Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: PLef/fHnjVPgXTwGcgdpqVBQEi9oyfHjyGarQeDjn2I=
Subject key identifier: C2:E6:E3:C6:28:A7:16:B7:0E:34:CB:42:0B:8C:D2:09:36:35:B9:87
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019778D3C81998A8C3115B5E0B7CF54559B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0C68
Signing time: Mon 16 Jun 2025 13:00:34 +0000
Manifest this update: Mon 16 Jun 2025 13:00:34 +0000
Manifest next update: Tue 17 Jun 2025 13:00:34 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: rRL0dV+ACmSz+aUY4gpP8RDeCHDrxKnok+27gaJy6OQ=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:c8:19:98:a8:c3:11:5b:5e:0b:7c:f5:45:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Jun 16 13:00:34 2025 GMT
Not After : Jun 17 13:00:34 2025 GMT
Subject: CN=c2e6e3c628a716b70e34cb420b8cd2093635b987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:ba:d0:e9:ac:9a:d1:d4:83:e6:91:b7:c6:
55:c1:56:6d:b1:d0:7d:61:38:1d:66:c0:fc:4e:c4:
f4:e5:73:b7:2f:51:c8:48:76:f1:18:68:a6:01:78:
20:5b:33:9d:04:65:1e:68:9b:e5:fb:40:de:df:6d:
55:e9:0d:11:7f:14:02:d5:03:0a:4e:0b:f4:1d:db:
99:69:13:d3:ff:42:9c:60:5e:d5:06:42:ba:af:7b:
c6:d8:49:43:95:84:a2:2e:40:23:ef:80:8f:a0:d1:
1e:ce:f1:4a:4e:44:42:de:b7:6e:c8:32:f6:c8:bc:
f1:7b:8f:eb:ec:ae:90:d5:3b:a9:63:ff:40:18:c4:
0d:0b:bb:e4:5e:dd:86:04:f3:a2:d2:84:b0:97:be:
93:d3:ee:f8:23:32:22:cf:39:a8:9c:7b:46:94:96:
98:72:31:5f:cd:ed:8d:ae:62:ee:10:ff:10:24:40:
84:dc:df:aa:61:78:9b:e6:4d:20:ef:48:26:fe:75:
96:3e:4e:71:a9:92:8d:6b:77:26:aa:d8:8a:6f:b8:
06:e7:a0:13:0c:29:6b:16:38:8e:a1:a1:4c:7d:a9:
57:ab:a0:65:f9:84:2f:8a:eb:8d:99:a3:41:39:fc:
b3:7c:b5:f7:90:50:28:32:36:0e:85:b6:72:91:b5:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E6:E3:C6:28:A7:16:B7:0E:34:CB:42:0B:8C:D2:09:36:35:B9:87
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e8:61:dd:be:dc:e3:fd:4a:0d:a1:b5:52:a0:98:9f:ae:bb:
22:43:b6:e3:2b:71:4f:ca:65:0b:c7:2e:7c:c8:48:bb:45:96:
4a:28:e9:22:7a:9b:7b:38:29:64:8f:ae:6e:0f:71:77:fd:be:
74:3f:98:a3:4c:23:7b:bb:f4:c2:e3:46:83:65:29:9b:e6:a3:
f4:38:da:18:5c:39:b1:4b:14:46:e3:41:5d:ae:f8:bf:27:e3:
61:ea:1c:eb:f8:49:a8:97:a4:5a:83:5c:b8:62:a3:b7:05:a2:
41:ae:ca:0f:bc:ae:0c:b8:5c:a7:df:d0:2f:63:6c:9d:c0:02:
ef:db:d8:45:74:42:bf:fc:b1:84:c1:ae:77:44:e5:ea:70:74:
93:f8:87:58:d6:2a:0b:90:02:f4:25:1b:fb:95:a3:c7:d9:1e:
a7:a8:f2:ff:33:dd:91:09:93:87:e9:c0:56:55:22:7a:c3:62:
47:37:52:4f:9e:db:45:2a:39:7e:0c:d4:db:f3:70:25:38:77:
04:11:3d:69:c5:46:bc:63:69:4d:95:22:41:91:07:f4:d4:9f:
00:c7:33:ec:fb:49:9a:1b:10:23:e3:ad:a9:27:6a:7b:8f:61:
87:fe:a6:bd:72:4f:92:3b:c6:8a:2e:ce:65:0b:ce:29:3a:04:
8f:cc:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:32:30 2025 by rpki-client