Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File: 6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier: St3S0UgtsRoMs6yil1SkPLJDyo7n7c3h48pT2gryiIQ=
Subject key identifier: FF:66:F5:41:28:D0:13:F1:A6:80:3F:9D:5F:9F:DD:F3:14:FB:23:39
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 01978168FCB8DD5EA4F489553B85E10DBDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number: 0815
Signing time: Wed 18 Jun 2025 05:00:30 +0000
Manifest this update: Wed 18 Jun 2025 05:00:30 +0000
Manifest next update: Thu 19 Jun 2025 05:00:30 +0000
Files and hashes: 1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: eFiT7lOU6zEvAmXMiNg9C6QZLMXXxk9wvDbnTzwTp3c=)
3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:fc:b8:dd:5e:a4:f4:89:55:3b:85:e1:0d:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: Jun 18 05:00:30 2025 GMT
Not After : Jun 19 05:00:30 2025 GMT
Subject: CN=ff66f54128d013f1a6803f9d5f9fddf314fb2339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:6a:77:ae:f2:9a:b4:0e:f0:7c:6b:ce:88:
54:a4:d2:fc:30:01:43:64:93:8d:73:d6:7d:7d:ad:
e9:fe:50:06:a2:af:15:44:68:19:e9:c4:07:86:ae:
ab:51:72:4e:85:41:45:b7:cd:6e:6d:da:8f:94:a6:
bf:30:28:d3:43:80:80:92:40:41:b0:eb:6f:19:d1:
fe:d5:35:a2:d4:2a:68:c8:9c:52:49:95:8c:9f:55:
61:dc:1a:6e:a1:43:17:fa:ff:40:6b:6c:ab:e1:af:
aa:ac:69:88:24:a4:53:04:fa:b3:9f:71:fa:fa:02:
f5:ea:4a:ca:21:ef:09:49:a7:84:41:cf:fe:30:bf:
ea:bb:e8:ac:7b:cb:9d:59:80:f7:df:fa:6d:56:50:
52:4b:51:fe:27:3f:ce:62:2d:3d:a5:c1:b5:7a:92:
cf:07:f5:b0:6c:b0:bf:3d:24:c1:38:3a:b0:93:88:
60:7c:65:1d:87:fe:28:8c:70:f6:32:b7:28:56:f4:
8b:4a:f2:80:ba:46:7d:cb:1d:ff:2e:e2:fe:1e:01:
21:04:92:36:22:77:42:26:19:38:cf:5d:7d:1e:50:
c4:21:41:59:aa:d1:da:bf:0a:25:68:16:04:79:ee:
c0:73:70:5e:ce:54:ae:34:52:c1:04:fb:f6:b6:06:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:F5:41:28:D0:13:F1:A6:80:3F:9D:5F:9F:DD:F3:14:FB:23:39
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:ab:9b:03:8a:da:a8:b0:a7:fa:a6:62:5a:2d:65:e1:21:
e7:96:b6:f6:81:52:dd:ed:26:34:b0:d6:92:c2:6a:dd:31:fb:
0d:2b:ee:59:87:93:7d:a5:c9:8c:a5:54:8d:7e:f3:76:d0:e1:
1e:28:c9:16:d1:41:21:0c:4a:58:34:16:fc:82:ec:28:5c:38:
00:a3:0a:32:1f:95:4b:ec:89:64:10:2c:f8:78:d1:54:c4:ab:
39:33:96:41:53:7d:c7:2a:83:28:56:b4:29:32:38:9a:dc:99:
d8:d4:cf:55:13:27:95:9d:d6:77:01:a1:ca:cc:cc:86:b4:e8:
73:d3:b0:7c:55:e2:a2:8d:33:1d:78:00:57:95:38:09:06:92:
6d:3c:94:f4:04:4d:70:23:18:6d:01:6e:97:5b:d0:8c:ba:ba:
a6:31:92:68:da:c0:81:f3:13:24:fc:0f:47:6b:95:6e:45:96:
f7:0b:68:8e:8f:f0:43:01:45:66:5e:9b:df:ef:c2:b6:6e:15:
38:08:67:61:84:10:77:99:6d:2b:a5:d6:cc:2b:61:b6:27:1e:
fe:07:90:4f:48:d2:b7:bb:13:a3:50:84:a3:5c:80:22:7c:cb:
4d:ca:76:65:f7:43:da:10:2e:c4:e6:09:29:6f:0e:5c:b2:ee:
99:44:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:52:33 2025 by rpki-client