Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier: xjSvjlSY3lbBB+WDuiv3/6MjY21c6J2iYkCbH9CisUM=
Subject key identifier: F1:F4:25:71:DA:61:D7:0E:AE:8E:FA:51:47:E3:22:19:B4:FB:43:42
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 019891B555917A7EE74C14194FCA91EC8511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number: 0D5D
Signing time: Sun 10 Aug 2025 02:00:36 +0000
Manifest this update: Sun 10 Aug 2025 02:00:36 +0000
Manifest next update: Mon 11 Aug 2025 02:00:36 +0000
Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: 14ay8YyvNXRiHlpmMSXYe4o89OBLDuAGkEHPZ/IqdrM=)
2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:55:91:7a:7e:e7:4c:14:19:4f:ca:91:ec:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Aug 10 02:00:36 2025 GMT
Not After : Aug 11 02:00:36 2025 GMT
Subject: CN=f1f42571da61d70eae8efa5147e32219b4fb4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:bf:24:d0:15:85:59:95:20:dc:58:50:c1:
1c:ab:2c:57:18:54:1f:5c:ad:98:3a:6d:f0:8e:b9:
00:59:5a:db:fc:ba:9e:87:13:80:fb:c9:ac:dc:6f:
1b:ca:6e:50:3b:1e:6a:95:ad:94:ee:14:a5:7f:d1:
d2:d8:0b:40:a0:1f:c6:b1:72:9b:1c:9d:32:ad:1f:
e6:36:d0:77:33:f4:a9:95:6e:c9:c9:09:b8:78:8f:
d7:9d:c1:b5:9c:c4:4e:7e:d6:c6:65:1e:04:ca:93:
ae:47:06:b2:94:95:0d:f6:96:0d:79:9f:1c:a6:7f:
d1:25:6a:99:02:bd:45:89:5f:50:92:e1:78:48:05:
fc:09:4f:6f:7f:db:7d:f4:52:a8:f6:b1:06:7c:9a:
89:fe:10:08:71:db:69:3a:43:5e:9b:d5:c7:67:20:
42:03:f3:b5:da:bf:f6:ca:4d:96:a7:fb:a4:fc:bd:
a8:21:e9:4e:8d:79:c6:ab:49:87:00:e3:d2:af:ff:
c9:8a:d5:a3:87:3f:ee:f3:d5:05:3b:3b:c1:08:31:
ce:74:5f:56:d0:54:7a:63:eb:38:f5:73:cb:cd:73:
e1:e3:88:18:d8:34:6e:1a:e1:43:e3:fe:0b:a4:5b:
b1:43:d0:c0:bc:ef:4e:7e:40:45:fd:68:f6:d1:20:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:25:71:DA:61:D7:0E:AE:8E:FA:51:47:E3:22:19:B4:FB:43:42
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a7:a7:2f:3b:f7:7f:c8:c3:ac:dc:ce:42:f5:b0:6c:b6:39:
ad:d7:8c:63:7d:87:3a:e6:fc:3c:23:7c:d3:ed:aa:82:4b:b1:
4a:d7:fc:0f:72:90:58:e2:d3:1c:8b:b8:4a:b3:3d:59:fc:47:
73:16:83:66:72:b0:35:92:ca:05:00:eb:9f:d6:c3:82:e4:f7:
b9:0c:73:6a:9c:89:13:6b:4e:f7:b4:76:f7:9f:8f:f9:2f:7e:
39:ea:a5:2e:ad:e6:e4:6f:b5:09:28:7e:ab:93:31:1f:96:30:
22:ed:26:4c:bc:93:09:6c:18:c1:7d:22:0e:56:dd:bb:59:78:
17:10:3a:b2:57:11:7c:32:7a:02:28:0a:e0:ae:17:26:c6:8c:
ac:d9:5c:a3:e8:4d:ae:f2:c3:da:0d:4c:62:7d:a3:04:eb:c0:
5d:cc:ad:78:52:1a:b6:ff:61:f9:97:57:c3:b0:e8:99:0c:3e:
9f:4c:ce:d4:1d:10:c9:17:6a:c2:0f:0b:35:1e:a3:fc:3a:df:
2b:e6:d4:5a:47:10:63:72:11:27:64:ea:b2:20:a3:12:41:9a:
e6:40:51:2f:34:3f:a6:89:15:84:af:bb:31:3b:f5:56:44:c6:
58:66:97:80:d8:da:ec:af:5a:5d:48:68:6b:4c:3c:73:b7:88:
26:b3:c6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:23 2025 by rpki-client