Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier: U0tdAqoGYbh1Gv5J6FtG/u3EbI1F7p0wFYzhx2Jm9Jo=
Subject key identifier: 4D:D7:C2:E2:88:80:8C:4C:69:17:31:85:F2:BE:D0:AD:10:46:B3:A4
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 01976D7464DC460F97F1A551AD5FB89FDDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number: 0674
Signing time: Sat 14 Jun 2025 08:00:33 +0000
Manifest this update: Sat 14 Jun 2025 08:00:33 +0000
Manifest next update: Sun 15 Jun 2025 08:00:33 +0000
Files and hashes: 1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: ga0W0hWi1mbFHCqGj2i5aQgxQtOKn5dvdYbbNVyhJE4=)
2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:64:dc:46:0f:97:f1:a5:51:ad:5f:b8:9f:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Jun 14 08:00:33 2025 GMT
Not After : Jun 15 08:00:33 2025 GMT
Subject: CN=4dd7c2e288808c4c69173185f2bed0ad1046b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:6b:73:a4:3d:71:8a:9c:38:d7:0e:09:c7:
eb:09:a6:72:a2:82:c5:7d:6b:ce:85:4e:76:04:0c:
fa:85:b4:2c:1e:86:ab:3d:0f:fd:fa:74:43:57:55:
eb:54:f7:81:04:0c:44:a0:65:fa:0e:ac:96:6a:88:
0a:b1:3f:e6:9a:00:55:c5:34:f8:85:32:db:cd:e9:
12:df:b1:b4:d9:62:11:d4:2a:15:55:f6:ec:57:4e:
7c:01:2e:bd:d9:c4:75:91:b3:30:73:14:68:63:90:
9d:21:8f:72:93:10:41:c6:bc:fb:e7:3f:6c:d6:b1:
0f:ab:30:f8:f3:c4:c2:5b:bb:04:0f:a4:87:b5:9c:
e0:12:51:6d:a8:2e:56:6d:26:67:38:50:9e:01:de:
27:c7:82:73:83:29:ad:ef:b0:72:18:18:46:8f:0a:
3d:87:a3:46:7f:55:2b:b5:6b:b7:7f:52:46:05:4a:
b3:fb:b9:17:99:d2:be:e0:4c:7a:31:bb:f8:19:78:
ac:e3:c5:35:09:33:f6:a7:c8:b3:cb:c6:8d:12:80:
21:01:fe:ab:62:5f:c1:c4:21:93:b6:96:bb:a8:3c:
e9:3f:a7:e8:03:b3:76:c0:9e:9a:94:00:db:ae:80:
f6:af:5f:f4:16:b6:be:b5:14:d6:13:c5:90:dd:71:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:C2:E2:88:80:8C:4C:69:17:31:85:F2:BE:D0:AD:10:46:B3:A4
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:3f:cc:f2:fc:b3:c0:34:ad:28:c7:33:41:28:d6:56:e4:
f0:67:17:8c:95:0c:41:c6:18:a0:fe:c3:79:c2:65:51:75:bf:
30:fe:0b:ee:c7:6a:72:cd:b7:39:ed:32:41:62:d6:30:d5:1b:
33:26:2c:28:96:fa:b7:f1:c3:d9:bc:65:7e:84:29:72:ea:32:
9d:11:11:14:01:33:80:1f:54:3e:fd:cd:a5:fa:fc:75:49:48:
9d:b6:87:4e:41:92:64:1b:f9:c5:1f:c6:6a:76:3c:d0:31:f4:
27:af:fb:07:3c:54:18:b6:2a:89:fe:0e:0f:2a:ee:7b:c0:51:
9c:d0:2d:07:8a:c9:79:b1:30:3a:bd:f6:3b:80:1f:c5:e8:c9:
1d:e4:99:47:b2:05:dd:93:61:08:5f:16:9a:22:22:5f:cb:03:
be:19:4d:3f:fe:f4:dd:52:12:82:e5:9e:21:5d:21:3e:cd:97:
2e:1c:8f:71:e3:84:9c:e6:b7:cc:1f:4e:33:06:ee:83:04:1a:
db:4a:66:83:7a:6e:ae:ad:f3:96:5a:b4:17:36:a7:b8:31:cb:
73:55:bc:1c:75:a7:ac:c2:a7:23:c8:26:79:9b:de:98:80:06:
b8:e8:15:86:81:00:36:3d:fa:13:35:a1:52:b8:48:26:11:aa:
15:3b:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:38:00 2025 by rpki-client