Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier: 0/wUBb5sefnKiBxSSyoFlhr7yfA5bMtZEnPOxXyQ1wc=
Subject key identifier: 00:57:BD:C2:9A:69:2E:83:4D:6D:24:3F:DE:BF:E2:23:93:4F:2F:43
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 01978E11E9A289A28E085D9644D5ED69667E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number: 127D
Signing time: Fri 20 Jun 2025 16:00:28 +0000
Manifest this update: Fri 20 Jun 2025 16:00:28 +0000
Manifest next update: Sat 21 Jun 2025 16:00:28 +0000
Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: SmK3xbTBLpQ7KjXGjqQJBwmJ9CoA0wb+OZTXPUu8VoU=)
2: DEYi7WsKY2zM3uINUVpUki3PaVg.roa (hash: DRmT8SF6k5qeKVt2hMFQ+AwmgRFjXhlT847OzPWC7g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:11:e9:a2:89:a2:8e:08:5d:96:44:d5:ed:69:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Jun 20 16:00:28 2025 GMT
Not After : Jun 21 16:00:28 2025 GMT
Subject: CN=0057bdc29a692e834d6d243fdebfe223934f2f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:45:77:3f:7e:8f:33:39:8f:e6:98:e5:23:
9d:f1:6b:b5:a1:56:96:3a:e7:e5:6e:8b:a4:6c:db:
5b:66:b2:66:85:ab:6b:ba:b2:58:77:1b:45:42:40:
3d:c9:44:e0:ba:de:8c:fd:b6:e2:27:86:33:d5:48:
70:b0:7b:53:37:4c:a5:18:d7:f3:96:75:25:f2:ab:
45:0a:40:e2:9e:1d:cb:de:c1:c5:83:ed:52:34:ef:
4c:df:db:7a:10:54:a1:83:9b:1c:45:89:0e:2e:bc:
b5:f3:bd:fb:0e:30:26:63:63:e7:8a:25:7c:14:0e:
d6:86:0f:b7:5d:bd:1c:27:0b:bd:42:be:de:86:72:
a8:d9:7b:02:c3:3d:cd:b1:25:cb:9c:a1:8f:52:23:
5d:5e:05:3e:c8:df:19:0b:6b:7c:d0:7c:f2:72:bc:
93:34:a3:07:90:37:3c:f4:f9:f9:39:86:f3:47:b3:
c4:b4:63:bb:d6:98:cf:55:0c:6a:6b:0a:0f:ee:75:
2e:fc:6a:78:61:4e:b4:40:19:f4:07:05:3a:f2:1b:
3c:90:24:e2:38:c6:1a:08:f1:82:e9:90:63:2a:5c:
77:7f:28:63:c4:75:19:57:86:78:1f:80:16:1e:65:
ba:a0:cb:69:dd:7a:41:76:50:4c:9e:23:8e:b0:e9:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:BD:C2:9A:69:2E:83:4D:6D:24:3F:DE:BF:E2:23:93:4F:2F:43
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:32:12:59:d4:62:c7:68:40:ff:62:1c:b6:85:dd:a9:72:
5c:d8:8e:c6:d8:63:a8:65:c8:f0:01:a2:f8:17:84:91:5c:3f:
4b:4a:d1:39:4a:49:1d:02:8d:41:35:be:de:7f:b9:27:f5:4f:
d6:64:53:54:f8:e9:99:b9:29:e4:80:ca:12:08:3c:e9:26:84:
e6:fb:75:41:12:be:fa:73:a7:76:6c:8b:a5:6f:86:78:ef:cd:
d2:ed:8f:3e:96:f9:cf:0b:c1:15:16:be:0b:63:4a:10:b1:ec:
36:c4:82:ab:20:85:9a:22:f2:21:98:b1:d7:66:73:d4:0a:58:
bc:4b:e9:e5:7a:36:01:55:8f:e0:4e:69:4b:60:9a:5b:db:16:
81:bb:5f:ae:8c:34:46:ab:bf:37:01:20:b6:3c:b0:ec:d7:df:
44:f5:02:96:51:fb:e0:74:4c:7e:a0:46:4d:cb:01:12:39:05:
3b:fd:c9:4f:ae:29:1e:ba:a8:a8:bf:81:35:56:48:15:39:21:
90:58:0a:b2:59:96:47:e3:b0:a7:94:87:df:71:9c:49:d7:9e:
88:0b:04:f9:b0:37:4d:24:07:e7:96:b5:b7:85:84:ef:e1:55:
33:62:92:04:42:01:27:76:c4:25:0c:d7:ed:8a:77:dc:2c:49:
74:49:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:18:47 2025 by rpki-client