Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: iyHp6haD08yGti8a1NUB1dtQ3Y3egN+QrEO78SP8Wjc=
Subject key identifier: 68:B8:68:52:AE:3F:5C:B7:FC:B6:3A:6D:E8:71:E4:5D:C8:3E:9B:77
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019874F52D6575B1E3CCD8BF6355C6C71B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 13CA
Signing time: Mon 04 Aug 2025 12:01:21 +0000
Manifest this update: Mon 04 Aug 2025 12:01:21 +0000
Manifest next update: Tue 05 Aug 2025 12:01:21 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: 8z+23AjUimSDT22VxoxxLsLUyWcSZRV3QSNL/Yynfa8=)
2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:2d:65:75:b1:e3:cc:d8:bf:63:55:c6:c7:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Aug 4 12:01:21 2025 GMT
Not After : Aug 5 12:01:21 2025 GMT
Subject: CN=68b86852ae3f5cb7fcb63a6de871e45dc83e9b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:f2:2d:15:93:0a:1b:a6:f8:d1:67:d8:cc:
25:4f:cd:2b:3d:db:2b:ea:d2:54:5a:81:93:c4:08:
0a:7d:d2:8b:89:3c:78:6b:37:fb:af:a9:b9:88:d9:
50:2e:88:bd:0f:93:71:47:5c:32:37:3b:1f:5d:96:
00:32:10:68:06:2d:6c:52:8c:c0:c3:48:1b:8b:c3:
c9:6e:1c:15:79:88:90:97:62:5a:8b:84:5a:ca:99:
27:fa:84:15:74:cf:c7:37:9a:11:d9:9e:45:a7:54:
24:32:f0:79:b8:07:15:d1:a4:ea:17:39:ee:9b:14:
76:fc:ae:5c:db:d5:1b:e0:c8:71:4f:42:d8:63:a1:
82:e5:06:c9:40:37:0c:22:9e:aa:98:c8:b8:46:6f:
f6:d4:11:f2:69:44:e9:3b:0d:f8:d1:76:a0:a9:d1:
5f:3c:51:a8:c8:3e:3b:8d:3c:50:2e:ba:ce:46:da:
d1:24:87:d5:5f:be:71:f5:cc:ab:2d:08:7b:65:92:
71:96:b0:2d:03:f4:d9:b0:d3:f2:81:37:9c:15:a8:
7d:a3:a0:a8:0a:11:7b:02:fb:ec:94:05:79:cd:28:
32:88:8f:03:f1:62:20:5c:14:7e:ee:48:84:fa:2d:
17:e6:82:dc:c9:4b:7d:06:1b:4f:3b:52:08:44:83:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:68:52:AE:3F:5C:B7:FC:B6:3A:6D:E8:71:E4:5D:C8:3E:9B:77
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4c:73:e2:33:6a:db:6a:fa:56:69:e6:41:23:75:e1:7d:d1:
5f:e2:39:f2:76:3d:25:d8:09:12:75:cf:f3:9b:c0:bf:a2:50:
5f:b9:58:b7:7a:b8:5e:a3:66:a7:1d:11:fc:aa:57:bb:c1:ff:
7d:1e:56:b3:c9:67:9b:0d:f3:03:c8:46:ac:b5:63:4e:08:e7:
cb:9c:56:bc:fa:8a:39:ed:d3:c4:18:9d:90:d1:f6:4e:b6:b4:
a2:d8:32:a3:b4:32:07:9c:c4:a4:c0:a8:73:96:47:52:a6:64:
05:41:af:9a:24:b3:47:45:47:a5:97:e7:02:a8:37:96:f9:2c:
b4:58:2c:c3:c5:e1:1c:a5:1b:f3:f7:f8:ef:b6:5d:a3:59:2e:
aa:6a:8f:aa:d3:90:fd:4a:64:38:ec:56:12:06:30:9b:2c:0d:
6e:3f:c3:02:a1:e6:27:39:6a:cb:d9:4f:9e:c5:f1:c8:6f:42:
6e:78:a3:f2:62:12:aa:1b:51:7c:cf:bb:f6:5b:a9:ce:f5:be:
18:d5:0a:d3:02:fb:63:30:fd:1e:2b:2b:50:19:b8:e0:f4:f1:
85:97:c7:15:8a:7a:87:54:7d:ff:de:88:75:1a:1e:e3:ad:f7:
d5:d4:48:92:e3:58:6c:6f:c7:62:7e:11:53:72:91:37:d2:fd:
00:24:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:14 2025 by rpki-client