Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: a/Ldcqa7RRbaz0Jtv5RuVnlReH2ImQssz/7udcOiBEs=
Subject key identifier: DD:A9:CE:28:DF:B1:49:D0:D6:04:AD:3E:2D:84:5F:AA:31:30:79:E1
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 0197665F8A3A6045A94D3D31DD34E58D72C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 04D4
Signing time: Thu 12 Jun 2025 23:00:26 +0000
Manifest this update: Thu 12 Jun 2025 23:00:26 +0000
Manifest next update: Fri 13 Jun 2025 23:00:26 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: alF60975MbG8PvLO7sZ4xF6mGaJRnvr9mWRuiTCnaQs=)
2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:8a:3a:60:45:a9:4d:3d:31:dd:34:e5:8d:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Jun 12 23:00:26 2025 GMT
Not After : Jun 13 23:00:26 2025 GMT
Subject: CN=dda9ce28dfb149d0d604ad3e2d845faa313079e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:64:d6:ad:25:4f:fe:4b:97:46:77:3c:7a:
80:18:1d:39:36:13:31:66:f8:68:f7:bb:91:9d:f4:
f8:22:a5:d3:8f:32:d8:0e:6c:de:aa:b2:82:b4:6e:
5e:26:72:4b:42:78:9f:7a:d2:6e:1d:cb:cb:4a:d7:
27:27:b1:73:39:ee:c2:e8:82:83:b7:87:53:31:fb:
10:4d:ef:30:12:cc:9f:f5:48:69:1f:1d:ea:a3:82:
fb:b0:70:ba:ac:b9:3a:a5:bb:51:f3:56:6d:8b:88:
98:a7:77:7d:d7:ef:8a:9b:7c:d5:7b:0c:d0:31:a4:
a9:d5:0b:21:ac:dc:30:0d:c6:24:ba:97:af:a7:b2:
29:e7:99:a2:0e:65:c0:05:ce:b5:bb:7d:5b:5c:c2:
b5:01:ed:24:18:a3:f9:2a:33:42:07:66:33:ee:0d:
d4:7b:f0:4d:55:f9:99:20:06:8f:e3:08:b5:da:83:
29:a1:ff:c9:93:84:b7:9b:22:a1:29:6b:e6:62:f6:
0a:a7:3c:5e:fd:95:d0:31:e1:88:45:5f:da:0f:02:
2c:45:3d:72:e3:db:a3:43:8f:d7:a1:ef:c7:eb:e8:
fc:fd:94:27:24:b4:2b:46:5c:7e:8c:9c:1a:b9:41:
13:cc:06:5d:57:c5:87:6a:12:55:74:3f:04:d0:17:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:CE:28:DF:B1:49:D0:D6:04:AD:3E:2D:84:5F:AA:31:30:79:E1
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:06:fc:e5:71:be:7c:b7:1f:ea:5e:1a:84:db:dc:4d:c0:ff:
9b:85:32:57:07:c0:75:b5:c4:a1:fe:1c:a8:49:1a:59:36:ba:
e8:72:d5:29:4e:a9:08:17:86:50:69:8f:fe:87:7a:b2:ee:30:
09:4c:dd:0f:a4:3b:b5:80:09:d0:a1:1a:41:28:0c:7e:88:62:
32:64:82:98:78:89:a5:f0:61:8b:82:f7:e8:63:5c:d2:b9:01:
a6:11:f8:eb:0c:2c:cd:77:82:7f:09:d3:4c:d8:f5:d1:eb:7c:
9d:d0:b7:c7:8f:25:71:c7:dc:6b:bd:46:99:12:68:3a:f1:ff:
f7:95:71:df:65:78:de:c7:90:29:76:ba:dd:9c:6a:fb:06:bc:
1f:51:44:be:36:5a:3c:bd:33:9f:1d:4f:dc:9f:83:50:d1:dc:
99:3f:53:49:fd:a0:0b:23:40:2c:21:87:04:34:65:b7:c4:17:
9d:65:ed:5b:e2:93:4c:36:de:0b:e6:c1:b7:4d:43:49:ff:45:
84:ea:d6:0e:e8:29:9b:89:2c:48:16:0c:c0:01:81:9b:61:9a:
2d:53:08:f5:44:13:99:ea:88:4d:a0:98:98:dd:1f:cd:a7:6f:
94:b5:fa:c3:e3:6d:b3:f5:65:16:cf:77:b0:86:c1:22:e9:ec:
f0:40:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:55:39 2025 by rpki-client