Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: Uyi+JLXZ8Mv/kiPyZ6X2TMbbMZz7h6zDnDWhc4WIPGw=
Subject key identifier: 6C:86:E2:81:B1:68:5E:28:1D:F0:8F:93:BF:24:7B:A9:B9:EE:A2:A2
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0197887DE3B8056175A0A37E912635F1FE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 13E1
Signing time: Thu 19 Jun 2025 14:00:41 +0000
Manifest this update: Thu 19 Jun 2025 14:00:41 +0000
Manifest next update: Fri 20 Jun 2025 14:00:41 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: l31lWCdoTCyCnpi4dNx9W5RRPT9TjB7XBAvqjPl3Y0k=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:e3:b8:05:61:75:a0:a3:7e:91:26:35:f1:fe:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jun 19 14:00:41 2025 GMT
Not After : Jun 20 14:00:41 2025 GMT
Subject: CN=6c86e281b1685e281df08f93bf247ba9b9eea2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:ed:e0:bb:75:6d:f7:ea:fc:0d:a2:89:a5:
fc:f1:6e:9d:7c:7c:60:52:99:cd:74:e0:64:1c:92:
0d:bd:29:f6:a0:2a:a6:6d:45:81:79:fd:be:cf:d6:
9f:a4:19:eb:2c:4e:7d:c0:81:c5:43:fc:a8:2a:91:
4e:bc:84:63:f4:0e:dd:2f:13:8f:43:51:20:c7:8c:
a2:f4:5f:fa:2b:c7:cc:cb:cc:e0:f4:a0:81:77:db:
79:44:48:af:96:1e:78:d9:bc:9c:86:d3:de:2f:f5:
50:2b:59:95:a6:f5:af:a5:a4:34:7f:5e:a4:20:92:
4e:1c:c9:eb:27:ce:ae:40:ad:74:03:4d:1d:90:67:
e6:8a:a5:3f:f0:6c:ca:e3:23:2e:89:03:63:93:6f:
94:97:f2:0d:3d:a5:a0:f8:ac:eb:a3:83:51:fa:e4:
11:64:3d:b3:2f:38:8b:22:46:11:85:a9:6d:52:2e:
a7:66:46:a8:7c:1f:58:37:a7:22:ae:ae:8e:62:44:
13:ca:56:ce:45:85:aa:6e:89:bf:d8:15:98:fc:f5:
3b:b0:15:78:a4:c2:df:6f:92:d6:e1:5e:67:a0:9d:
a4:5b:6a:9b:d0:a3:e2:c9:0a:93:25:97:0d:89:71:
65:43:08:d8:82:f1:a9:5c:8c:4d:31:e8:14:e6:85:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:E2:81:B1:68:5E:28:1D:F0:8F:93:BF:24:7B:A9:B9:EE:A2:A2
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b2:88:7b:3c:96:64:f8:a0:28:f4:46:41:da:eb:c0:af:7f:
1d:7f:4a:fb:8c:d3:2e:e6:f9:73:9b:da:90:15:d0:2b:6f:c6:
06:c7:13:29:64:35:87:f6:b8:55:8f:d1:77:2b:a3:02:7f:3e:
f0:94:11:d2:68:87:cf:fe:6e:51:3d:2f:5e:8a:d3:c6:3f:04:
ed:c2:98:d0:e9:e5:ff:75:f8:a9:c3:c9:cf:f3:8f:e3:5a:e8:
d7:21:b4:b7:e7:eb:91:c5:f9:b4:55:b9:60:ad:cf:ee:9e:b2:
59:c5:0c:c4:a2:dc:5b:17:23:d7:d2:0f:d7:1d:40:a5:9f:bb:
7c:1c:d0:cf:0b:e6:4d:75:19:2b:58:28:44:c1:7f:b7:44:20:
f9:13:d5:de:22:80:ea:0c:fa:53:af:fd:3f:f9:cb:a1:a1:5a:
51:4c:07:5b:b1:9e:da:28:6f:d1:70:b6:20:7f:14:93:83:8d:
6c:e3:5b:c8:4a:52:2a:ab:53:a3:2b:ac:d4:79:2b:2d:0c:9e:
60:e6:ee:0c:b8:30:64:7c:12:03:cd:31:0e:ff:77:94:bc:a9:
8f:d9:39:65:04:50:4b:51:8b:c7:b6:4a:96:40:4f:45:b8:4c:
c9:2b:bc:92:51:a4:80:a2:5a:f0:3a:dd:0b:e6:3c:50:f6:75:
5e:56:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:50:35 2025 by rpki-client