Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier: cDzz7nnuszolXPe0bLZ+YoIHsLQJbQl1MPv5gxs2l7A=
Subject key identifier: 77:89:C7:2A:32:AA:07:DB:B7:CD:24:DE:F2:D0:AB:7C:19:2F:1D:0D
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 019749D5F68F6C0DBFC4AC962FFBDFECF610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:48 +0000
Manifest this update: Sat 07 Jun 2025 10:00:48 +0000
Manifest next update: Sun 08 Jun 2025 10:00:48 +0000
Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: 1qpwVcPVUwCK140ucvmsjwDsuLycvuFZJqRbuByn+Sw=)
2: f1F0WxdJkw--IIYJ2pRVkM2V08g.roa (hash: PCXGQz19PbylWHQsw2l6MBgGvmv6YISk0m8qSQkolpM=)
3: weaxMACIysGRPOx39bRJCpdcHEI.roa (hash: coOLOg3eMCLKMHx7Lq6/lTx44QSsHYUGPWnve3Ptlmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f6:8f:6c:0d:bf:c4:ac:96:2f:fb:df:ec:f6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Jun 7 10:00:48 2025 GMT
Not After : Jun 8 10:00:48 2025 GMT
Subject: CN=7789c72a32aa07dbb7cd24def2d0ab7c192f1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:d4:cc:b6:7a:99:67:40:94:c1:b7:f8:46:
1c:55:be:1b:de:f8:eb:90:82:0d:11:6c:ad:07:81:
07:26:51:77:65:9b:e3:08:e0:13:43:f1:f9:43:56:
5e:b2:d8:36:f4:03:dd:cf:17:5f:7b:8c:4b:65:7e:
0b:a4:2c:8e:cb:cc:25:63:ff:e7:ea:30:72:4e:74:
2b:ab:32:3a:1d:e3:8a:31:f3:f2:f2:ce:77:a7:93:
e4:53:83:3a:1f:20:4b:41:9f:20:02:66:87:7a:69:
b6:e5:17:78:f3:96:6f:fa:24:b2:79:63:24:70:2d:
9e:43:0e:8b:4b:c9:71:79:0f:68:9b:42:ea:51:0b:
c5:d5:1d:60:23:15:9c:64:a6:5d:de:60:e9:6a:d6:
50:cd:19:ed:0a:61:2e:38:d4:58:fa:84:86:3b:cd:
ec:0c:65:58:db:7b:79:24:8a:6b:2f:0a:5f:cb:85:
5e:f1:e2:b9:9f:14:15:db:57:51:17:6d:52:02:1b:
fa:61:ec:22:47:a9:5f:52:56:cc:45:f6:b3:76:78:
00:a1:da:8f:05:c7:ec:b0:94:4d:b9:fd:c8:25:b1:
c9:1d:26:25:18:93:54:32:93:c5:db:e3:22:8a:57:
3c:61:52:a8:6c:53:f7:b6:a4:d2:d5:e4:65:1c:6b:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:C7:2A:32:AA:07:DB:B7:CD:24:DE:F2:D0:AB:7C:19:2F:1D:0D
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:a2:82:21:aa:85:a4:a9:a3:b6:04:a2:c2:6c:4a:3a:05:
0e:e8:ee:11:c8:c1:63:4b:88:e3:94:2c:25:2d:ac:3d:00:4e:
49:01:34:34:35:21:6d:3e:7c:80:3f:8d:14:5b:19:28:06:87:
74:69:2b:d6:1f:e3:6d:a4:67:58:58:45:65:55:da:df:9b:97:
45:5d:6f:ad:f6:bc:18:ba:e9:43:75:5f:8c:30:c7:ff:d2:0f:
3b:78:37:23:1a:7b:a3:18:96:2a:c0:ab:bf:c8:f3:ca:81:87:
de:ae:58:d7:8b:7c:4d:3e:2d:03:2f:74:f7:24:da:13:08:dd:
c5:7b:fa:20:c9:1e:6f:68:19:ea:59:9e:8a:f0:2a:1b:f5:ca:
8b:8a:d2:7d:f0:b1:ac:11:64:bf:8d:6b:6f:49:ca:5c:fd:b4:
8a:59:85:01:ea:c9:1f:5a:a5:98:3d:76:ef:a6:d6:e7:fc:39:
e5:36:e4:02:27:fc:18:3f:a3:b1:c5:a9:81:bd:2f:e5:b9:0a:
47:44:0d:5b:f8:01:fb:90:88:7c:06:6a:e0:14:8a:d4:95:96:
a4:48:15:d9:7b:ab:32:f7:18:6e:e9:97:99:d6:c1:b6:ce:39:
f8:09:95:01:e1:df:40:cc:17:f7:4e:bb:b7:22:9c:f9:6e:d2:
6a:00:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:41 2025 by rpki-client