Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: I38AoORfyn66ElYdADYOdwGrXD6wZzngW6/n8Q5Dggs=
Subject key identifier: 42:F3:80:AB:BD:2C:13:97:61:BB:1D:C9:2B:09:5B:83:4A:D7:EF:D7
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01974C9FD9DB158BCB50B8606A2C241A85AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 04CF
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: xfdnrXFAcuS3qPJ5q6MLJbXB7eHwOFud/P1Etm0x0QM=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d9:db:15:8b:cb:50:b8:60:6a:2c:24:1a:85:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=42f380abbd2c139761bb1dc92b095b834ad7efd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:c0:0b:02:b2:d7:76:5b:4d:09:74:e8:ba:
08:0a:01:e7:a0:51:3f:00:7e:e2:a5:1d:7f:7f:82:
d4:63:d8:24:2b:83:70:a7:48:75:c1:f1:97:88:1f:
65:3f:a0:57:d1:89:a4:fe:6c:d3:2b:68:db:83:bb:
ab:27:1a:72:d3:4b:76:33:4f:61:e2:52:c4:45:4e:
fc:25:79:23:db:13:15:cd:af:b3:0c:0e:5d:5d:d2:
26:b5:72:cd:29:87:27:7c:86:d2:42:ee:40:56:f8:
ae:2a:08:17:76:eb:80:ef:13:94:90:b2:2a:ac:5f:
c5:b2:40:08:23:5e:59:47:7a:9b:c7:9a:37:23:6d:
32:0d:94:15:8a:f6:03:e3:42:f8:b9:d3:d6:01:86:
be:1f:55:ba:c5:d1:eb:ef:64:07:07:6f:18:05:e1:
80:0e:68:3d:6e:6f:42:8b:9c:3a:91:8d:29:13:40:
6c:1c:37:0e:d1:26:62:bf:00:70:70:a0:f2:b0:4e:
f3:12:67:55:72:f5:f8:12:4e:bb:88:e1:06:b8:ea:
84:23:ab:ea:77:82:67:7d:ac:b1:5a:7e:79:5c:e9:
7c:fc:3f:52:59:04:73:c4:20:3c:af:36:7f:7c:12:
18:5a:2f:6a:6d:cf:0c:8c:94:82:53:73:62:5b:da:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:80:AB:BD:2C:13:97:61:BB:1D:C9:2B:09:5B:83:4A:D7:EF:D7
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:61:10:0e:fc:2b:45:a0:9d:aa:72:4a:d7:c2:e9:7e:bf:
5d:d3:92:69:ad:73:55:0c:c1:e8:24:08:35:4e:18:70:00:28:
4e:da:2e:01:b9:3b:2b:3d:8d:f3:0b:58:fd:8b:4e:93:1e:6c:
0c:90:b9:6a:4c:d3:e2:82:d0:7f:4b:00:1b:3d:57:e2:5a:30:
33:48:b0:84:7f:95:35:83:ac:47:f1:bc:20:3d:ea:f1:eb:5e:
79:26:aa:6e:e7:fb:ff:e8:bd:36:08:c0:bf:43:54:92:a3:4f:
db:a0:6b:ee:62:50:02:78:ce:2d:6f:ac:69:48:08:d4:a7:a1:
d5:b4:05:76:4f:51:6f:d3:1a:55:84:f0:09:03:64:92:a3:d9:
4c:bb:f2:e7:68:84:29:fc:05:f1:28:41:60:a1:10:9f:58:aa:
35:0d:2b:98:68:57:8c:b9:a0:02:28:fd:3f:10:94:71:4c:8d:
d2:d8:8d:d6:a1:f3:14:dd:a6:1f:ac:cf:dd:df:ea:ba:3c:01:
31:6d:b6:db:7c:21:3f:5e:f2:ab:56:89:4f:a1:32:43:d3:32:
3a:ec:e7:5f:69:10:d7:81:e5:37:11:c6:b0:70:45:36:05:56:
d9:1d:07:34:5e:64:44:1b:4f:68:7f:57:7e:6e:50:a2:ee:ba:
d5:8e:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:36 2025 by rpki-client