Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: S82T3q7pNgVLIVopT31DQPli8CBNDOhDP4/WavObWGw=
Subject key identifier: 46:95:A0:1F:EE:CE:FA:D1:10:A0:C1:C0:89:83:47:3F:AE:1F:BD:BF
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 01975D93A7ACE950155816DE38FB42BA71D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 06:00:47 +0000
Manifest this update: Wed 11 Jun 2025 06:00:47 +0000
Manifest next update: Thu 12 Jun 2025 06:00:47 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 84oeKaZm8OQUZ21NfzyGbHicYWETfnQdF6a3wfysAto=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:a7:ac:e9:50:15:58:16:de:38:fb:42:ba:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jun 11 06:00:47 2025 GMT
Not After : Jun 12 06:00:47 2025 GMT
Subject: CN=4695a01feecefad110a0c1c08983473fae1fbdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b7:27:15:40:b0:e8:e1:3f:e0:79:49:48:26:
65:5d:3c:95:dc:5f:5f:df:fd:51:c9:91:fa:ce:41:
92:62:73:27:7e:40:96:a7:fd:b9:ff:00:8d:12:fd:
6b:13:99:2d:df:13:3a:b6:14:98:98:72:72:dd:97:
79:ce:c5:8d:28:32:03:15:7f:c7:49:36:d4:c5:02:
e3:8d:a5:30:50:45:16:fd:c1:42:e8:9a:82:82:02:
e4:46:49:a4:c7:c8:af:68:c0:dc:3d:a2:4e:24:55:
6b:0f:9e:73:a6:2b:a4:6f:e8:6c:fb:44:38:d6:de:
c5:7e:8c:ce:b0:b2:12:5b:ea:29:65:9d:40:95:c7:
70:c8:d0:03:d2:3c:e9:9d:14:ab:ba:fa:76:b3:ca:
d0:66:17:8b:aa:32:fd:67:f0:2e:ca:e5:25:7d:4d:
a6:0b:25:46:34:f7:c6:65:4a:81:98:78:55:94:75:
bc:29:fd:74:f5:5f:4a:67:96:fd:67:df:53:2b:5b:
23:7c:6a:83:62:b8:c3:b2:50:e8:bc:ae:ef:f4:2e:
7f:2d:ef:f0:3d:f7:6d:91:f1:75:ca:bc:48:73:aa:
c9:77:2a:1c:6f:49:a7:60:6c:92:d2:e1:6e:da:d0:
8d:0e:54:e1:5b:97:d8:6c:e8:5f:dc:c9:e4:0f:c4:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:A0:1F:EE:CE:FA:D1:10:A0:C1:C0:89:83:47:3F:AE:1F:BD:BF
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9f:33:d1:99:76:c5:bc:3d:1f:ac:25:10:1a:7b:a0:47:7e:
99:bd:21:0b:ef:f3:bc:b1:27:a3:ee:0d:6c:e9:7b:0b:03:6a:
19:37:56:db:7e:b5:35:a4:5e:8f:7b:53:f5:9a:c2:9f:63:1c:
15:70:e9:e2:e0:d6:8d:aa:51:f9:4c:55:c1:71:90:3c:8f:f9:
24:cc:5e:ed:13:5b:c8:c3:97:bd:14:99:a4:05:6d:95:7f:19:
42:08:38:af:6e:a2:3c:12:1b:20:9a:23:e7:57:00:d0:6b:dd:
ad:6e:6e:d3:02:c5:06:e4:52:e7:b1:77:1d:ab:69:3b:79:ec:
ee:c9:51:0e:f1:d8:5f:a5:d0:ce:8a:53:99:96:df:f4:92:03:
71:de:5e:74:f7:8d:3a:e1:d3:81:f1:6a:29:d3:5c:40:44:3a:
f5:d3:0b:db:94:31:bb:eb:86:1f:47:12:0e:6d:bc:95:43:32:
b0:be:41:ad:a1:c6:38:f1:32:10:14:3f:cb:e7:09:dc:a2:de:
aa:03:0a:bb:f7:2e:ba:9c:33:7c:f9:66:a7:14:a2:b0:7f:c9:
eb:f2:51:90:2f:cc:4d:d0:af:01:c0:b2:8b:19:78:f5:ad:6d:
77:78:3d:9c:97:07:ba:6e:4c:d5:69:55:42:a5:cb:4d:96:4b:
92:7c:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:52:44 2025 by rpki-client