Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: P7aWze10boFIQpurOqwKtH4KZg0JV5eOAi7Q+1y0fpo=
Subject key identifier: B6:63:0E:45:17:78:60:30:34:A1:24:83:28:F0:C8:E3:58:FB:CD:6C
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 019770759A5079F57B1C3259D31898F95DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 061A
Signing time: Sat 14 Jun 2025 22:00:44 +0000
Manifest this update: Sat 14 Jun 2025 22:00:44 +0000
Manifest next update: Sun 15 Jun 2025 22:00:44 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: ny/y3uBKIYB83zVYM0n0G6X+R4hEr5EKd4sFASCEjSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9a:50:79:f5:7b:1c:32:59:d3:18:98:f9:5d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Jun 14 22:00:44 2025 GMT
Not After : Jun 15 22:00:44 2025 GMT
Subject: CN=b6630e451778603034a1248328f0c8e358fbcd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:c9:b2:e8:ad:32:2e:11:0e:22:f1:68:df:
ca:11:3e:5d:64:8a:04:4c:17:7c:27:4c:2d:f5:be:
17:da:01:f7:0f:50:3b:bc:cf:09:a4:aa:0f:b6:a6:
50:06:04:23:2e:32:b2:1d:4a:35:fc:dc:9e:57:0d:
d2:71:24:89:f4:31:73:a6:76:23:70:77:c3:8c:b8:
16:67:0f:91:3d:04:17:9c:cc:83:03:c4:47:a2:b8:
24:00:7e:3f:1f:eb:a1:30:a6:3f:49:91:5e:97:b0:
5c:38:44:25:0e:e2:88:5b:ee:4a:45:27:53:47:75:
7d:b3:93:7f:c7:05:37:d0:53:99:43:70:49:4a:71:
a5:a1:ff:2d:fd:ab:6f:9e:25:59:74:f2:93:ae:d4:
5b:5e:68:af:e5:79:f4:68:3f:3c:1c:7e:a6:e1:d4:
56:bc:93:71:bf:50:8f:56:95:bc:e5:b6:3c:7f:4e:
2b:97:85:c0:d2:94:f8:e3:67:f9:2b:20:a9:b0:48:
9a:4a:61:41:d6:24:58:0d:de:c4:fa:29:14:5e:c4:
19:da:b0:30:bc:67:47:62:e7:f5:89:55:74:5c:32:
a1:0f:2d:ce:83:8b:61:ae:36:c9:5b:8c:5b:19:fc:
ed:86:81:7d:92:d8:19:b0:74:91:a8:7b:dc:de:98:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:0E:45:17:78:60:30:34:A1:24:83:28:F0:C8:E3:58:FB:CD:6C
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:47:18:4c:67:02:1c:61:c4:ef:f5:67:e3:cf:a6:0a:e3:00:
f8:e2:82:9a:3b:3b:9d:e0:8c:e2:6f:7e:b5:15:32:b2:d3:b4:
eb:a2:2e:f7:ae:0c:48:50:4e:00:85:ef:8c:ee:64:df:94:65:
95:9b:57:a5:75:ea:74:27:2b:16:6a:30:9b:14:78:a2:99:e1:
44:95:3c:cf:6f:13:2a:a0:00:f5:fd:de:eb:a7:69:62:e7:cd:
06:62:8d:a9:1a:99:74:2c:e5:0a:d7:4b:19:76:6a:45:fb:f9:
9f:08:db:28:38:d9:95:e8:4c:55:0c:b4:01:94:ff:5c:22:d4:
35:87:bd:aa:eb:7c:d9:e4:45:64:a1:6a:db:a2:46:cc:df:62:
6b:f0:d3:1f:bd:80:e6:db:bb:06:bb:3d:dd:88:f0:c4:4d:e7:
d4:c7:62:c9:8a:84:2a:ce:27:31:fd:f3:2e:d9:88:1c:f3:63:
e2:cf:38:e1:9c:5c:5e:7b:97:15:40:c9:ff:65:81:19:35:ce:
50:95:6e:b7:bc:bb:eb:81:43:9b:58:07:e7:39:05:4c:99:06:
f1:9c:f9:93:99:29:4a:3a:09:26:a8:78:96:ae:1a:7d:4f:8c:
08:82:40:71:75:84:7f:e0:15:4a:71:fc:2b:a1:77:cc:db:a1:
89:3b:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:01 2025 by rpki-client