Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier: 4+gyhPyPEW8/pPnad96xMJakWu09pFhmay93KA2FsTE=
Subject key identifier: 0C:D3:EB:66:50:CE:30:23:22:2A:2B:0D:BB:A8:24:86:FD:74:45:3C
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 019826D9C1E25B8062F76806627FB2AD82EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number: 06D4
Signing time: Sun 20 Jul 2025 08:01:01 +0000
Manifest this update: Sun 20 Jul 2025 08:01:01 +0000
Manifest next update: Mon 21 Jul 2025 08:01:01 +0000
Files and hashes: 1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: VmcPrbMI2bTrja48mp8oEyH/kiXtK9Y+TL24LGDUb0U=)
2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:c1:e2:5b:80:62:f7:68:06:62:7f:b2:ad:82:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Jul 20 08:01:01 2025 GMT
Not After : Jul 21 08:01:01 2025 GMT
Subject: CN=0cd3eb6650ce3023222a2b0dbba82486fd74453c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:82:ff:e4:60:a8:c5:e1:34:28:25:51:b5:
ef:ab:e4:74:f7:84:b3:bc:da:6e:e2:73:20:92:f1:
8f:98:36:1e:24:61:0a:93:48:44:f9:eb:fe:1e:b1:
45:9b:b1:67:cc:dd:fd:99:c9:bd:93:c5:23:82:72:
6b:7e:78:53:01:4b:73:54:ba:93:e9:eb:99:b3:89:
61:8f:00:1c:59:b0:7c:86:b5:61:1b:3c:d4:56:5f:
90:4a:d4:67:a1:03:a8:17:c1:6f:f0:42:52:17:fe:
51:ad:c8:98:ae:77:6a:31:0c:2d:92:c0:2f:10:01:
5d:1d:ee:5e:e3:9e:b0:11:ff:c7:9f:f7:2c:fb:2a:
5b:39:1f:c6:de:af:35:ab:7f:55:e0:08:86:9b:47:
94:5e:91:6a:d2:04:e7:ae:4b:f1:16:d7:c8:c6:88:
8b:15:9a:a3:d5:14:1a:8a:94:d7:71:c2:51:3c:d1:
58:60:a9:b2:d8:ab:43:90:29:f1:a1:e4:60:2a:ef:
39:ad:08:72:cd:f9:5e:c1:92:93:9d:7c:af:4b:9b:
f2:18:91:46:d6:62:b4:1e:b9:c2:bf:57:c5:58:0b:
bf:a9:0c:95:d9:7b:0e:d0:0f:b8:1e:0e:25:73:65:
01:e9:52:b5:9a:09:9f:bd:ee:67:f6:b0:e3:8f:70:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:EB:66:50:CE:30:23:22:2A:2B:0D:BB:A8:24:86:FD:74:45:3C
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a9:63:1f:1a:03:13:e3:e6:29:dd:44:0f:0b:6e:6a:bb:9b:
71:e1:df:e4:b8:a3:dc:78:6e:64:e5:80:66:04:d0:1e:94:9a:
df:e7:4b:a0:a4:f5:8b:54:9a:64:97:dd:e7:0e:f7:53:6e:4e:
5a:9d:6d:a6:53:53:3c:bb:db:b2:5c:ed:96:a2:2f:ce:a5:66:
e9:76:77:7a:ee:62:89:d4:60:a3:02:60:65:d9:41:8b:c8:9b:
d9:d1:95:da:07:89:05:47:d3:9f:cb:8e:9c:6b:15:61:bf:f8:
5e:76:04:34:b2:b3:49:eb:f6:07:b5:f3:c0:07:57:c2:a2:9b:
a9:cf:d6:f3:2e:8d:ae:8c:5e:ad:f5:82:2c:f0:1d:1e:6e:b7:
c3:fb:da:ba:2a:d9:fa:16:b3:b9:f6:b6:56:9c:46:ea:1e:e6:
2e:0b:7e:59:94:28:01:ab:ac:2c:5f:40:d1:fd:d1:b8:ab:63:
5e:7c:72:b0:fc:71:46:c7:7f:0b:a3:8f:8a:b4:ba:1f:d7:f9:
e8:a1:15:36:c3:d5:b0:79:62:0e:a3:3a:bf:55:ca:42:4a:4d:
0e:dc:e5:18:67:da:de:46:c1:ab:62:9c:fc:e5:f4:58:38:53:
d4:9b:61:2e:20:d0:76:62:5f:24:99:06:4a:1f:b0:7d:8b:2e:
1d:ba:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:12 2025 by rpki-client