Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier: ByK+hFlbapoN7BqgS2fkVijVVRSca3e60N898VV3p+k=
Subject key identifier: 00:5A:7A:AE:B9:AB:8A:E5:62:38:97:8E:C3:08:A9:A6:90:1C:DD:23
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 01984966CA9B8365728FD6BE6BC80BA28820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number: CA
Signing time: Sun 27 Jul 2025 01:02:09 +0000
Manifest this update: Sun 27 Jul 2025 01:02:09 +0000
Manifest next update: Mon 28 Jul 2025 01:02:09 +0000
Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: IvwGo/ElXFNDcrJl1mvIKZy/TfBu9HPnsdc0fhMSOjI=)
2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ca:9b:83:65:72:8f:d6:be:6b:c8:0b:a2:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Jul 27 01:02:09 2025 GMT
Not After : Jul 28 01:02:09 2025 GMT
Subject: CN=005a7aaeb9ab8ae56238978ec308a9a6901cdd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:9a:48:13:14:44:43:02:55:d6:03:17:eb:
f5:75:09:60:0d:4c:0f:4f:4f:61:5d:1a:83:fa:02:
4a:14:ea:4c:ca:d8:45:81:47:b8:55:a6:a1:45:56:
45:d0:69:49:19:ca:73:28:3e:21:44:62:0a:55:40:
cc:e3:cb:61:34:e9:10:60:91:e1:cb:21:b9:23:72:
ee:a9:aa:9b:d7:c7:aa:3c:a5:16:0e:78:8c:33:eb:
9f:44:2e:35:70:f9:5c:74:f3:28:6b:af:da:54:36:
7c:9a:9e:34:5e:06:92:e6:d9:43:98:9a:5d:e5:c5:
11:18:9c:4a:5a:fa:27:ad:70:51:c6:22:86:f0:99:
5a:2f:0a:5c:52:38:0a:f6:b5:a7:92:c9:3d:70:a7:
6d:3c:de:34:3b:93:70:1c:51:e9:28:9c:61:c5:42:
b1:64:aa:44:bc:d9:47:95:cd:05:dd:44:59:36:d0:
36:6b:71:a5:1d:44:74:09:36:1c:9f:f4:99:a3:eb:
f2:16:c4:96:41:fc:bd:a5:99:31:2e:e0:69:2b:37:
e7:1d:25:a6:91:76:16:94:9e:63:b8:19:c8:43:4e:
96:62:ae:08:31:da:c4:08:7f:8a:24:59:3c:9e:99:
ff:d6:b9:c5:b8:44:8c:4c:b0:27:fa:e4:d0:af:5c:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:7A:AE:B9:AB:8A:E5:62:38:97:8E:C3:08:A9:A6:90:1C:DD:23
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b8:e7:87:b8:9b:c9:5a:c6:a0:fb:06:4c:6d:dd:a5:3b:ef:
11:38:e0:df:f3:68:13:9f:44:b1:e9:4e:26:bd:0d:18:7a:87:
66:f2:2a:9d:87:e6:0c:d9:65:a2:c3:7b:a5:4c:32:32:ff:1b:
40:e8:3a:48:a4:3e:e6:b9:cf:48:67:92:75:bf:9e:ab:d7:94:
42:12:04:61:30:08:6a:44:79:f7:a6:9a:c5:eb:61:65:8b:43:
7f:4f:71:36:0e:b2:36:35:aa:58:ca:bf:15:e6:5d:c2:d7:06:
b9:78:5c:78:84:b2:f2:12:39:f4:71:84:b8:9e:a4:06:07:bf:
f3:85:06:62:61:8e:f4:9f:97:cc:a2:5e:cf:48:74:48:59:91:
e2:31:a3:54:49:f7:73:3b:62:58:a3:e3:98:c8:26:05:35:55:
84:cd:4e:ab:93:11:e4:82:d0:0d:39:0f:66:cf:e4:c1:8f:39:
bb:dc:8d:c5:f7:be:70:db:92:17:ed:9c:7d:2f:10:87:ac:61:
75:f4:35:75:55:ff:46:a6:78:92:af:92:1d:a4:a9:04:eb:86:
b0:b0:63:0a:c7:d6:2f:4d:84:e8:a5:57:08:b2:c5:77:a9:e4:
b3:11:90:87:ac:40:59:b4:d0:bd:76:1d:75:f0:5a:84:b8:24:
01:5e:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:28 2025 by rpki-client