Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: CXS9zydYlJ9IDW2w0LcMuVzxLVxQa6uDJvh7nW+x2Yk=
Subject key identifier: C3:FF:5B:FC:78:64:24:AA:03:D5:F0:85:76:72:69:94:06:56:94:F0
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 0197549118E2B7D9DF0776BA50A4FAFB45E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 12:01:24 +0000
Manifest this update: Mon 09 Jun 2025 12:01:24 +0000
Manifest next update: Tue 10 Jun 2025 12:01:24 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: kPNrlQdmxoa8ByKNIc4d6Xd2P1zocHvdDs89cOzgbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:91:18:e2:b7:d9:df:07:76:ba:50:a4:fa:fb:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Jun 9 12:01:24 2025 GMT
Not After : Jun 10 12:01:24 2025 GMT
Subject: CN=c3ff5bfc786424aa03d5f08576726994065694f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:8a:b7:d7:ae:6d:03:9f:2a:ac:5e:65:57:
f7:d8:38:8b:4f:0b:51:7c:2e:c8:01:76:c5:7d:4d:
ce:b6:db:a3:5b:92:ce:c2:3c:f9:c0:ff:79:b6:dc:
ee:18:cd:4d:91:0d:0f:f9:3a:52:6d:3b:76:e6:eb:
77:35:b8:97:a5:fe:03:98:71:b1:4f:eb:39:91:68:
b3:0c:35:ef:86:fe:eb:42:99:dc:e5:2c:60:14:70:
1e:f4:38:09:3c:a8:08:ca:69:65:56:19:a2:3e:32:
c6:ab:f2:f7:fb:07:fb:7a:3f:cd:93:6f:c6:4d:8b:
75:96:81:e8:06:3d:7b:ca:8b:9f:2b:9b:76:94:b2:
02:90:7d:76:31:43:01:4f:9d:c8:e1:41:14:aa:62:
64:cf:35:40:cf:3e:a4:30:a5:32:10:23:0c:33:8a:
32:5c:3e:c5:44:e4:05:40:31:a8:d4:8b:c4:b2:22:
c0:45:7e:be:c0:aa:00:da:b0:2b:86:ad:e8:39:71:
00:d8:dd:0a:c5:a8:9f:53:78:b8:74:f9:c7:e1:08:
84:a9:f6:1a:c6:00:3b:d3:00:0c:6a:ca:06:1f:ad:
3b:20:da:3c:18:52:11:51:21:65:a1:e7:3d:de:d3:
bb:58:5f:de:02:e7:13:a6:d8:8b:2f:21:08:63:8c:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:5B:FC:78:64:24:AA:03:D5:F0:85:76:72:69:94:06:56:94:F0
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ae:59:69:e7:c5:70:75:97:8b:81:82:c8:c2:96:4e:44:ab:
57:ac:11:bf:12:87:58:2e:e8:2d:ee:22:ad:ce:b2:d1:9c:18:
59:70:de:24:84:fd:a2:a2:b8:a5:42:ec:78:b8:c6:06:3e:d5:
6e:4f:7c:e1:78:75:29:04:87:3e:58:e4:7a:6d:32:7e:40:3d:
ca:61:61:d7:8a:64:b5:7a:4c:63:db:5e:db:e8:7b:09:73:a2:
5e:2e:0e:0d:d9:d2:84:c5:2f:47:ae:2e:51:4d:05:7a:e0:a4:
72:02:87:23:a6:5f:5a:69:6e:84:80:5e:dd:73:6a:8f:2b:ef:
d7:b4:d4:46:1a:d2:61:b0:35:bd:db:54:6a:1d:db:d3:80:8c:
5f:87:53:69:2d:46:0b:c3:8c:9f:d7:b9:cd:42:1b:05:d0:a5:
7f:79:15:4d:a5:22:89:98:84:2e:a7:ab:3a:de:54:46:70:d7:
29:4f:e8:b4:56:29:f8:e2:05:c7:6c:37:34:9e:60:fb:0f:f6:
96:09:98:5a:cd:54:2a:f1:63:b1:d7:2d:fe:96:79:b5:06:e7:
cb:60:6b:c6:8d:e1:f3:80:d0:5c:43:91:02:8b:93:d9:3f:52:
45:4b:e1:98:8d:b5:2f:c8:36:45:46:81:eb:2e:5f:6a:7c:86:
a6:bc:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:15:22 2025 by rpki-client