Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: ozcUg2camQ3+H8IryLySHp7zlwaE1HmFhL/Ink5rfzE=
Subject key identifier: 35:C8:3B:C1:0F:60:F0:66:5B:24:C4:7E:A4:05:9B:13:82:41:B1:E6
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 01975CB802D6E1695DEC7297FF3777A7B5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 04CF
Signing time: Wed 11 Jun 2025 02:00:52 +0000
Manifest this update: Wed 11 Jun 2025 02:00:52 +0000
Manifest next update: Thu 12 Jun 2025 02:00:52 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: sroLJPgcHeWbDd8PYMG2i/mfnKxuGqcLxK6SU4kjrT0=)
2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:02:d6:e1:69:5d:ec:72:97:ff:37:77:a7:b5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Jun 11 02:00:52 2025 GMT
Not After : Jun 12 02:00:52 2025 GMT
Subject: CN=35c83bc10f60f0665b24c47ea4059b138241b1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:ae:ba:d1:b5:48:2f:11:b8:0a:df:8a:d3:
8c:2b:30:e8:48:fc:18:61:99:22:2a:2f:70:c1:fe:
bb:d4:d0:14:09:2d:67:11:b3:a1:f6:39:f8:22:98:
71:30:7e:23:54:e5:50:25:47:3b:b2:b2:e8:a5:d3:
c1:16:e9:62:39:ef:a1:fd:d8:30:3c:c2:93:ca:77:
4e:dd:dd:d6:d9:e7:17:f5:e6:a3:22:c9:87:9e:6f:
60:ec:f4:10:c5:c7:75:40:19:57:09:c2:43:94:7a:
4a:0c:e8:4e:a6:5d:80:0b:e8:da:ea:5d:97:6b:68:
13:d7:e2:df:a7:19:b4:cc:d2:e8:a7:50:3a:13:41:
b9:57:50:d2:cd:bc:70:25:d9:8b:87:4d:c4:21:2f:
04:96:7f:4d:94:37:9a:28:d7:de:47:5b:42:92:82:
87:73:fa:0b:14:be:1d:06:2c:5b:94:dd:7c:ad:11:
72:2d:0e:98:83:91:83:95:1d:9f:24:cb:e2:b7:41:
a0:e1:da:59:b8:e0:23:21:de:8e:14:a0:47:ad:0e:
71:6a:01:19:a3:a8:1c:1c:a7:25:e2:37:98:14:ae:
44:66:c9:16:60:29:37:7f:f7:a4:6e:ef:6c:29:ef:
65:c8:5c:06:d2:1d:7a:37:8b:55:a3:ba:36:96:c5:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:3B:C1:0F:60:F0:66:5B:24:C4:7E:A4:05:9B:13:82:41:B1:E6
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:1f:85:ef:f6:b6:09:45:66:bb:14:c9:ed:99:41:71:d8:
13:43:01:92:48:79:d0:81:bc:cf:d8:01:1a:6e:af:99:b9:ed:
d5:bc:4e:2f:0e:86:30:0e:a2:9b:d3:fa:51:cd:ad:91:e2:68:
05:2f:43:2c:4d:a8:6c:2d:d7:de:f7:38:32:c5:27:69:1c:1a:
76:c7:d9:8c:be:16:bf:f7:b6:65:ac:14:61:50:0f:82:a0:bc:
fc:96:42:8e:f7:c1:e8:3d:33:39:8f:0e:06:9a:bf:8c:d6:e5:
cd:3d:9a:04:f5:9b:79:42:8b:50:86:72:ee:87:d7:e7:d9:a0:
4e:d0:8f:ab:e8:19:a9:42:d8:4f:e3:10:42:05:f4:2d:a8:49:
69:db:97:26:f3:7f:8a:c3:45:59:4b:4f:4d:b2:f8:7a:91:88:
9f:d5:cb:65:ea:9b:73:08:8a:eb:93:d8:30:50:9a:47:4c:b3:
a1:6e:82:d4:40:76:78:fe:c9:d1:31:cc:23:e6:8e:06:ac:60:
48:6b:c1:28:48:13:19:95:79:aa:46:96:ba:a1:db:33:b7:6f:
5f:1e:81:9e:4f:14:4f:65:8e:2e:29:43:45:57:e3:b6:a0:53:
69:bf:aa:b0:0b:29:ea:96:2d:58:1d:fd:21:1d:11:e6:49:e7:
4b:33:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:23:36 2025 by rpki-client