:b7:35:92:a0:84:30:41:ac:87:c6:e4:c7:f7:f6:
e0:e3:5f:be:30:8a:a0:de:b0:9b:02:26:df:97:44:
6e:84:af:a5:3f:d7:4c:6b:28:fd:1b:88:f2:c0:c9:
2b:92:d9:cc:44:35:ea:d5:5c:4c:df:c5:26:8e:94:
db:b7:ea:99:ba:7f:25:99:1d:0f:d6:71:e0:a2:e8:
3b:6d:7a:9a:26:d9:28:e0:06:08:2a:61:24:7c:89:
74:c7:12:7a:e2:db:bf:45:57:29:e5:ed:b3:9d:ed:
bf:cf:f2:a5:07:1b:1d:d2:d2:21:06:0e:c4:db:1c:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AE:CE:3E:81:73:BF:BA:1E:D9:61:45:26:02:B5:6D:4F:3B:5D:5B
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e7:c5:09:23:47:52:94:98:13:15:55:1b:ec:d3:2d:d6:3f:
82:d3:87:c0:c5:31:82:db:b3:76:d5:83:8c:f7:3a:9b:17:e7:
8b:bb:ff:eb:91:28:cc:ae:14:51:6e:e8:f7:3e:33:66:2a:88:
74:26:ae:93:f5:aa:46:94:28:8c:74:40:5d:92:50:5d:c2:68:
5a:42:9c:d2:35:3f:9d:81:ac:03:31:25:eb:66:7a:66:10:83:
1d:93:eb:29:96:1c:69:0d:67:ac:3e:a7:9e:5a:5d:1d:54:f7:
4e:6b:79:fc:51:e6:76:14:e3:77:1b:6d:ed:a7:62:e6:70:14:
36:4c:5e:8c:5c:ea:af:c7:02:5e:23:79:be:d6:53:29:41:2b:
f1:61:db:d2:4d:a5:b3:87:2f:91:7e:18:b5:cb:0a:64:0a:0a:
ce:8f:d7:df:0c:82:3a:62:f5:3d:63:44:cf:7d:11:8a:52:a5:
99:79:a9:ce:db:84:43:1d:80:bf:07:70:82:e4:78:4e:cf:b8:
31:c8:4a:ce:38:92:6c:b1:06:a3:9c:d2:fc:4e:5c:33:3f:b2:
d9:84:03:6e:ec:f2:c4:c8:4f:33:5e:0b:63:6b:4b:25:3e:af:
c2:13:b9:b7:fd:1e:1c:89:ac:59:5f:b1:79:ef:6a:c7:0c:14:
d2:c7:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:28 2025 by rpki-client