Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: u7W2yVnXuGq+mIQZ2WSKN1kkuG72lby7LVECl3hEXlk=
Subject key identifier: BB:82:8D:99:39:60:83:70:3C:24:5A:78:42:EB:DF:8A:25:3C:56:71
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01985569F695978C69DCFCF67D55E2FC6BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0F0A
Signing time: Tue 29 Jul 2025 09:01:04 +0000
Manifest this update: Tue 29 Jul 2025 09:01:04 +0000
Manifest next update: Wed 30 Jul 2025 09:01:04 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: /k/NFIPQyZrh50mJ396evecxWRu0N1oW9505WLiSJIg=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:f6:95:97:8c:69:dc:fc:f6:7d:55:e2:fc:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jul 29 09:01:04 2025 GMT
Not After : Jul 30 09:01:04 2025 GMT
Subject: CN=bb828d99396083703c245a7842ebdf8a253c5671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:34:35:e5:a0:fd:b3:21:4c:75:f8:fe:04:
a8:5e:be:fd:1f:74:3d:41:79:15:e0:7e:f5:71:56:
a8:d3:ab:e5:91:52:40:67:81:28:52:f1:5a:94:4c:
f2:de:6b:89:12:d9:e1:d5:b1:7e:b6:25:86:45:23:
5a:62:08:cd:af:fb:e2:82:1b:be:c1:42:d2:61:2f:
29:82:c4:da:d7:fe:91:06:a9:f0:51:4b:49:ca:ca:
18:10:36:3e:0a:ff:be:76:a5:f2:ee:ca:4d:c0:e2:
74:04:c2:f6:5b:a0:55:31:32:db:8d:db:1c:89:5b:
ba:12:6e:ae:70:0a:8f:98:6b:e0:d4:bb:b7:84:b0:
6b:0b:8c:71:5d:b4:d5:f2:49:1f:ed:92:cf:96:07:
bd:c7:5b:bb:cb:0c:3a:63:42:a6:0e:97:64:b1:87:
73:2b:66:07:99:74:6f:47:f5:cd:81:6e:79:4f:cd:
38:f0:22:e2:f7:74:a1:92:ed:e5:c3:c3:54:9e:fe:
06:95:aa:2d:d6:af:57:91:ac:65:9f:e6:c5:36:8a:
25:3c:43:28:cb:f6:61:e3:c3:df:c5:5f:24:4f:d7:
79:50:36:21:f6:fc:be:ee:b5:e4:b2:4a:f4:d9:8c:
98:6e:e9:b6:47:31:02:2b:15:0c:f2:43:43:b3:10:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:82:8D:99:39:60:83:70:3C:24:5A:78:42:EB:DF:8A:25:3C:56:71
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:98:b2:da:bd:ad:e1:0d:02:66:8e:e1:fe:af:7a:82:d8:a1:
d2:89:c3:ca:99:6a:6a:38:8d:83:b8:7b:b1:bd:b8:4a:44:cc:
0a:88:46:a2:55:98:1d:9b:42:95:bc:7e:3b:05:7a:a3:7d:0a:
85:6e:81:18:7c:93:bd:83:c7:50:66:2f:46:64:41:36:d4:b7:
4b:00:2e:bd:bb:0b:e0:41:70:bc:8c:17:0c:2f:26:78:90:c5:
75:f7:14:8d:5d:69:c4:fc:7a:5a:e3:7c:13:f0:af:7e:bf:48:
c0:30:2e:11:7a:b1:95:65:2c:27:2c:52:1a:f3:15:da:f4:8e:
92:ec:bc:ab:28:11:20:f5:ec:1c:62:49:7a:b0:b5:5b:dd:c0:
b6:e8:c1:2a:4b:f0:6b:19:fb:9a:05:a7:6b:24:d4:5f:26:64:
db:ee:b2:41:cb:14:e2:52:bf:fc:bc:fc:0a:eb:fa:f9:c5:b2:
6b:fd:e6:94:21:b2:e9:b2:54:06:ed:cb:65:e4:55:a5:9f:0b:
e6:8a:00:99:eb:bc:5a:a7:5f:72:1b:13:ee:a3:6f:38:6f:0c:
c5:04:3b:ec:d8:75:ab:f2:53:7a:2c:f8:4e:3d:d5:7c:35:8a:
23:44:ac:3d:9b:35:6b:bf:32:e5:86:cd:72:51:f3:35:26:11:
75:80:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:50:21 2025 by rpki-client