Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: DWsgN5zcURKiyjJ/W2+km8+0jXCNyus2RAR8yTEEZ74=
Subject key identifier: 63:AA:E4:1A:07:65:DE:51:6E:22:AB:CE:7C:20:F3:90:36:53:5E:72
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019745C22D7569F3FAF085E3ECE9207D57FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0CB3
Signing time: Fri 06 Jun 2025 15:00:42 +0000
Manifest this update: Fri 06 Jun 2025 15:00:42 +0000
Manifest next update: Sat 07 Jun 2025 15:00:42 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: 1AIE2DL2t5AMfktd2eQ3/8ys8Wa1GRzuIGSp3RZI/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:2d:75:69:f3:fa:f0:85:e3:ec:e9:20:7d:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Jun 6 15:00:42 2025 GMT
Not After : Jun 7 15:00:42 2025 GMT
Subject: CN=63aae41a0765de516e22abce7c20f39036535e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:c7:5b:e5:68:a6:de:08:e4:bd:6d:b1:9c:
a7:e9:c3:8b:40:01:91:78:e8:fb:62:59:b3:ac:d1:
d6:3c:eb:eb:71:d2:4e:30:fb:97:17:01:d7:9b:cc:
9d:4d:7e:0b:5b:c7:92:53:f3:ff:a8:43:dd:1f:07:
27:7f:9f:d6:a2:65:9a:b5:6e:c9:6c:ff:92:fe:73:
21:01:5f:a2:6e:61:db:c1:74:09:45:82:4c:73:5e:
7b:29:0e:ba:a8:ec:64:42:56:31:9a:e9:17:47:c3:
14:1b:68:d6:bf:72:9e:6d:32:b1:a0:24:e4:ab:54:
a9:bc:e6:a9:26:28:a6:60:20:b3:d5:8c:ac:94:96:
5b:5d:d6:64:24:e8:75:9c:0f:07:0e:bd:ac:c5:69:
40:c8:97:71:ea:73:1b:15:12:ef:15:c3:12:c9:91:
5b:88:ba:3e:f8:e1:d0:00:51:81:ca:f7:35:48:35:
61:11:9c:66:d8:e2:61:c0:94:d4:5f:db:20:13:12:
46:a9:0f:5c:35:ef:e5:3a:e9:c0:c5:24:1c:58:c1:
3b:ae:34:b4:4a:38:24:a6:9e:5d:ca:ca:d5:91:be:
0b:5d:dd:54:e7:3b:4d:d9:5d:14:1c:11:d6:7f:64:
6c:0c:87:8b:33:ca:90:d8:d0:34:71:01:af:78:61:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:E4:1A:07:65:DE:51:6E:22:AB:CE:7C:20:F3:90:36:53:5E:72
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:56:21:17:f0:54:4e:90:08:11:36:8c:79:ee:b1:78:a7:
d2:43:38:82:81:a0:71:16:9b:59:26:46:a3:63:b8:a9:73:98:
71:5b:c6:d1:e3:fc:ba:d4:4d:21:53:55:65:25:ae:63:24:8f:
27:7b:a7:e5:a0:49:7d:dd:d2:5b:c4:e7:36:46:3c:d7:de:bd:
a3:ed:c0:23:c9:f0:d5:17:f5:74:df:06:81:95:51:03:ab:6f:
4b:85:27:49:ca:95:5e:6c:c9:38:32:c6:da:ec:39:7c:5b:e8:
e8:4f:ff:0a:af:39:87:2f:ec:52:17:c4:33:1c:8c:56:58:67:
0b:d0:8e:7f:7f:e8:fc:18:46:3c:bf:6b:76:c2:d1:8f:28:cf:
8c:22:c4:c3:4c:fb:22:11:f9:94:20:aa:c3:af:e6:5d:a7:09:
da:3c:1e:9c:a9:b7:4b:91:35:43:fa:b4:ac:9f:06:cf:b8:7c:
8e:31:2e:8b:87:08:57:f2:72:3b:eb:df:e5:7d:cd:a3:6a:72:
22:2e:c6:6a:cc:04:21:73:11:3e:f3:82:ea:c0:40:37:a6:7f:
29:6d:2a:fa:41:3a:81:c2:97:20:61:0a:13:f7:3e:4b:ca:45:
e2:6f:67:6b:1a:23:b5:9c:e4:4b:d3:99:35:ab:53:f7:23:01:
7b:eb:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:26 2025 by rpki-client