Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: tAtjhFPLc44j+qdOJLKXcZqZbrALvTLPaBx3qtL6RBw=
Subject key identifier: CD:89:95:D9:B7:60:1B:D5:C4:E2:EA:A3:F3:42:E7:87:3F:B7:8E:3E
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 01977AC243857824C2C6D051B755AB2506E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 22:00:40 +0000
Manifest this update: Mon 16 Jun 2025 22:00:40 +0000
Manifest next update: Tue 17 Jun 2025 22:00:40 +0000
Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=)
2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: R/Z8h+UD3IfwGQdXuyIikkW7yhV8A1XPYVFODHUQe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:43:85:78:24:c2:c6:d0:51:b7:55:ab:25:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Jun 16 22:00:40 2025 GMT
Not After : Jun 17 22:00:40 2025 GMT
Subject: CN=cd8995d9b7601bd5c4e2eaa3f342e7873fb78e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:e9:9f:ab:2a:e2:45:1b:7f:34:86:2a:fa:
7f:22:c5:fa:17:62:6f:4d:bc:bf:38:48:1b:51:e7:
8e:bf:ec:eb:77:36:6b:ee:3e:ca:7c:11:c5:2b:d7:
a8:2a:ce:40:4e:2f:c0:ee:fa:5d:d5:48:a4:d1:6e:
40:4a:d1:62:8c:9c:5c:77:9b:12:22:86:be:dc:52:
18:c2:ae:c1:47:78:a1:1e:40:00:10:60:d7:05:ec:
f3:36:31:19:5a:c8:22:91:33:f7:8a:b2:a6:af:fa:
67:38:b7:52:31:1f:95:68:8a:e1:b0:fc:2c:51:2b:
e5:db:6e:f3:cc:96:b0:5c:ae:87:af:ea:c3:7c:67:
66:19:e3:55:b4:a7:58:69:d0:d7:fb:46:e1:2c:83:
35:53:50:95:72:98:19:a9:3b:2b:16:48:8a:65:a7:
f6:45:42:bf:36:f1:81:3c:e9:f1:39:f5:1f:14:22:
54:76:35:f6:bb:77:45:33:13:68:4c:89:0c:67:f0:
6d:34:e0:77:ce:96:16:7a:9b:d8:ba:0f:38:34:50:
75:38:22:39:e7:db:4e:6b:6a:43:e5:d7:1d:f9:24:
08:33:76:96:0f:fa:5c:55:f2:e6:12:1c:9a:68:6b:
2d:42:10:72:a9:62:84:b5:f1:a5:c7:49:24:89:dd:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:95:D9:B7:60:1B:D5:C4:E2:EA:A3:F3:42:E7:87:3F:B7:8E:3E
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:39:7d:49:25:d8:c2:3b:e8:f2:c4:5c:d3:80:df:51:c1:
f8:8f:46:4f:e7:1e:3c:23:78:fa:96:8f:12:b6:ff:e2:89:1f:
41:f8:1e:4c:82:4f:fc:3b:af:3a:74:ef:e2:0f:1c:09:5f:84:
b9:03:70:7e:94:cc:18:56:33:bc:55:07:70:d8:90:da:51:97:
fc:cf:0c:79:d6:32:42:71:54:53:4b:18:0d:9e:32:6b:14:ac:
08:af:59:78:ad:57:b9:8c:c6:fa:cb:89:fa:a4:c3:93:bd:f6:
64:d5:da:81:b1:d3:fc:cf:7b:bb:d9:e6:6a:1e:9a:1e:f3:a6:
4f:47:95:56:56:a0:89:a3:15:25:e7:f2:d8:a8:80:1a:e1:21:
27:19:55:6c:cd:73:f7:60:ed:1e:47:0a:42:ba:00:cf:1e:e9:
ee:cb:63:9e:77:52:fe:12:70:b3:02:d6:26:9b:64:60:31:a9:
67:bb:2d:a5:ef:59:f0:cf:36:e3:cf:6a:ca:a5:96:3e:e5:65:
c6:d5:5f:a2:34:1c:0f:fd:68:5b:ae:e0:22:3b:8c:91:cb:fa:
6a:57:7c:05:90:fe:26:32:ab:ab:4f:a9:3c:59:ba:83:e4:68:
6b:9b:36:6c:64:64:26:30:23:fd:f0:ab:b3:1c:1d:e6:22:15:
be:e6:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:51:14 2025 by rpki-client