Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier: FI/ZJNbh2g22jux2BLjc1sAX3GqB+MAu2qMZJMU4oG0=
Subject key identifier: 75:05:06:B6:55:9B:87:6C:42:DA:F3:B5:61:FB:82:BC:DD:63:6B:4E
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 019779B011D691EC8D57D86397E191A303A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number: 09E7
Signing time: Mon 16 Jun 2025 17:01:11 +0000
Manifest this update: Mon 16 Jun 2025 17:01:11 +0000
Manifest next update: Tue 17 Jun 2025 17:01:11 +0000
Files and hashes: 1: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: TEoFroCGxkFWRhgO1/9VHEOZxyK2Qn3J8QBu35amXTU=)
2: ah-NG29pky0jPHEcgeOL-kOfH0Q.roa (hash: zKBnGYN4489QuBEbUaXwtDobGG4YVTXSMpaIv+wNvKw=)
3: zFFyOssEtNl2ZptlNvn-iw3yuoM.roa (hash: wU/a9ptBrD+06JSBz0EUZiC1M21vno+RkNOOYDTpTyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:b0:11:d6:91:ec:8d:57:d8:63:97:e1:91:a3:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Jun 16 17:01:11 2025 GMT
Not After : Jun 17 17:01:11 2025 GMT
Subject: CN=750506b6559b876c42daf3b561fb82bcdd636b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:b8:c0:04:34:63:e6:bd:41:bc:09:05:e7:
b8:40:22:20:11:c0:65:e7:d1:f2:4c:6c:7c:df:98:
91:58:10:87:e6:77:69:b1:0e:cf:82:18:98:e9:ed:
8e:22:62:e9:d9:59:cb:3f:ca:fe:4f:09:e9:a9:35:
75:4b:cb:1b:75:37:9d:a4:d0:16:fb:87:fa:f2:20:
f4:42:02:9c:95:c0:48:73:3d:d6:4d:17:b8:95:53:
b1:d4:20:f5:93:66:50:4d:44:08:2a:fd:1c:f5:d3:
9d:aa:7c:dc:67:cb:97:74:b1:15:68:ad:f2:69:f2:
79:09:0d:ce:90:f2:b4:b6:bb:01:78:a9:c9:4c:65:
b5:42:61:51:74:41:f0:15:93:8f:59:95:56:60:06:
90:ec:e7:34:2d:31:44:2f:bc:4a:85:23:29:6c:31:
ef:d6:5a:81:51:38:c5:ed:57:f9:f7:c6:b7:d1:7f:
68:9a:db:12:1c:1d:80:0e:0b:12:ae:16:9d:84:56:
37:eb:d6:ab:2f:bb:45:44:44:05:aa:aa:f6:ae:4f:
77:41:fd:4c:4a:73:a3:d3:e9:d9:db:9d:30:79:f3:
74:54:9a:97:0a:16:fd:66:e2:5f:a6:86:3c:42:00:
29:0a:6a:bd:f0:91:f7:dc:b4:d0:08:5a:b3:fc:cb:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:06:B6:55:9B:87:6C:42:DA:F3:B5:61:FB:82:BC:DD:63:6B:4E
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:7c:62:07:cf:2c:c7:de:fe:05:bd:95:37:01:ad:78:50:
e9:14:aa:28:b2:64:f6:e6:85:4b:b6:2e:05:70:33:ef:f8:81:
b8:51:1d:f2:a4:d5:59:dd:d1:92:81:9f:3b:a9:ee:bd:60:e8:
ba:27:ef:53:0d:12:17:74:66:3d:79:5c:1a:b3:39:c1:48:e1:
4a:0a:24:48:4d:8c:00:30:ce:af:ad:90:c4:f6:b1:25:65:92:
5f:17:a5:34:88:9e:81:49:23:23:ea:82:c0:c6:e1:42:93:03:
f0:e3:7c:c0:bf:01:1e:9a:fb:ff:1a:15:d1:31:65:99:36:19:
8c:b6:01:4a:99:ec:33:82:1d:f8:48:6c:37:1a:70:81:5d:42:
f5:e0:6e:58:39:e6:47:ea:c5:fb:00:12:51:9f:b2:f4:6b:0b:
d9:8d:c6:5a:45:89:43:3f:db:10:3f:c1:20:b4:b4:5d:4b:68:
72:47:30:50:ec:ec:09:ec:b5:ef:01:04:73:e1:bb:e3:35:f1:
1d:03:17:09:00:ab:f2:46:d7:12:34:83:10:aa:71:9a:12:c6:
bb:13:75:a5:6d:1b:de:61:68:7f:bb:fd:4d:e5:c9:fd:5e:da:
97:36:12:39:3b:08:27:eb:74:6c:0c:85:f0:d8:ea:9f:49:15:
e8:b2:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:01:43 2025 by rpki-client