Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: KS278YgHt9UEAfDgIzEZ8cgXL/ezJ39Hcc4Z2vG7dxc=
Subject key identifier: AD:0D:1E:FA:4E:83:57:F7:52:C9:48:7A:6F:6C:92:2B:8C:E0:F3:A4
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 01977B674BA4F57F701A56588CAD631AE347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 08D8
Signing time: Tue 17 Jun 2025 01:00:56 +0000
Manifest this update: Tue 17 Jun 2025 01:00:56 +0000
Manifest next update: Wed 18 Jun 2025 01:00:56 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: wxAREzMABfUzoxLNhHve4hccAFJoulIc6GKlUkMjldw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:4b:a4:f5:7f:70:1a:56:58:8c:ad:63:1a:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Jun 17 01:00:56 2025 GMT
Not After : Jun 18 01:00:56 2025 GMT
Subject: CN=ad0d1efa4e8357f752c9487a6f6c922b8ce0f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:cb:03:8f:c6:66:4e:04:e3:19:1a:cb:11:
82:bd:f8:11:7d:b1:50:75:d3:6d:c5:c8:c3:62:eb:
a5:d7:f5:0e:b1:5d:ab:7b:e1:ff:89:40:94:85:de:
38:5b:10:9c:0f:cb:72:9d:7f:11:5d:41:4e:e1:a1:
37:f4:9a:87:5d:57:e6:40:26:6b:7c:a6:08:d4:90:
73:be:a1:3c:61:94:d5:cd:04:bd:c2:9c:36:ba:78:
d5:9f:aa:81:bd:dc:8e:83:80:25:ae:b4:94:5a:39:
15:ec:ef:23:4b:fd:23:fc:98:bb:84:4a:39:49:a7:
a8:55:7c:09:d4:84:d0:71:57:e3:f5:ef:0a:d1:8e:
11:49:89:c0:af:d6:62:d3:86:ae:48:53:62:86:9a:
2e:52:bc:a4:71:66:5c:9c:b5:db:dc:7b:79:14:f3:
a4:88:af:7b:0b:46:2c:b0:79:d1:53:80:da:39:f3:
91:4e:f6:26:d2:58:6a:81:58:84:44:a0:48:8a:20:
c8:a9:1b:fa:83:ac:98:03:09:9d:ed:e2:2d:de:1b:
90:d9:d2:5b:a2:2b:23:42:32:65:27:45:10:c1:9a:
eb:c9:d4:18:02:e5:9d:84:51:26:14:79:9c:bd:7c:
07:60:94:40:0d:2d:64:0b:26:bc:29:e1:5e:9a:3b:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:1E:FA:4E:83:57:F7:52:C9:48:7A:6F:6C:92:2B:8C:E0:F3:A4
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:20:5a:89:42:04:31:eb:49:5b:0a:a0:8d:61:2a:b2:eb:52:
51:5f:26:ff:91:01:d0:7f:d9:66:55:db:e5:44:a4:76:cb:ef:
fa:d9:14:5b:6d:c9:84:12:af:42:16:6f:bb:87:79:b5:e8:bb:
30:1b:e9:7b:40:6d:3e:cb:f9:a6:d2:93:d4:45:bf:4c:7b:f1:
01:15:44:57:5a:e7:d1:c2:15:30:ef:9b:ad:2b:2a:68:3f:07:
e2:85:dc:7c:7d:c6:ad:81:a9:36:00:06:93:a1:af:3e:43:41:
67:2f:54:da:e9:47:7e:0d:6e:c7:2e:d4:32:82:e5:73:c8:d4:
4c:b7:d4:d0:6f:4e:f9:75:a6:6b:51:b1:ee:32:7e:97:c2:8d:
60:3d:00:a4:e5:27:cf:0e:cd:71:eb:ba:ba:3a:ea:1d:f9:28:
ae:5b:d8:f8:25:1d:b1:d6:54:f5:e0:7c:a7:af:5a:08:9a:f5:
3c:8b:87:6a:ad:bf:1f:77:72:39:2b:88:0d:51:90:1f:a8:56:
17:bb:f7:bb:41:77:00:60:8b:29:34:2e:1e:85:43:49:7b:15:
54:a9:ac:0c:3d:f4:14:79:af:b7:4a:18:4a:f0:dc:07:a4:36:
3f:25:92:bd:1c:2c:18:f7:44:5c:14:59:2a:69:10:83:1b:22:
15:a7:a6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7Z0uk9X9wGlZYjK1jGuNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjdmNGVhZWQ5MjFjYTM3ZDYzZWUyNGJhZjcxZTRjN2Zm
YTA3N2EwHhcNMjUwNjE3MDEwMDU2WhcNMjUwNjE4MDEwMDU2WjAzMTEwLwYDVQQD
EyhhZDBkMWVmYTRlODM1N2Y3NTJjOTQ4N2E2ZjZjOTIyYjhjZTBmM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkzLA4/GZk4E4xkayxGCvfgRfbFQ
ddNtxcjDYuul1/UOsV2re+H/iUCUhd44WxCcD8tynX8RXUFO4aE39JqHXVfmQCZr
fKYI1JBzvqE8YZTVzQS9wpw2unjVn6qBvdyOg4AlrrSUWjkV7O8jS/0j/Ji7hEo5
SaeoVXwJ1ITQcVfj9e8K0Y4RSYnAr9Zi04auSFNihpouUrykcWZcnLXb3Ht5FPOk
iK97C0YssHnRU4DaOfORTvYm0lhqgViERKBIiiDIqRv6g6yYAwmd7eIt3huQ2dJb
oisjQjJlJ0UQwZrrydQYAuWdhFEmFHmcvXwHYJRADS1kCya8KeFemjvAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0NHvpOg1f3UslIem9skiuM4POkMB8GA1UdIwQY
MBaAFOkn9OrtkhyjfWPuJLr3Hkx/+gd6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNmMDZ1MlNIS045WS00a3V2Y2VUSF82QjNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZTQxMWEtYTE5Yi00MGMxLTg5MzYt
ZmQ3MjE3NTQ0M2ViLzEvNlNmMDZ1MlNIS045WS00a3V2Y2VUSF82QjNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZTQxMWEtYTE5Yi00MGMxLTg5MzYtZmQ3MjE3NTQ0M2Vi
LzEvNlNmMDZ1MlNIS045WS00a3V2Y2VUSF82QjNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiBaiUIE
MetJWwqgjWEqsutSUV8m/5EB0H/ZZlXb5USkdsvv+tkUW23JhBKvQhZvu4d5tei7
MBvpe0BtPsv5ptKT1EW/THvxARVEV1rn0cIVMO+brSsqaD8H4oXcfH3GrYGpNgAG
k6GvPkNBZy9U2ulHfg1uxy7UMoLlc8jUTLfU0G9O+XWma1Gx7jJ+l8KNYD0ApOUn
zw7Nceu6ujrqHfkorlvY+CUdsdZU9eB8p69aCJr1PIuHaq2/H3dyOSuIDVGQH6hW
F7v3u0F3AGCLKTQuHoVDSXsVVKmsDD30FHmvt0oYSvDcB6Q2PyWSvRwsGPdEXBRZ
KmkQgxsiFaemtA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:18 2025 by rpki-client