
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: XerjB/sHB8nZLrkFiMgvRSurjCJeiz5BIWMBDf1nHhE=
Subject key identifier: E0:26:EC:8B:2C:00:B2:4C:8A:F4:51:73:64:E8:93:5E:BD:0A:56:90
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 01976929EC47CA5BEE9A8B681FC8BB5D4001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 142A
Signing time: Fri 13 Jun 2025 12:00:44 +0000
Manifest this update: Fri 13 Jun 2025 12:00:44 +0000
Manifest next update: Sat 14 Jun 2025 12:00:44 +0000
Files and hashes: 1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: TONEfqWbF1xAnCXYe+yKBwHOmSi1TmOtYYL6v4xbbMw=)
2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ec:47:ca:5b:ee:9a:8b:68:1f:c8:bb:5d:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Jun 13 12:00:44 2025 GMT
Not After : Jun 14 12:00:44 2025 GMT
Subject: CN=e026ec8b2c00b24c8af4517364e8935ebd0a5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:5c:12:51:b6:e6:a6:22:ce:6f:4a:39:07:
2b:ce:99:67:ae:72:72:d2:f5:46:89:cc:af:ef:8c:
8a:10:40:67:ae:a0:d0:92:83:6b:fe:19:27:af:28:
65:e6:a9:47:35:28:38:19:73:cb:07:0c:09:8b:99:
81:29:eb:5e:98:bd:20:3e:aa:3e:a7:ec:88:87:c3:
73:16:e6:aa:19:50:03:e2:09:6b:29:ac:8c:11:d6:
69:c6:1b:12:c1:14:5f:b8:8f:04:03:8f:b9:f4:54:
3f:0d:e5:3d:98:61:b1:3f:2f:de:2b:2a:e3:7f:3e:
86:51:8b:cb:d2:14:9f:42:8d:60:cc:db:b9:27:05:
56:51:73:f6:f0:2e:16:ea:ac:f7:e3:eb:2e:db:c4:
ef:2f:82:47:25:d6:42:5c:5c:15:53:4c:47:0d:47:
59:ca:20:a3:0a:d7:20:a3:21:82:a6:b8:e5:20:5e:
b2:ef:43:82:37:44:d9:f0:e9:bb:49:92:69:ba:86:
4a:9c:a4:a6:75:09:d3:30:a0:83:19:b8:73:64:3f:
bf:e6:83:40:08:08:08:55:01:ac:9d:10:4f:55:ce:
f4:ae:a4:3d:88:9d:49:36:ff:12:43:f4:67:9c:42:
c0:c8:f0:dd:5f:54:e8:b8:dd:33:de:8b:42:f4:43:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:EC:8B:2C:00:B2:4C:8A:F4:51:73:64:E8:93:5E:BD:0A:56:90
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:97:1f:96:2a:6b:c3:5e:ed:2e:cb:c3:fb:d2:bb:3c:f4:
4c:c3:f3:3d:75:d5:7c:99:20:be:53:82:03:21:e9:46:bc:f4:
06:2f:64:a2:72:96:0a:e1:18:60:f5:bf:e9:d6:f0:09:ba:ef:
e9:97:30:22:e2:62:e4:c2:d4:3a:7a:e7:f5:7b:0c:ab:24:46:
1a:b9:51:66:23:f3:1c:92:7c:d0:ed:f2:18:a6:87:66:12:29:
3d:97:c3:cc:33:4b:59:0a:6e:e8:cb:95:b5:1e:4f:c9:cd:0f:
2f:c9:35:21:30:c2:39:b9:78:de:6a:9a:91:0e:21:af:ad:2b:
6c:19:7f:79:79:98:a3:d8:16:a9:fe:85:78:97:44:de:40:8a:
0a:60:b0:db:05:e4:c1:0c:3c:ad:8d:55:bc:24:13:6f:1b:26:
0d:9a:60:5d:f1:6e:07:32:2d:b7:b3:1b:b6:3e:67:c6:3d:d5:
b7:03:ca:a3:9f:b7:42:8b:a5:db:1e:11:8c:bc:6d:23:42:37:
98:84:6f:90:d2:a1:c9:9e:31:8b:85:ad:6e:03:42:38:40:45:
a5:73:bd:91:f3:40:00:5c:0e:2e:5b:26:c0:a3:d2:74:aa:f3:
92:9e:90:db:27:d0:2c:32:75:f5:0f:60:88:56:9a:46:9b:dc:
84:5d:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:15 2025 by rpki-client