Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: sExCwapBncsefEB1k22+c1RE9KEbfjkCVt5HxANcV0A=
Subject key identifier: 0C:64:FE:41:AE:B7:78:C7:66:31:40:D6:D9:8A:E5:19:88:C5:DD:00
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01977308BD5AF3E1176292FCBAC333BEF8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 084F
Signing time: Sun 15 Jun 2025 10:00:41 +0000
Manifest this update: Sun 15 Jun 2025 10:00:41 +0000
Manifest next update: Mon 16 Jun 2025 10:00:41 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: aZucgEeaNWZ+yKOj/WHlDLzrzRRDU9JwqEWDHVE0qI0=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:bd:5a:f3:e1:17:62:92:fc:ba:c3:33:be:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jun 15 10:00:41 2025 GMT
Not After : Jun 16 10:00:41 2025 GMT
Subject: CN=0c64fe41aeb778c7663140d6d98ae51988c5dd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:b7:6a:71:9d:18:f7:06:8e:a5:8f:a0:ed:
ec:72:c5:e2:4c:0e:c2:7f:a5:8c:42:b3:3a:b4:8d:
2b:9c:8f:c2:cf:16:c0:9b:e9:0b:fe:ef:a3:9e:f0:
5c:88:18:a1:32:ea:8d:0b:51:4a:66:4a:3e:c1:cd:
48:4c:af:0d:12:30:32:9f:4b:89:03:b6:5e:21:8a:
7c:51:c0:ad:01:ac:c2:0c:a5:a3:5c:eb:dc:3a:1c:
89:90:ac:25:88:0c:ba:3a:e2:c0:83:a5:e7:06:2f:
6e:83:77:09:31:34:3b:5d:37:ee:ae:fc:d9:4c:95:
19:7a:33:41:87:63:22:5d:a8:36:6e:ed:a6:f6:23:
10:4a:aa:32:e9:c1:22:33:e5:14:05:db:16:c2:ce:
af:58:ff:75:f9:b2:b2:54:77:49:94:d8:eb:94:aa:
d6:56:85:8b:1f:ef:6c:2d:fb:44:a6:ed:99:e8:c7:
ff:25:86:0a:be:31:ab:36:29:c4:a3:57:92:f3:c5:
5e:cc:8a:01:a5:5a:35:39:20:b3:16:8d:5f:e6:59:
a0:e4:55:64:fb:65:84:92:b8:79:31:16:37:4f:6e:
1c:ab:f0:b4:8f:b8:a9:d0:63:1a:c7:02:ee:05:b3:
22:e2:9c:c2:39:f6:e0:67:64:6f:a9:86:73:54:98:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:FE:41:AE:B7:78:C7:66:31:40:D6:D9:8A:E5:19:88:C5:DD:00
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:79:16:6f:7c:61:5a:9d:2f:a8:bd:e7:d9:ff:22:9e:9c:1a:
45:90:49:9c:d9:93:54:ac:f3:16:af:26:7f:35:fa:22:ce:f7:
17:d7:7d:4c:4e:f7:a6:d4:52:24:b7:94:1c:63:4c:b1:4c:69:
45:05:72:6f:0b:ec:da:e3:44:6b:3c:93:5e:bb:e6:ed:52:7f:
3a:0a:fb:5b:e0:43:a3:ca:35:0c:bd:03:90:8b:03:26:a3:07:
bd:87:61:9f:bd:b5:0f:80:96:dc:42:3d:7e:b8:1b:8c:3e:73:
8d:4c:a2:93:72:77:00:5a:2b:2f:e5:6d:a8:12:d1:1d:a4:f2:
ca:66:bb:29:68:00:56:66:8b:ce:ea:aa:7f:92:12:bb:ab:17:
6f:7c:a9:95:aa:c1:84:42:6a:2e:15:f0:08:9b:66:cf:8e:90:
0c:cd:c0:6c:27:67:8f:58:c4:3b:31:76:b7:fa:30:e4:a4:d9:
0c:ac:85:c0:05:cc:a0:3b:64:3a:b5:29:27:5d:9c:a5:4d:78:
60:60:61:88:07:0e:2f:1a:32:be:70:18:a0:b0:8f:e4:56:f0:
ad:ff:65:62:23:b5:d4:5a:fc:bc:41:8e:9e:96:d6:1b:5f:3e:
d2:ac:48:19:1b:b8:ae:4e:4e:cc:79:de:52:fe:0a:04:c5:7c:
86:15:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:38 2025 by rpki-client