Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier: N9aWukEEzPEWTUEp+mzMOQNv8LXlvRBX3vpTz8kLv5I=
Subject key identifier: DC:C1:B6:77:CB:24:0B:DF:0F:BA:E5:92:7A:0F:70:F9:1C:14:24:0B
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial: 01975B6E7D35B4D81B677482EEDDF8329D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number: 09E9
Signing time: Tue 10 Jun 2025 20:00:56 +0000
Manifest this update: Tue 10 Jun 2025 20:00:56 +0000
Manifest next update: Wed 11 Jun 2025 20:00:56 +0000
Files and hashes: 1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: +WInMvqUHlgCA1TfKYYRbnLwMouMglp3moVW5HICRg4=)
2: _T-vtGYkRfg0z_VEY1ujTV9wsKQ.roa (hash: 6bCPgaDCgJtCF9Wiux6xQrKawZrIY3ovPB6dkvGNia8=)
3: aOoYflX7uJIRHS-Vxicl6-foq_k.roa (hash: 3rCaBnosnTmAkm/S8jXALmR1BCxmxwNBGtyTjUO3JB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6e:7d:35:b4:d8:1b:67:74:82:ee:dd:f8:32:9d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Validity
Not Before: Jun 10 20:00:56 2025 GMT
Not After : Jun 11 20:00:56 2025 GMT
Subject: CN=dcc1b677cb240bdf0fbae5927a0f70f91c14240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:c1:84:26:31:51:bb:6c:7c:e9:de:59:32:
36:cd:ae:ab:1c:41:cd:4c:d2:de:28:b2:f7:92:09:
5e:87:27:a7:9b:92:f7:e7:3d:83:39:00:c2:75:14:
d3:a7:19:8c:c7:80:31:60:a5:07:ee:9c:d2:41:4e:
81:64:04:d2:c3:80:f6:32:a4:87:4b:82:91:71:a8:
35:0c:fc:40:66:8d:51:15:67:8d:91:c2:34:a7:08:
66:40:28:7d:8c:85:59:b9:f6:ef:d3:1e:2f:be:51:
9d:e2:71:a6:90:98:64:64:83:89:bd:d1:57:09:2a:
b9:93:69:b1:81:98:dc:3f:5a:6e:08:26:f4:27:da:
86:af:af:54:5e:4a:d9:d8:6c:a2:18:cb:4c:d0:9a:
0e:34:5b:87:09:0d:6b:1e:0e:c3:54:0a:9a:90:ba:
45:a3:a3:96:2b:aa:b1:58:c6:61:f2:ba:37:aa:79:
a8:84:4c:0e:39:48:3b:a1:2f:42:bd:ad:b4:f3:37:
53:7c:3f:d7:fd:c1:f9:e1:73:21:14:37:2e:40:eb:
05:2e:69:03:60:58:a9:0b:bc:21:5a:c0:a1:ce:73:
25:8d:57:d3:ee:cb:c5:02:50:48:b8:ad:e2:42:45:
eb:20:91:5c:72:3f:59:58:1d:d5:71:8d:c3:6a:45:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:B6:77:CB:24:0B:DF:0F:BA:E5:92:7A:0F:70:F9:1C:14:24:0B
X509v3 Authority Key Identifier:
keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:fd:86:b1:d5:46:40:96:2d:36:52:93:b2:d6:9c:88:86:
04:f4:e7:43:2b:9d:a5:15:bd:ad:ac:f2:fa:25:42:93:57:c3:
63:b0:d6:a4:de:71:ff:0a:7e:4a:70:35:df:af:a8:e3:e4:e6:
ff:1c:3a:ec:46:3a:3d:fa:3d:8c:44:8d:59:a1:b6:9d:07:68:
91:db:9f:4f:3b:45:52:14:3f:31:df:c6:bd:be:84:63:a5:1b:
3a:5a:6b:73:0e:f6:91:da:4f:f6:ad:37:4c:41:2b:98:4f:e2:
34:40:36:48:8e:c4:5b:e3:59:7c:a8:d6:6f:40:90:bf:e1:07:
46:ab:3a:c4:d6:be:85:9a:31:91:c5:26:68:2c:a4:d4:ac:cb:
75:58:66:12:37:6a:9b:78:fd:f5:a8:6c:27:ec:b0:95:46:53:
a1:7b:da:9e:90:20:b4:78:84:28:9a:59:a0:fb:aa:ae:40:c9:
b3:11:3e:ef:5a:e0:90:03:c4:6f:4a:f4:13:b6:f0:c2:f1:31:
82:e2:10:23:26:b3:63:74:c2:41:fe:48:26:79:fa:ec:d5:8c:
d4:4d:74:cf:72:64:a0:ef:7b:6e:19:7a:8e:02:b7:d3:91:60:
7a:de:dc:18:03:e0:7d:fe:5a:ec:77:c5:2f:23:09:b5:c0:e4:
cf:3e:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:08:43 2025 by rpki-client