Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: 81w8Zv8rodEcGoXPHl2NUUb8ARlmolvmN9lykf56BSA=
Subject key identifier: 68:BB:63:4D:15:73:98:EC:29:C2:7D:1B:87:DE:EA:5A:79:50:88:86
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 01976D065FA3CF81950D4913CD2E0F513AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 06:00:23 +0000
Manifest this update: Sat 14 Jun 2025 06:00:23 +0000
Manifest next update: Sun 15 Jun 2025 06:00:23 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 8UbnZPT4canmlBpQdVFHMBaXmjRwOocwEzG7/jEMa6c=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5f:a3:cf:81:95:0d:49:13:cd:2e:0f:51:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jun 14 06:00:23 2025 GMT
Not After : Jun 15 06:00:23 2025 GMT
Subject: CN=68bb634d157398ec29c27d1b87deea5a79508886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:c4:03:72:53:5d:51:9a:b5:f4:43:1a:5b:
b8:a2:3c:60:3e:d8:0f:2f:9a:2e:95:10:37:c6:6e:
9c:5d:8a:d4:aa:f1:4c:52:4c:43:00:52:57:79:bf:
23:bd:78:db:f9:d9:57:15:bd:7f:02:0c:76:80:b1:
66:c6:fd:08:ab:3c:7d:8c:c0:cb:99:d7:05:8d:fd:
14:6b:d3:7f:67:ba:e6:82:6f:24:ab:b1:64:ec:d8:
54:75:f7:68:82:77:b6:04:e1:e4:1f:f1:e3:4f:4c:
6a:06:3c:6d:ff:14:7b:04:39:72:bd:f8:3b:3d:f1:
b2:10:c5:b6:81:f1:c3:81:bc:79:9a:5b:41:f3:37:
16:a3:6c:6e:fc:19:59:49:71:46:6c:ad:09:f2:e4:
a6:24:4a:dc:59:3d:00:ac:81:6a:d5:c4:23:17:ac:
d6:0f:f4:25:df:44:b1:b4:1f:29:93:de:1e:27:4b:
ff:4a:e5:26:61:3e:ec:d5:bf:15:ed:c7:91:b8:22:
ad:5c:9d:e4:a4:af:a8:27:43:11:17:3c:c8:cb:e8:
d2:6c:c9:8b:ec:f9:48:9d:f5:51:00:ec:ac:26:40:
10:d7:1b:5c:ab:56:94:21:b5:90:04:d8:17:e0:fc:
84:b2:c7:ef:68:5b:e5:05:a8:fc:db:51:67:6a:c1:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:63:4D:15:73:98:EC:29:C2:7D:1B:87:DE:EA:5A:79:50:88:86
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:5d:c4:a5:30:6c:ed:d4:a0:be:95:99:23:71:8d:e8:3d:
7c:91:21:16:8b:b3:7e:30:0f:07:21:5a:85:da:21:5c:c7:dd:
83:cb:a9:78:dd:ee:a9:7a:34:0d:5d:29:d1:a8:1a:9d:5d:72:
65:d2:97:58:93:b0:7b:7c:23:dd:45:08:11:10:76:6a:fe:06:
f1:bc:52:36:4f:22:8f:47:95:9b:cf:f8:a7:64:8c:4f:4a:29:
e9:be:8f:06:73:75:72:44:ac:af:54:eb:c8:09:92:47:91:3d:
28:43:42:eb:22:4c:a0:50:ce:58:12:6d:a8:d3:57:02:b0:ee:
77:0d:04:5f:94:2c:4f:1c:be:fb:55:68:03:26:1c:8f:b2:be:
75:40:c0:e6:38:c1:db:cd:6a:ea:8e:c9:1e:e6:16:72:90:7a:
8f:ba:87:83:78:60:f2:bb:15:5a:b5:63:d1:81:fb:04:9f:7e:
ec:33:9d:bf:67:32:58:97:76:5b:a2:17:d2:ac:31:e7:02:d7:
f6:0a:cb:af:03:4e:5d:28:da:a6:ab:e5:9c:fe:dc:5d:7f:c9:
73:79:00:db:87:59:5b:d7:72:0f:9e:ad:b2:c8:a3:39:a5:e2:
4c:5b:db:81:13:7a:09:f6:29:ff:c3:4e:b5:92:4c:f2:88:6a:
db:6a:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:07:47 2025 by rpki-client