Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: F72SgX0bBRtk6rzUKAC6MlKE5CETVAHnm4qXCzjxTuQ=
Subject key identifier: 0F:E8:90:B6:8E:55:06:D3:02:5C:F0:8D:6C:6B:B7:BA:88:B8:40:99
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019770753E68E9DD814CE5299F94E552094C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 1518
Signing time: Sat 14 Jun 2025 22:00:21 +0000
Manifest this update: Sat 14 Jun 2025 22:00:21 +0000
Manifest next update: Sun 15 Jun 2025 22:00:21 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: k1pAot4cFmKmVEmdMVntN283eTim+0E+46PU7+t1+Aw=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:3e:68:e9:dd:81:4c:e5:29:9f:94:e5:52:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Jun 14 22:00:21 2025 GMT
Not After : Jun 15 22:00:21 2025 GMT
Subject: CN=0fe890b68e5506d3025cf08d6c6bb7ba88b84099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:f2:ef:5c:19:c9:d0:9b:24:99:83:e8:03:
4e:64:d4:d5:8a:8d:45:27:cf:60:a4:2c:cc:cf:3a:
07:07:8c:e8:03:27:d7:cb:3f:c2:ed:d9:9a:9f:e0:
9d:5c:26:fd:5f:17:cf:fa:82:6c:35:8e:6c:fd:e7:
9f:a1:eb:94:a4:27:ef:ed:61:7f:28:fc:70:d2:1d:
5d:45:cf:0d:23:83:7f:fc:b5:9e:4d:24:fe:85:6c:
ea:3e:7d:3a:74:fa:7b:1b:dd:05:45:95:e0:b5:37:
c3:1e:99:16:80:35:73:05:51:b9:e6:93:d0:b4:b7:
fb:57:f8:2f:ca:12:85:d2:23:ae:fd:f2:6a:d6:7a:
e4:ba:46:dc:04:e4:1e:f1:1a:e6:34:bc:73:bf:4f:
51:5c:56:a8:7c:dc:76:00:f4:1c:71:a4:9f:16:18:
a1:e8:ee:d5:24:12:aa:2e:7c:a6:95:bb:b1:e5:a1:
17:89:28:7d:cb:52:33:3e:72:a3:1d:b2:2d:f7:f7:
56:e2:3d:cc:c9:75:37:d1:ac:76:85:52:5e:a3:ff:
81:37:1a:33:38:2d:4b:3b:8d:a8:5c:d3:1a:71:59:
1a:63:2d:4f:78:cd:0d:7c:e5:68:a4:05:35:34:de:
f8:6e:ef:09:6e:04:92:fe:7f:94:7c:6f:dc:7e:8e:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:90:B6:8E:55:06:D3:02:5C:F0:8D:6C:6B:B7:BA:88:B8:40:99
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:f0:73:1e:c5:91:dc:c2:7d:78:2d:8a:06:3b:67:ca:b3:
22:d7:6f:21:da:32:71:e9:25:16:a2:68:37:7e:4a:6e:67:61:
95:34:df:b1:bd:61:96:06:64:c2:c6:2e:a9:0e:53:53:fb:14:
1a:3d:74:e6:03:35:9b:ae:74:83:ef:a8:3c:e0:00:e7:c6:32:
f9:f5:b2:a1:96:be:93:27:50:79:5b:be:9e:f2:8a:88:94:e1:
06:76:0d:67:1f:99:b7:04:bb:26:74:00:42:51:8f:6f:7d:b0:
7d:0a:6e:b3:cc:09:8a:24:32:6f:54:1b:b4:06:11:85:96:52:
71:71:ac:53:a8:1c:44:5a:69:37:2e:ce:f6:1c:15:3c:47:66:
73:29:91:7a:47:33:d5:98:39:60:67:27:83:41:39:8c:ac:f1:
74:aa:bb:3c:f8:57:d7:d8:5a:fa:71:74:11:7d:f8:95:f6:0e:
c3:1b:dc:20:9d:89:05:4f:38:ba:23:d5:54:ac:87:e7:20:f6:
1a:2e:1a:ea:51:11:8a:fa:54:d9:2a:27:61:dd:2d:0f:16:eb:
3d:5b:1b:ff:74:80:bf:f2:24:05:4b:62:50:93:a2:37:7c:cc:
9e:0d:67:80:90:ca:2b:7e:72:60:5a:eb:f8:79:2c:98:3a:c4:
76:9a:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:33 2025 by rpki-client