Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: j5VbKGO6S3hLzLf6yL1TN31zrrS2H+rnaOq+EvKivlY=
Subject key identifier: 4A:0B:50:07:FC:7D:F2:81:7C:BA:71:4D:37:B1:55:30:5A:0C:E2:41
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 01974EFC3667FAC055AD29841B386FAE992A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 10:00:41 +0000
Manifest this update: Sun 08 Jun 2025 10:00:41 +0000
Manifest next update: Mon 09 Jun 2025 10:00:41 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: GKAOFTLMrMhdtFRmq9jYfLb4tiOYOOXFNfSz9Gjoj1s=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:36:67:fa:c0:55:ad:29:84:1b:38:6f:ae:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jun 8 10:00:41 2025 GMT
Not After : Jun 9 10:00:41 2025 GMT
Subject: CN=4a0b5007fc7df2817cba714d37b155305a0ce241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:98:f9:7f:3f:a7:e3:8a:65:43:39:b7:99:
fb:e9:fc:f3:2c:91:7b:d1:ed:37:f0:66:ac:20:f9:
1a:86:ce:e3:34:bc:52:67:75:29:0c:1c:71:93:3d:
e0:6c:76:c6:16:7d:bd:9c:5a:ff:af:7f:50:bf:9f:
8c:37:c8:81:10:79:15:22:41:97:02:26:4e:8f:b9:
f0:30:19:84:ad:52:dc:b5:d2:0a:44:97:42:ef:b6:
93:ec:3f:fd:60:61:68:6a:40:d1:ba:a1:1c:49:2c:
88:eb:80:2a:49:fe:dd:f0:8a:58:f7:4e:cb:e5:73:
08:bf:8f:1d:62:da:12:18:79:9b:6d:f3:f1:ce:11:
02:37:99:81:29:68:59:8c:4c:c3:35:c9:9c:f2:68:
18:9e:fc:e6:03:16:d2:7a:ec:c6:6d:5a:82:ae:50:
f2:75:46:a4:f5:e8:3e:a0:47:fa:de:72:73:c3:1a:
57:2a:cf:71:b7:66:95:0b:13:18:53:63:db:7b:af:
7e:24:12:9a:06:29:66:b7:8e:d4:23:18:c6:25:ad:
bb:f6:cd:e8:b3:76:3f:7d:75:e1:0f:f5:13:b1:82:
5c:29:3d:64:12:55:cb:3e:b3:1e:28:54:b5:74:04:
26:9e:db:fe:d1:bb:21:c4:e7:65:06:ff:0b:07:24:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:50:07:FC:7D:F2:81:7C:BA:71:4D:37:B1:55:30:5A:0C:E2:41
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d8:01:28:85:31:cd:75:9d:77:f5:8c:bd:fd:16:bc:57:b8:
74:1b:a9:c5:f5:30:01:cb:f0:e4:81:4a:9c:76:9e:33:ab:8b:
03:2e:54:e7:5d:9c:51:d8:90:f1:47:2b:b5:1a:a3:a6:d8:23:
37:c1:bb:72:eb:1c:40:80:39:77:8a:b6:97:26:ef:02:6e:5d:
f7:ad:02:f0:2c:a7:e7:d7:cf:23:78:8f:c9:80:0c:0d:aa:8f:
41:99:04:a0:fb:1e:1e:59:8a:d9:b6:0d:84:87:7d:bf:92:23:
41:b5:21:1c:62:4d:09:14:a9:a9:70:53:a2:f0:7d:63:63:7b:
91:0a:13:82:db:24:13:4f:23:cc:07:5a:c1:f9:ad:87:f2:b5:
f5:fb:16:7d:10:db:b5:2b:eb:61:79:be:a3:2f:9a:79:e9:e1:
cd:9c:06:c1:33:41:3f:c8:68:2c:bf:39:fc:3c:4f:13:c3:a0:
9f:d2:63:b9:e1:c1:21:e3:96:45:cb:09:b0:01:f6:ca:39:68:
7a:cd:14:f4:ed:f4:66:65:82:08:b6:53:05:da:3b:1e:49:50:
09:da:ae:96:64:35:e9:fe:21:2f:40:ad:8c:3c:ea:68:cb:bb:
e3:b0:a5:4c:ec:9b:80:7b:ae:20:31:4d:94:e4:9a:ec:03:12:
cb:fb:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:20 2025 by rpki-client