Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier: 02jwyR7cJ43e7LDJIK/Vk2iV0jqOWv4sp5qq3wm+3iA=
Subject key identifier: C7:C0:1E:51:59:A9:50:57:DE:95:88:C1:F0:07:78:42:45:81:56:B7
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 01974779C2E43B421131BD6A29B01F0134D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number: 09CD
Signing time: Fri 06 Jun 2025 23:00:51 +0000
Manifest this update: Fri 06 Jun 2025 23:00:51 +0000
Manifest next update: Sat 07 Jun 2025 23:00:51 +0000
Files and hashes: 1: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: 3gxAP5jaaKbJ25X/3bDRwX/wQ6Gpl8z5HzYnEZxc9/Q=)
2: ah-NG29pky0jPHEcgeOL-kOfH0Q.roa (hash: zKBnGYN4489QuBEbUaXwtDobGG4YVTXSMpaIv+wNvKw=)
3: zFFyOssEtNl2ZptlNvn-iw3yuoM.roa (hash: wU/a9ptBrD+06JSBz0EUZiC1M21vno+RkNOOYDTpTyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c2:e4:3b:42:11:31:bd:6a:29:b0:1f:01:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Jun 6 23:00:51 2025 GMT
Not After : Jun 7 23:00:51 2025 GMT
Subject: CN=c7c01e5159a95057de9588c1f0077842458156b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:52:38:8b:cc:07:28:93:95:22:5e:20:d1:
16:fb:8a:ef:e8:c9:a7:21:d5:81:46:05:01:f9:a0:
ef:c4:ac:2d:63:72:8a:d4:6c:02:64:20:19:2d:d8:
e5:d6:7f:42:24:99:3f:49:14:4c:07:5d:0c:ba:0e:
cb:02:3f:4f:58:e6:9c:d5:a6:8b:33:a3:b6:81:67:
ce:d8:95:7f:43:25:07:b4:93:b4:c5:b4:eb:2e:a8:
8c:31:a7:81:54:d0:4d:32:bd:84:4a:21:14:96:c8:
67:c6:b4:64:02:f1:1b:8a:28:ff:96:5c:9f:0e:75:
59:49:9b:38:58:ba:bc:cb:63:ea:90:24:0c:df:65:
7c:1c:a8:2a:54:1f:ac:e1:0e:39:08:aa:b3:c1:e7:
2f:7b:6d:85:49:7a:c4:36:51:8a:72:6a:a6:fe:89:
43:a7:5f:14:43:94:84:f6:de:27:07:46:0a:16:29:
01:bb:fb:9d:de:ad:ad:25:e1:64:08:56:77:ef:1d:
d1:84:20:a6:90:91:16:86:fd:52:bf:e8:0f:4d:a6:
6c:a2:3d:27:6f:4a:61:79:a7:22:58:46:d7:aa:79:
69:67:12:d1:e8:b2:9f:10:e1:46:d0:21:d1:f1:2b:
68:2a:db:67:1f:ad:d0:ab:64:02:87:25:af:0b:d1:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:1E:51:59:A9:50:57:DE:95:88:C1:F0:07:78:42:45:81:56:B7
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:14:83:28:27:3b:dc:cf:74:7d:95:ee:a9:fb:cf:88:f4:
64:f6:78:0c:e4:b9:a9:78:b0:33:15:93:ee:9a:f8:df:39:c7:
2d:36:a5:f0:48:09:34:66:91:1a:d9:9f:10:db:15:87:60:7a:
69:cf:2a:13:f8:3e:47:94:3e:b6:d7:15:31:2c:31:fe:56:34:
7a:f4:2c:9b:3d:0a:22:5d:39:06:81:72:01:ab:8b:2c:da:72:
b9:87:c8:39:93:e8:a4:a4:65:d3:c1:7f:5a:f9:dc:7a:05:1b:
26:54:c4:67:86:4b:38:da:19:08:5f:2e:27:c8:a1:30:db:4f:
8a:75:42:83:a2:31:a6:ee:c9:27:72:e9:cf:a6:10:7f:3a:3a:
fa:8e:4e:26:9c:a0:50:e8:53:92:ec:34:b1:89:ed:1f:01:29:
c3:3e:ac:01:6b:cc:d4:16:0b:43:1f:b4:69:c8:d2:21:00:49:
78:0a:82:b1:fe:a5:55:5f:ff:06:93:4d:7c:8a:5f:8e:bd:54:
ce:4e:b4:d5:7f:ca:79:bb:32:d8:70:9f:89:83:06:d4:44:41:
ae:4b:60:eb:07:e1:e7:6d:be:b1:be:53:d3:00:62:f7:2a:fb:
7d:57:a7:7e:01:99:7d:a1:1c:71:22:9f:7c:56:56:58:ce:0b:
13:16:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:52:36 2025 by rpki-client