Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: a/tQC3pDAKomsZMhHfbWvwLgCgH4D+Ks30n4xy0J4tQ=
Subject key identifier: C6:80:3F:BA:73:14:94:45:36:87:E6:A5:94:91:F4:A1:4D:51:56:1F
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019764033F256B9FFE430668DE2AE45F5388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 12:00:23 +0000
Manifest this update: Thu 12 Jun 2025 12:00:23 +0000
Manifest next update: Fri 13 Jun 2025 12:00:23 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: XfERYWS7lw+PAfo+p0gQGE2kfhvDJ7wfJIpkwym5oWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:3f:25:6b:9f:fe:43:06:68:de:2a:e4:5f:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jun 12 12:00:23 2025 GMT
Not After : Jun 13 12:00:23 2025 GMT
Subject: CN=c6803fba731494453687e6a59491f4a14d51561f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:93:b6:68:8d:64:6e:d1:b9:bd:3e:62:47:
d6:86:47:8f:b8:de:06:fd:39:1e:9b:47:5f:34:37:
1d:dd:04:1f:93:7a:64:d8:29:86:be:e4:a5:f8:1c:
bc:39:62:2a:bc:c6:4f:fe:c7:ca:29:75:f8:0f:47:
3b:24:07:96:fc:fb:20:66:4b:10:83:4f:b3:1f:d2:
e7:70:cd:86:9d:17:87:b3:f5:1a:d2:cf:ea:6c:f5:
02:da:dc:c1:06:05:ad:3a:ea:93:42:40:2b:17:41:
4b:08:40:fa:8f:9a:8b:3b:a6:95:70:e8:80:94:de:
e1:ef:b6:1a:04:6a:db:6d:90:e1:88:dd:9c:66:27:
51:a6:09:e7:7a:18:17:cb:1f:5d:5d:4e:76:cb:5c:
d5:d1:32:d9:1d:50:77:3c:40:f9:d8:2e:1a:59:d3:
ef:a5:da:cc:1d:ad:6c:a7:49:e5:fd:e5:f6:4f:3e:
a7:66:e3:3e:a6:b6:c9:88:45:da:37:55:da:95:9e:
01:bd:af:dd:a0:83:32:46:03:c5:2b:1b:ef:92:c3:
0e:66:6b:77:00:49:0f:4f:e1:9b:f3:bc:a2:b9:70:
e5:a3:43:f3:ef:1f:90:06:8f:3a:ea:32:b7:a3:6a:
78:fa:90:55:dd:21:4a:56:ce:8f:46:47:a0:3f:8c:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:3F:BA:73:14:94:45:36:87:E6:A5:94:91:F4:A1:4D:51:56:1F
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:5b:23:27:64:2b:25:48:aa:30:4d:96:7a:94:d6:34:1d:
ee:3a:fd:dc:9d:24:5c:fb:e1:13:83:c0:92:1c:36:67:95:a3:
42:a5:05:b5:d1:e0:86:7a:00:97:01:29:a1:eb:90:8a:de:02:
32:0b:4e:a9:ea:25:fb:4f:46:92:fc:90:09:aa:24:62:01:d0:
a0:71:4b:b6:4b:c5:c8:95:65:66:82:3f:cd:27:0d:5b:3a:eb:
84:ed:74:eb:7b:e7:ac:81:cd:b6:7a:ea:99:b6:7d:aa:8f:f1:
2a:09:1a:21:10:62:bb:7a:59:9f:99:dd:e3:f0:c9:21:6e:98:
e5:ee:5a:08:33:c8:30:de:37:9f:41:15:6d:71:2d:0f:9c:87:
08:5d:e8:38:32:85:58:07:31:a6:59:df:33:9d:4f:8e:30:b7:
40:21:bf:b7:53:a2:50:3b:d4:3b:4e:ee:ad:3e:d1:c8:9a:04:
60:a7:7f:0f:7d:45:45:13:1e:2e:d0:99:e6:1e:ac:48:d0:3f:
53:54:a0:c0:19:35:5f:60:1e:1b:1a:3c:07:55:73:8f:e4:c0:
0c:8c:c5:7b:fc:01:ba:fa:f3:6c:48:cf:bf:82:d5:6f:24:8d:
b3:f9:ae:95:dc:6f:fe:c1:5c:00:2f:47:97:fd:ce:16:4a:17:
12:ad:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:18:44 2025 by rpki-client