Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: TqkD2LTObpgOBcG7mytT7Mx/tBUPWe4stinrT/HP3vc=
Subject key identifier: 5C:04:0A:04:A6:14:EE:E9:53:B8:31:94:00:52:8A:17:FB:72:89:1C
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 01976C2B16433D57D91270A43B17649C9538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 138A
Signing time: Sat 14 Jun 2025 02:00:52 +0000
Manifest this update: Sat 14 Jun 2025 02:00:52 +0000
Manifest next update: Sun 15 Jun 2025 02:00:52 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: BIO9+eo7przMRIxxOai+dnA3E8YpOcfTcuZptAg8hjs=)
2: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (hash: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:16:43:3d:57:d9:12:70:a4:3b:17:64:9c:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Jun 14 02:00:52 2025 GMT
Not After : Jun 15 02:00:52 2025 GMT
Subject: CN=5c040a04a614eee953b8319400528a17fb72891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:90:32:55:6d:40:52:09:14:bd:bd:b3:0e:
40:c9:90:93:59:f9:50:4f:6c:fa:95:04:58:b5:88:
e8:43:f6:c8:91:5f:fc:c3:53:6e:89:aa:76:12:d6:
e7:1c:30:b0:9c:17:98:68:c1:f2:6e:e9:e1:62:88:
98:db:4a:39:a1:14:4c:7f:ab:41:28:1e:db:4f:5e:
b2:3b:14:64:ba:80:c4:e2:06:75:ae:2d:60:c8:e6:
c0:b5:53:9a:7d:48:ac:a7:60:6f:e4:37:d3:6e:e1:
42:7c:11:8e:55:9c:83:05:b9:a0:8b:d0:8f:a4:87:
f4:e4:03:d8:f2:46:c6:8f:a1:5d:f3:3f:da:d8:6c:
44:40:d5:f1:23:ad:a3:7e:68:a7:c3:15:ba:43:30:
5a:c0:d4:6f:a3:26:66:b7:ab:64:2d:90:cd:5a:30:
e9:21:77:4b:69:9b:a5:aa:1f:72:bf:ea:b7:01:13:
ae:72:62:21:9a:41:85:09:f4:8d:67:a2:24:79:9b:
90:6f:f0:fb:71:df:9b:8f:75:ee:74:08:91:a1:87:
9e:a4:12:cd:c1:be:d4:e8:1f:a2:60:d6:ef:6a:97:
94:32:6c:89:8c:24:c3:f8:a3:ef:f0:bf:4a:13:63:
ff:f4:25:8c:91:1e:37:25:b9:dc:03:4d:87:db:5a:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:0A:04:A6:14:EE:E9:53:B8:31:94:00:52:8A:17:FB:72:89:1C
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:67:ad:63:13:d9:62:af:6c:6d:6e:76:ca:a9:f3:da:1f:
ea:1b:e8:39:00:e1:b9:2c:11:f4:05:94:69:b3:cf:22:0a:3e:
65:ff:a6:0d:94:23:b7:15:0f:7f:3d:2b:9d:bb:97:e4:2d:b8:
17:1b:c6:66:cd:60:d6:04:08:b5:e3:9f:4b:40:10:a3:a8:a1:
88:f0:54:55:ae:32:f9:9a:5d:ce:ca:5c:fd:af:ad:2e:f7:b5:
c2:d1:a4:05:b2:e0:8e:8f:b9:78:09:58:03:3f:22:2e:12:e9:
07:15:53:15:ce:c6:38:2c:e5:f8:b0:67:2b:1a:3b:47:de:45:
9e:a8:e3:57:71:65:1d:b3:c8:56:48:f0:3a:c8:15:28:1c:f9:
61:83:37:af:9a:cd:ee:e6:7e:39:c8:79:00:11:8f:04:19:71:
bb:62:38:05:ed:84:3e:0f:de:cb:e7:78:21:98:d5:05:d1:2d:
e0:89:7d:44:cc:53:9c:10:da:90:e6:e9:03:39:ad:d2:67:cf:
6c:69:30:7f:9a:e2:ba:df:d9:a9:94:bf:8e:5c:05:45:18:c3:
94:f2:30:9a:fe:64:89:f8:1a:e4:61:25:4f:f8:ce:dc:93:ee:
bf:06:29:8d:73:b0:d4:cb:01:f1:7f:c4:dc:df:6c:ee:ff:e4:
6d:e4:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:42 2025 by rpki-client