Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: KwW1owmlAasHn4/tdYFVXbAkhJslginRhGbu0zruWIg=
Subject key identifier: A1:5D:08:84:9E:61:58:04:84:16:D0:06:2B:AA:2D:F8:D1:21:43:13
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019749684928E0DF621EB377CC7E89F338E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1592
Signing time: Sat 07 Jun 2025 08:01:00 +0000
Manifest this update: Sat 07 Jun 2025 08:01:00 +0000
Manifest next update: Sun 08 Jun 2025 08:01:00 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: O3mWtrIxvPCkqr1Xtd67YTLPDOZjUHel6h6Hh8HxD6g=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:49:28:e0:df:62:1e:b3:77:cc:7e:89:f3:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jun 7 08:01:00 2025 GMT
Not After : Jun 8 08:01:00 2025 GMT
Subject: CN=a15d08849e6158048416d0062baa2df8d1214313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:92:70:b3:62:fa:65:89:1f:3b:12:49:0c:
c8:36:ac:26:03:f8:3b:3e:3b:a5:dd:18:b7:e4:7c:
67:fa:1f:61:f0:65:39:b7:6c:65:b7:db:4e:80:a5:
48:da:76:db:5c:e2:1a:22:af:90:fa:a0:42:43:83:
1f:73:91:d4:7c:11:13:cf:65:26:7a:0a:67:00:9a:
5e:22:f9:46:dd:9b:93:5e:dd:63:fc:d7:b2:d5:53:
34:d8:c1:c3:54:3d:cc:68:c7:be:16:fc:74:78:a0:
bb:72:24:50:e8:49:d0:e7:12:d4:b0:3a:7a:49:1a:
79:14:a7:ef:5b:c5:97:b0:f8:7a:af:c3:d4:0c:1c:
df:75:06:6f:2b:1b:cc:f4:bf:e6:26:45:46:57:91:
16:cf:86:1f:ca:da:33:dc:5e:ab:05:e5:9d:e8:d6:
5f:21:86:3d:80:e9:18:ff:c2:7a:29:2e:64:88:4e:
f1:fc:06:39:2e:06:53:42:1b:c6:0b:de:5c:1f:18:
ca:17:b3:60:04:51:07:ac:57:c4:36:fb:be:9c:9f:
6e:c6:8a:33:b7:48:e8:21:c7:90:b7:df:b0:92:25:
23:f9:e0:5b:e0:49:e1:a2:57:36:79:ec:c4:55:e2:
8b:ed:0b:d1:bf:8f:20:2f:f7:f8:55:8e:eb:19:5b:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:08:84:9E:61:58:04:84:16:D0:06:2B:AA:2D:F8:D1:21:43:13
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:08:0f:77:4d:00:96:99:fc:af:2c:48:04:0a:5e:f5:48:
0d:f6:02:51:57:54:8d:26:e2:b7:4e:1c:e5:1f:57:71:23:43:
bc:4a:bc:ee:b1:05:fa:59:b8:96:33:2c:7a:fa:70:6c:7a:ee:
14:05:6f:3a:1e:4f:b0:61:59:c9:75:a2:a7:a2:35:d5:77:f8:
f9:5f:da:fd:16:c5:c0:27:e5:ff:15:a9:28:d4:a3:4a:c3:a3:
73:4e:f6:38:39:61:f2:53:af:22:41:b8:a2:30:c8:f4:de:dd:
d6:f0:be:25:0b:01:eb:98:ab:36:74:80:28:ff:1c:ad:83:e3:
96:db:08:d7:ed:2f:75:5c:4b:29:a3:05:f4:28:a1:73:a4:00:
34:9c:72:73:b2:61:3c:ab:19:38:86:de:3e:3a:88:f8:ca:62:
7f:1f:22:ec:5c:2c:96:bd:d8:25:f4:37:0c:c5:b1:74:ed:c2:
51:fd:f5:81:50:97:31:32:23:fb:ba:a3:a7:7e:11:2c:14:a0:
48:54:da:64:58:62:7f:72:0b:3f:61:22:8b:fa:c5:79:5d:88:
63:6a:00:69:7b:8f:79:d7:89:6b:47:bb:83:eb:1b:b7:7e:fe:
fe:22:34:62:0b:50:33:7b:b6:ca:25:43:33:2d:9f:c9:e6:ce:
00:5d:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:26 2025 by rpki-client