
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: Uhy9wNCry8MKwTfZzzLi61W6cufFgiruQnVVY1z1/sU=
Subject key identifier: EE:68:58:DF:93:43:AC:80:87:92:9D:9D:1B:02:89:4F:E5:51:5A:61
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 01974967C4016206C0DB464604FCFF00F958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 0699
Signing time: Sat 07 Jun 2025 08:00:26 +0000
Manifest this update: Sat 07 Jun 2025 08:00:26 +0000
Manifest next update: Sun 08 Jun 2025 08:00:26 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: 6ov1SB0UiODzF4vNCGj2v4MZ9RtTpwDWOrGrzTSSGiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c4:01:62:06:c0:db:46:46:04:fc:ff:00:f9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Jun 7 08:00:26 2025 GMT
Not After : Jun 8 08:00:26 2025 GMT
Subject: CN=ee6858df9343ac8087929d9d1b02894fe5515a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:24:d8:a8:d5:67:75:4d:e1:58:90:ec:0f:bb:
23:de:b0:71:71:e7:40:86:32:94:57:92:16:d2:f8:
d4:c2:50:9e:7a:59:a4:9d:15:a2:64:ae:1a:88:1f:
c8:e2:ce:18:62:30:0d:1c:aa:4c:b9:67:f9:c1:1d:
f7:26:ae:8f:eb:fe:9a:69:6c:81:17:e1:fd:17:f9:
a4:b8:78:35:68:d4:fd:fc:6f:6e:7c:2b:a0:c6:8c:
b7:3a:14:ab:bd:f0:5c:cf:45:18:32:93:f7:bf:e1:
9e:2d:53:19:84:48:48:83:4e:c9:18:ec:74:df:8a:
c9:a1:f9:01:c7:4e:0d:72:82:88:48:06:ec:0b:ba:
ee:c4:34:29:7b:94:73:e6:fe:8b:3e:60:ec:17:59:
ea:f2:ad:a6:64:90:1a:b1:53:a4:a2:c5:51:55:12:
8b:1d:20:e6:ac:00:87:1e:97:9d:19:1a:79:4a:2a:
62:c6:28:65:4e:44:9b:27:2f:db:7d:f9:3a:1e:f6:
00:4f:88:b5:6d:7b:bf:09:57:02:4c:a6:bc:e4:f3:
87:fe:5f:ed:82:88:3d:df:b4:ed:64:61:44:b9:6a:
93:53:d3:f8:49:dd:16:e0:72:56:e9:6e:ca:87:41:
72:d9:e0:99:6f:09:07:08:77:bd:50:c5:e1:b8:9d:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:58:DF:93:43:AC:80:87:92:9D:9D:1B:02:89:4F:E5:51:5A:61
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:65:da:0c:45:2e:53:c1:d2:57:8a:f4:da:13:9e:c4:83:a9:
e0:ad:d3:52:96:59:73:11:32:ce:ec:7a:b7:a7:8a:23:ba:c6:
0f:5f:af:ea:df:70:31:7e:a2:33:a4:ec:ca:ed:c8:ed:5f:98:
59:e2:34:91:bc:bc:1b:a1:16:fe:96:77:18:ea:32:21:62:55:
38:fb:dd:75:2a:f0:a2:2c:ff:a3:96:c0:f0:90:0a:42:83:f6:
23:55:e2:ba:27:3e:2a:00:96:b7:d5:6b:b6:f8:82:9b:9e:8c:
87:07:f9:75:46:03:e3:e0:9e:2e:71:bd:be:e6:83:f0:34:d2:
34:13:6c:f6:de:d6:2c:e1:dc:31:ba:70:ab:3d:1a:68:e0:19:
66:0e:5e:01:11:85:01:be:41:02:9e:41:02:c7:21:7a:c2:7c:
e4:11:03:3b:a1:34:58:bc:43:ff:86:26:71:e4:fd:02:30:a9:
6d:9a:1e:03:03:1b:36:ba:68:12:23:63:b0:00:fc:c5:d5:1d:
6a:71:a0:a6:37:c0:10:26:8c:94:02:c0:0e:30:23:38:da:09:
9a:6c:b3:21:cf:50:85:f0:00:43:68:62:f0:11:45:16:a3:6e:
07:99:a8:68:67:d3:10:e2:b0:b8:a6:e5:f5:c3:9f:ec:d1:f1:
eb:18:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:57:09 2025 by rpki-client