Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: Y4jmxqVOLxsOa8ciSno8FyE8tsvuFxYM1K5KgJkRlVQ=
Subject key identifier: FC:5F:89:6D:74:BB:92:9D:13:A4:CB:A4:57:18:61:86:41:D7:AD:33
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 01984A0A1BD2D3C5AB49D700F2733426DDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0576
Signing time: Sun 27 Jul 2025 04:00:33 +0000
Manifest this update: Sun 27 Jul 2025 04:00:33 +0000
Manifest next update: Mon 28 Jul 2025 04:00:33 +0000
Files and hashes: 1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: Y+DMtcX/W7C2yKRT3a98zn33n8lwO/JpK7q5aW50SpQ=)
2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1b:d2:d3:c5:ab:49:d7:00:f2:73:34:26:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Jul 27 04:00:33 2025 GMT
Not After : Jul 28 04:00:33 2025 GMT
Subject: CN=fc5f896d74bb929d13a4cba45718618641d7ad33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:4c:76:c1:33:6c:6e:09:e8:0b:fd:65:b8:
45:ff:19:eb:b4:bd:9d:e6:4b:41:ec:77:e9:a1:35:
77:e6:c9:47:dc:7f:18:f5:3c:0c:3b:a7:6e:f3:4f:
a2:c8:11:fb:13:02:28:9c:bf:e9:fd:84:4f:6f:cd:
61:f3:49:03:11:e4:ad:d3:77:7c:5e:1c:42:6c:63:
29:7a:7f:f4:98:38:b5:98:ba:3e:9e:d3:59:e7:f8:
e4:3d:88:92:b9:d4:ea:c4:82:b0:a1:e9:5e:c2:8d:
23:67:94:25:16:3b:8a:9d:c7:ab:cc:b6:c1:50:a0:
d2:dd:d5:f6:6f:53:f1:fb:12:49:83:8b:4c:85:45:
7a:bf:bd:a0:46:9e:bd:31:42:71:a2:bd:a8:87:94:
ab:a5:5b:d8:b8:61:3b:f2:4f:84:ca:28:7f:9e:c9:
bf:ca:c8:96:d5:12:52:ea:54:df:70:fc:5f:fe:78:
17:d9:d4:2e:c2:d5:c0:97:bc:6b:9b:4d:53:7d:a9:
ce:1a:4b:83:c8:93:86:fa:bf:6f:cc:53:fd:76:30:
73:32:63:4e:df:94:22:99:41:a6:fc:60:a6:6c:d0:
cd:fd:3a:77:0d:87:5b:75:64:d9:f1:6f:c6:75:d5:
a1:4c:fd:0a:db:fa:4c:07:de:91:8e:7f:79:c2:ac:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:89:6D:74:BB:92:9D:13:A4:CB:A4:57:18:61:86:41:D7:AD:33
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:4f:af:04:02:84:a3:7c:31:06:4b:f6:9b:29:b4:71:b3:
92:9c:f2:20:72:77:11:c1:7a:ae:e1:37:3b:0f:b9:fd:c6:09:
3f:13:15:60:61:29:07:69:6b:bb:70:8b:f6:c3:4a:70:86:62:
7e:22:ca:b3:c5:e4:0a:5f:87:dd:cf:76:23:2d:84:07:88:9e:
e7:6e:22:08:22:23:14:ef:4b:95:7e:20:f7:11:b8:a7:26:52:
a6:e8:6a:37:97:f7:9b:24:6d:36:97:92:70:16:d0:fc:d0:af:
ab:10:36:85:e8:f9:0a:83:63:ad:03:7b:f8:d8:57:c8:e5:81:
76:cd:93:e7:4d:ef:7b:b5:19:28:35:f4:6d:24:7f:0f:c6:86:
f5:86:27:8a:16:42:3a:74:56:9d:69:b2:ba:5f:05:82:32:ce:
48:35:3f:82:be:bb:35:31:71:f7:51:95:90:9a:bc:b1:da:ae:
ea:25:54:70:f2:2b:d5:c7:68:13:2e:ec:d6:c9:61:45:87:c3:
f9:02:a7:74:cc:01:7f:6d:4b:89:63:19:40:1c:60:8f:8f:62:
07:1b:7f:a4:73:cd:3e:5c:9f:47:bc:07:5f:e2:f5:95:df:d1:
3c:a9:2a:c5:52:3b:4a:33:3c:8e:b8:03:63:b8:fa:38:4c:32:
cc:65:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:19:48 2025 by rpki-client