Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: 7OH7XkXsEalg4ZSOgYWB851ukAwuXyKad490mYcEsLM=
Subject key identifier: FF:F0:7F:9D:E3:31:DD:6A:23:76:CB:83:31:A3:39:1F:A1:AF:5F:7D
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019852315EF24F898C6D195794985396904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 13B8
Signing time: Mon 28 Jul 2025 18:00:23 +0000
Manifest this update: Mon 28 Jul 2025 18:00:23 +0000
Manifest next update: Tue 29 Jul 2025 18:00:23 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: cSOL42xg7//2TnfwCZTDILfW7MWZfyU6U/829hHtrjU=)
2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:5e:f2:4f:89:8c:6d:19:57:94:98:53:96:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Jul 28 18:00:23 2025 GMT
Not After : Jul 29 18:00:23 2025 GMT
Subject: CN=fff07f9de331dd6a2376cb8331a3391fa1af5f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:1e:b3:ad:eb:57:d5:55:a1:d5:29:7a:b9:
4a:52:48:a5:ad:90:fb:64:da:45:b4:8b:cc:a6:60:
06:6e:ed:2d:1d:d2:0e:5b:e0:f3:06:f2:d6:73:0f:
9c:c9:3d:70:13:cc:bb:4d:f7:ad:31:49:cc:3c:e2:
29:db:54:c7:a6:1b:ea:e5:3a:0f:c1:e3:43:94:a2:
72:7e:45:76:5b:32:fa:df:e0:89:9c:1e:d0:8c:a3:
cc:b5:c1:71:6c:32:6b:3d:54:6c:64:1d:2e:b1:53:
18:c2:b9:50:79:80:68:57:5b:29:d6:78:4f:df:15:
09:a2:bd:c7:8b:cd:25:78:62:d2:f4:6f:1a:12:9b:
f5:59:63:d0:e2:42:90:92:de:9a:84:d5:e3:f7:c7:
14:0b:ef:45:c2:67:e8:aa:36:de:e8:88:d4:71:cd:
35:6d:30:b9:98:00:df:0f:ea:4b:63:42:bd:b0:87:
2d:d6:9f:ba:65:5e:92:52:d8:84:93:7f:40:47:4c:
01:08:b4:b6:a2:a0:24:9b:80:89:9c:66:c5:fd:31:
dc:ba:66:79:1c:bd:ab:ce:88:90:84:5a:f3:c7:a1:
b7:ff:bb:68:80:7e:34:27:26:88:42:ed:66:21:45:
36:b7:f1:d4:6d:a0:bd:a6:c8:9c:ab:9a:32:12:d8:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:7F:9D:E3:31:DD:6A:23:76:CB:83:31:A3:39:1F:A1:AF:5F:7D
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e7:01:ea:1d:70:fd:ec:d2:19:d3:1a:bc:48:5a:a8:52:36:
18:85:80:8d:59:7f:d4:00:c5:6b:84:1a:ef:69:74:bf:f5:37:
b7:ef:89:62:59:2f:84:ac:d3:89:d6:be:d2:5b:46:45:35:01:
54:e1:a8:3f:6f:53:f7:c1:1b:99:6c:53:41:75:f3:62:18:c7:
34:d9:37:bf:90:95:b4:ec:15:c5:a0:f6:16:36:10:cb:1d:fb:
a0:61:1c:90:38:f4:99:d2:2c:9a:c3:93:78:63:72:c4:65:e8:
44:7d:3f:27:54:53:08:38:13:99:b7:d9:43:65:ff:63:4e:a7:
58:0f:b7:3a:93:41:b4:f8:9f:59:ff:97:c3:66:ac:a0:e9:16:
53:7e:b9:2b:f7:09:21:85:13:d5:b6:7a:67:2f:fd:ad:35:6a:
4c:82:97:64:df:2c:ef:03:81:c6:5e:23:2f:b1:05:72:99:05:
32:19:e1:00:30:2d:75:07:38:40:c2:76:74:ad:76:81:56:4f:
5f:55:82:2e:59:94:81:eb:e1:ac:14:8e:9b:66:aa:40:02:52:
c3:42:c2:df:97:92:f3:51:ae:23:aa:2d:57:9d:e2:ae:3c:8b:
96:d3:fa:6e:0f:07:b6:ef:ae:b0:62:34:2b:00:dc:1d:a7:7b:
61:6c:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:42 2025 by rpki-client