Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: eYOMPU3MwWDs5g1nGV+H4vfWh3lT+ekclIB6nNUp89s=
Subject key identifier: E3:25:30:EE:5A:CD:93:00:DB:A4:F3:E8:F9:D5:7F:95:7A:81:19:56
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01976D3DED3D65A0A36A681AFF2EBBEBDFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0898
Signing time: Sat 14 Jun 2025 07:01:04 +0000
Manifest this update: Sat 14 Jun 2025 07:01:04 +0000
Manifest next update: Sun 15 Jun 2025 07:01:04 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: pMwIEFpVBzF9Zf7Gd8GYQMJ0ky31sEvvvovomP5+jpk=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ed:3d:65:a0:a3:6a:68:1a:ff:2e:bb:eb:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Jun 14 07:01:04 2025 GMT
Not After : Jun 15 07:01:04 2025 GMT
Subject: CN=e32530ee5acd9300dba4f3e8f9d57f957a811956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:b4:2e:d1:77:0f:bb:a7:81:c2:3d:ce:8c:
79:c5:d7:a9:98:4b:a4:13:7d:50:24:8e:5f:81:4d:
dd:fd:6d:45:5b:80:2a:fe:6e:5a:09:e8:3c:cd:bc:
00:8e:f6:60:55:64:fd:cb:64:06:69:2d:14:55:cd:
1b:95:1b:0b:d5:b9:d8:34:69:0f:da:27:42:cd:97:
da:93:4b:eb:5e:5f:7e:1f:03:cb:2e:b6:de:0f:33:
57:b5:f7:51:ee:42:62:69:2a:c6:7d:ad:1b:13:fc:
52:17:35:b4:1f:b3:20:69:80:f3:cf:90:ee:19:af:
5f:95:cc:80:82:0b:85:8f:5c:6e:da:bf:7d:0f:ba:
8a:a9:64:d3:a8:07:62:87:cd:ce:c3:ec:8b:36:9c:
32:d2:47:c1:19:08:94:91:d3:75:86:a8:7e:8d:21:
47:1d:5b:64:4f:38:d2:51:c8:d4:96:e6:e9:74:a9:
fc:5c:48:14:6e:16:55:87:6a:5f:13:ea:a2:43:d1:
e7:71:03:cb:a1:16:24:0f:38:d4:90:20:8d:22:11:
0d:f5:c0:f5:c8:a1:6c:3d:f6:6c:9f:24:ee:39:0c:
df:7d:20:5e:28:50:8b:8c:23:5b:5c:3f:a5:f6:7a:
12:5b:bb:9a:e5:ce:76:b7:87:9a:87:9d:f5:62:09:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:30:EE:5A:CD:93:00:DB:A4:F3:E8:F9:D5:7F:95:7A:81:19:56
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0d:ed:1b:33:af:f5:30:78:0c:5a:9d:6c:ed:a5:94:7a:8d:
f9:10:bf:02:bd:e3:5c:9a:05:6c:dd:3a:51:5f:c6:82:8a:1f:
d6:bb:5c:62:f8:7d:c8:29:d0:9a:ff:b1:8c:0c:85:32:a3:50:
2b:b7:31:c4:c9:bf:68:73:69:33:76:e4:7d:14:c1:eb:5c:8e:
d1:42:d6:6d:d8:f6:39:c0:d3:6f:1d:28:29:84:3e:6f:c0:86:
a9:fc:a9:63:f0:c9:4a:47:3c:e2:fe:05:18:e6:9b:32:5c:fc:
84:49:c8:42:40:81:51:dd:14:af:1b:64:20:cf:5d:21:48:29:
e4:8e:68:44:55:93:cb:83:da:a9:31:60:ee:3e:db:af:01:8d:
ab:ad:39:87:f0:9c:6a:16:76:69:a1:82:b9:2f:c7:a7:99:32:
45:84:24:ad:66:28:45:35:3f:6a:6f:6a:6a:8b:ef:f1:4c:95:
a5:4b:f6:65:a5:3a:d0:67:ae:8d:d5:2f:14:61:03:da:2f:78:
de:f2:8f:d2:29:76:fa:44:2c:43:63:75:70:4c:9d:d5:05:cc:
bc:53:8d:60:aa:52:18:de:13:e9:94:69:fb:b4:2a:b6:55:4e:
94:4b:a0:82:d0:7d:d5:0f:b9:a6:5d:a7:69:23:b7:33:a0:72:
f3:c6:00:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPe09ZaCjamga/y6769/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjUwNjE0MDcwMTA0WhcNMjUwNjE1MDcwMTA0WjAzMTEwLwYDVQQD
EyhlMzI1MzBlZTVhY2Q5MzAwZGJhNGYzZThmOWQ1N2Y5NTdhODExOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8q0LtF3D7ungcI9zox5xdepmEuk
E31QJI5fgU3d/W1FW4Aq/m5aCeg8zbwAjvZgVWT9y2QGaS0UVc0blRsL1bnYNGkP
2idCzZfak0vrXl9+HwPLLrbeDzNXtfdR7kJiaSrGfa0bE/xSFzW0H7MgaYDzz5Du
Ga9flcyAgguFj1xu2r99D7qKqWTTqAdih83Ow+yLNpwy0kfBGQiUkdN1hqh+jSFH
HVtkTzjSUcjUlubpdKn8XEgUbhZVh2pfE+qiQ9HncQPLoRYkDzjUkCCNIhEN9cD1
yKFsPfZsnyTuOQzffSBeKFCLjCNbXD+l9noSW7ua5c52t4eah531YgmflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMlMO5azZMA26Tz6PnVf5V6gRlWMB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw3tGzOv
9TB4DFqdbO2llHqN+RC/Ar3jXJoFbN06UV/Ggoof1rtcYvh9yCnQmv+xjAyFMqNQ
K7cxxMm/aHNpM3bkfRTB61yO0ULWbdj2OcDTbx0oKYQ+b8CGqfypY/DJSkc84v4F
GOabMlz8hEnIQkCBUd0UrxtkIM9dIUgp5I5oRFWTy4PaqTFg7j7brwGNq605h/Cc
ahZ2aaGCuS/Hp5kyRYQkrWYoRTU/am9qaovv8UyVpUv2ZaU60GeujdUvFGED2i94
3vKP0il2+kQsQ2N1cEyd1QXMvFONYKpSGN4T6ZRp+7QqtlVOlEuggtB91Q+5pl2n
aSO3M6By88YAug==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:45 2025 by rpki-client