Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier: XjAS451+4Pvf65n8Ygzu60ryHywId6BUZWruRhALCD4=
Subject key identifier: DA:2F:37:F0:61:D9:CA:74:5B:2F:AA:44:19:14:0A:A1:42:8F:55:37
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 019879AF03BA9476FADA0790ECBEB4761CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number: 1622
Signing time: Tue 05 Aug 2025 10:02:49 +0000
Manifest this update: Tue 05 Aug 2025 10:02:49 +0000
Manifest next update: Wed 06 Aug 2025 10:02:49 +0000
Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: FwXNlobHdu1GAGrUjl2VGXYgZgJBH7BneGCO/xj8nnE=)
2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:03:ba:94:76:fa:da:07:90:ec:be:b4:76:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: Aug 5 10:02:49 2025 GMT
Not After : Aug 6 10:02:49 2025 GMT
Subject: CN=da2f37f061d9ca745b2faa4419140aa1428f5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:7b:c6:25:ab:f3:71:6e:99:bb:6b:0f:23:
af:0b:df:c7:35:1c:f4:94:dd:e6:a7:43:e7:ab:e2:
ff:e7:c3:2b:51:6a:7c:55:7b:bd:7c:27:75:f2:c7:
de:54:95:f0:25:07:8c:a6:05:c8:4d:85:e2:45:cf:
f4:c0:cb:56:8c:9f:79:b4:53:ec:fd:a7:b9:51:e0:
47:e7:e8:8d:d9:4a:34:3e:60:f0:23:60:fd:34:f1:
ce:dc:b0:7d:2c:c2:1e:0e:5b:f3:11:cd:41:c9:86:
43:e7:ce:a5:71:4a:75:54:c0:13:89:97:ca:ca:f8:
62:63:c9:7b:b1:d5:78:77:e5:f8:69:97:6c:17:67:
dd:d9:14:d6:68:c7:fd:95:7d:d1:1b:80:af:6f:d5:
ce:69:2b:64:4d:85:db:15:70:30:ad:ae:56:2c:2d:
02:a9:47:dc:12:f3:5b:dc:f8:9b:07:4c:00:92:62:
c6:c7:0c:c7:a6:b0:5b:b6:d6:83:29:13:f4:04:0c:
e4:af:77:17:e8:30:f5:4c:b8:bd:06:a6:24:bf:d6:
44:4d:61:61:b8:c8:ec:52:ce:08:52:b8:a6:45:47:
89:67:fa:ca:6c:5d:82:a1:64:a8:b5:6c:bf:c3:71:
4a:a5:0b:20:3d:91:ee:9d:b7:1d:91:bb:bd:20:8a:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:37:F0:61:D9:CA:74:5B:2F:AA:44:19:14:0A:A1:42:8F:55:37
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:78:34:b8:9a:b8:8a:d6:f4:13:cd:27:94:6a:f7:36:cb:3c:
3d:65:15:ec:16:0f:c4:99:80:95:6f:db:36:4d:65:69:e1:15:
dd:a3:96:88:ae:14:e3:48:ac:0e:4c:84:e8:39:60:95:37:0f:
e2:a7:bb:fb:59:aa:65:e2:a4:19:97:84:ee:9f:e3:a0:9c:88:
c3:d9:84:ca:14:cd:c5:94:62:2d:9a:b3:35:31:26:8d:ae:d8:
1c:25:c7:57:1e:14:8a:64:a8:4c:99:13:4e:63:7d:8b:b9:51:
f5:95:be:eb:12:df:e8:2f:10:51:eb:0c:11:e3:a2:b2:e8:d8:
2b:be:23:ed:0f:14:d7:56:b1:51:78:74:44:fd:01:6f:65:f5:
4c:6e:aa:12:b7:6f:14:b2:aa:9b:7b:19:55:f5:aa:d2:2c:51:
82:34:40:97:8f:54:0e:4a:3e:1a:9a:0d:d9:c7:ce:bf:4e:5d:
f1:26:2f:cb:87:ac:10:5e:dd:ae:b8:4b:a0:0e:14:c8:99:0a:
47:22:cb:2d:22:80:3f:c7:3f:d4:c8:dc:44:35:04:36:b6:07:
ca:f1:2f:13:4d:5f:85:5e:1b:8c:89:59:7f:72:64:56:3e:75:
70:64:ca:5c:e9:29:51:88:b8:21:90:27:cf:65:a1:cd:a1:18:
28:59:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:20 2025 by rpki-client