Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: AYWVd8gcFsqfoU/TBauBtpEFAfQfYTbilAgecUAH0/w=
Subject key identifier: FA:07:19:E6:3F:74:DB:D7:72:A8:40:C7:DA:94:21:29:78:96:17:FF
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 0197488D3BD07E85A2933DB8526A96692295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:01:44 +0000
Manifest this update: Sat 07 Jun 2025 04:01:44 +0000
Manifest next update: Sun 08 Jun 2025 04:01:44 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: UTyxhjkGBikNH+lRdg8OTOGv/anOGOv+nuU6JnOBdOA=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:3b:d0:7e:85:a2:93:3d:b8:52:6a:96:69:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jun 7 04:01:44 2025 GMT
Not After : Jun 8 04:01:44 2025 GMT
Subject: CN=fa0719e63f74dbd772a840c7da942129789617ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:e6:8b:35:e6:36:22:b6:31:4b:98:a0:23:
3d:9e:c6:bb:f9:83:a9:ba:ff:6a:4f:de:85:df:57:
03:45:1c:a3:a8:fe:f8:e1:06:b1:a8:51:62:5e:94:
50:77:9b:47:7d:23:57:11:58:34:4a:89:b9:59:ce:
2e:54:04:2f:d7:66:ff:ef:e1:0f:a7:0e:d8:d9:31:
ef:70:e5:7e:5d:75:86:57:b1:2e:65:36:07:31:a9:
2d:c5:d5:77:82:dd:93:ad:48:ca:5d:e3:08:4a:32:
62:ba:41:70:62:66:a8:23:10:9b:39:06:4a:c4:d3:
91:68:23:f8:03:a6:56:1f:88:ba:c6:ee:2a:4d:fe:
e6:55:df:9b:ad:f9:38:2f:fc:d7:d4:77:6a:df:ea:
e3:b9:73:36:17:ee:99:d5:a7:12:24:d9:25:05:16:
0c:e3:aa:81:be:ab:48:61:fa:25:dd:a0:19:a6:68:
fb:2d:79:1d:4a:ba:1c:f4:ee:d3:25:06:42:8d:68:
be:18:b5:94:1b:52:40:e3:db:f5:d2:fc:84:83:2c:
02:9c:1a:17:92:39:d0:1f:b1:a3:a1:c8:ff:fc:f2:
50:9d:0c:e2:2b:0f:dc:81:64:aa:b0:15:4f:b1:dc:
f3:49:1e:ad:83:6b:5a:d8:26:1f:f8:28:74:35:a4:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:19:E6:3F:74:DB:D7:72:A8:40:C7:DA:94:21:29:78:96:17:FF
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:ea:88:46:57:94:12:e6:c3:bc:d5:e0:ca:0f:f2:ca:d7:
02:29:84:7a:51:0a:f2:80:e8:e7:ef:96:c1:23:84:61:80:73:
c2:ef:0b:cb:b1:89:68:d2:d3:ce:d9:fe:27:df:77:ac:f5:22:
68:f9:27:1f:41:6d:04:04:00:35:19:81:e3:d1:11:79:9f:2a:
59:86:0b:49:a6:cb:bb:92:5c:cc:45:bd:d9:57:9d:be:00:27:
26:ab:b2:25:45:c1:b8:b8:03:f9:71:c3:c4:27:d3:6d:5e:aa:
23:30:61:8d:e6:84:22:6c:fc:18:96:36:41:4a:06:c8:9f:15:
a8:e1:d1:b7:9e:21:4c:26:c4:40:2c:35:f3:07:33:2f:b0:8a:
4a:da:d1:e1:c3:29:0f:1c:3f:11:bb:dc:8e:c4:05:54:2f:cc:
5f:e4:81:82:a7:ec:67:eb:0e:33:c7:e4:ba:f6:f9:4e:cb:76:
6b:12:5e:dd:1e:bf:2c:29:c3:0d:ca:a1:bd:16:17:6f:4a:3f:
5f:f9:ab:23:26:11:2f:fc:b4:c6:de:26:ae:aa:16:d6:7f:5c:
41:10:a1:ab:79:e6:da:f4:22:8b:b3:54:1c:69:23:e5:07:e4:
4a:03:50:bc:b6:1d:29:d6:6b:ec:a8:41:05:49:0c:7d:02:6e:
67:81:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:39:59 2025 by rpki-client