Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: RC8mRFF7WRWxNbVkL0DCtiml+klvcUO789iV1dsDwTY=
Subject key identifier: DA:CF:38:C4:8A:12:9D:11:FE:16:76:21:D7:B9:55:B8:11:29:91:F7
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0197635EBA21DDBC5C30EB730F2C7EB1A6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 09:00:41 +0000
Manifest this update: Thu 12 Jun 2025 09:00:41 +0000
Manifest next update: Fri 13 Jun 2025 09:00:41 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: CX4xwiGlxawupj71UE2VcJds6B9WGYCkvfZOS718jSM=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:ba:21:dd:bc:5c:30:eb:73:0f:2c:7e:b1:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jun 12 09:00:41 2025 GMT
Not After : Jun 13 09:00:41 2025 GMT
Subject: CN=dacf38c48a129d11fe167621d7b955b8112991f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:38:7c:fb:89:81:48:8d:81:91:77:bd:59:
c8:81:ab:44:58:11:7d:43:5d:7e:5a:a7:7d:9d:35:
00:06:7f:6c:ae:45:8d:20:64:69:4c:ca:95:51:8b:
cc:d5:90:32:1d:25:a5:f7:79:3f:f5:d7:3b:bb:f6:
c9:5f:b5:93:27:9c:16:a0:b6:b7:c0:f0:0d:7c:fe:
a3:b3:4d:54:04:e5:49:2f:76:3f:57:e6:be:8c:f8:
6d:67:a7:8d:f0:43:cd:d7:d1:18:f2:2d:7b:61:e3:
a6:08:ca:25:95:3f:88:1f:e1:11:3d:da:63:17:40:
01:15:fd:08:38:69:82:40:46:fd:54:90:1b:f5:b1:
53:2b:17:81:17:0b:a4:59:b5:18:5b:e7:f8:f0:2c:
8b:9d:2b:3f:59:4c:d6:cc:2e:66:96:3d:57:db:7f:
03:92:1c:11:e0:4a:11:13:64:5e:64:0c:9c:c2:ff:
fe:80:e1:30:63:cc:c3:ea:e4:ce:ec:d3:8c:f4:09:
a1:5f:aa:de:2c:dc:0c:48:72:4e:bc:72:fc:87:eb:
ef:a9:29:f6:f8:97:8c:98:f8:c5:62:fd:12:a9:51:
32:bd:c2:a7:7c:a9:dd:64:e5:1b:5b:ee:a2:67:50:
ff:df:fe:09:f1:8f:6d:61:58:ad:b6:70:11:82:4e:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:38:C4:8A:12:9D:11:FE:16:76:21:D7:B9:55:B8:11:29:91:F7
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:a7:b5:65:31:af:d5:a4:c8:ee:9c:3d:02:7b:49:52:44:
85:28:b3:72:9f:44:49:64:0a:0c:95:18:97:67:92:85:79:b1:
0f:35:8f:ee:12:7e:6e:40:4d:13:76:a0:62:21:90:e5:00:e4:
d0:77:39:2a:a8:a6:63:af:c4:e4:f8:f5:9f:c5:4e:7d:41:5b:
af:97:f1:9f:c2:f8:b1:f6:14:64:9c:46:1a:7c:e8:57:59:93:
98:08:2d:e4:a6:9b:82:d0:93:3c:d9:c0:1e:e5:76:0f:9f:c1:
52:61:31:44:b6:1a:84:b4:f3:24:83:52:2f:3c:2c:0f:2a:5b:
40:5c:30:40:7a:e6:71:a5:37:38:20:2e:d3:89:df:62:06:5e:
1c:8b:e7:0e:41:c7:68:87:80:dd:2c:cc:d1:1a:eb:0b:ca:57:
a2:ee:1a:e4:71:bf:60:1e:1f:c2:92:c0:ed:a0:d8:25:a1:43:
a8:81:6b:75:d9:f5:e7:37:72:2a:bc:75:1c:f9:a4:8f:3e:e9:
60:9e:a4:d2:bb:e9:78:98:fc:cd:24:a2:92:e8:ff:a0:09:64:
68:59:9d:97:ed:b5:be:ec:f5:05:cf:89:2a:85:32:79:9b:4b:
e1:b7:20:0e:9a:1e:d2:70:4b:c6:bf:55:ee:a1:42:bb:06:99:
0c:67:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:45:34 2025 by rpki-client