Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: WEMPjmp/kZJgS+fXx2mzz/ir1jDOnthnm20aflS71JY=
Subject key identifier: 78:CD:2F:D8:68:46:90:D1:B7:47:8B:B8:6B:70:FB:F8:D0:93:7C:B7
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 01974A0C79AC9BF31DCC31A34887B2780E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 1483
Signing time: Sat 07 Jun 2025 11:00:20 +0000
Manifest this update: Sat 07 Jun 2025 11:00:20 +0000
Manifest next update: Sun 08 Jun 2025 11:00:20 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: Dg+wuMk+ogrDh+0ho+JwmcpUCR3rBUBU0eC7qC5K2Jk=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:79:ac:9b:f3:1d:cc:31:a3:48:87:b2:78:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Jun 7 11:00:20 2025 GMT
Not After : Jun 8 11:00:20 2025 GMT
Subject: CN=78cd2fd8684690d1b7478bb86b70fbf8d0937cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:2c:f8:05:af:58:59:48:b4:c3:17:53:bf:
40:ac:b4:3f:1c:3c:43:06:22:1d:a3:e4:74:83:9b:
0d:b9:d6:bc:22:6f:51:37:6a:ba:4d:4c:9d:bc:68:
3f:a2:db:a7:5e:63:14:31:d1:50:f5:9b:bc:a3:52:
eb:12:70:7b:59:52:ea:e9:1c:25:ad:f6:bc:41:50:
de:79:b3:43:6a:02:91:3a:76:03:3a:ff:5e:31:09:
56:5e:03:3f:ed:47:b7:8d:24:c2:8c:35:cd:d2:73:
22:3f:6c:aa:f0:c6:bf:36:75:57:fb:fc:06:11:ef:
60:99:59:70:68:46:c8:f8:ef:ac:78:8b:fe:bf:1b:
f4:51:86:8a:e7:68:02:09:11:9f:ff:74:5f:da:90:
fe:36:68:a5:8c:8c:d1:0a:88:e9:d8:fa:a6:62:49:
87:ef:53:48:db:2d:2d:36:99:98:91:46:d1:a8:d3:
74:c9:45:83:88:be:37:3f:24:28:32:f8:b8:0a:35:
4a:60:f5:ed:52:f8:a4:1b:2d:09:00:03:7f:98:25:
f7:4b:5a:02:4e:07:3b:e0:34:8e:43:e4:04:0d:93:
d3:6d:e4:c4:0f:76:9d:9c:31:6d:db:20:5a:cd:b9:
0b:25:0b:01:e7:9e:c3:57:15:56:60:36:26:9b:04:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:2F:D8:68:46:90:D1:B7:47:8B:B8:6B:70:FB:F8:D0:93:7C:B7
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:98:3a:bf:c9:37:e2:bb:8b:0b:95:63:85:7c:c0:58:88:
4f:cf:2e:a4:d9:01:94:1b:ca:92:2b:f7:03:9f:c5:af:70:cb:
48:3a:39:3c:f2:34:b4:fc:27:1d:2d:22:48:67:41:e8:df:5b:
bc:d3:66:a5:97:ab:c8:7a:8c:8d:ea:ec:a5:55:ec:be:88:68:
ae:46:c9:75:5d:d9:c6:25:44:f7:66:95:cc:21:79:d8:97:1e:
8e:60:91:40:5a:a6:4e:17:30:1b:44:41:fb:0b:97:bb:a9:0d:
1f:68:c9:b2:57:bd:43:6e:79:9d:de:a8:23:01:dd:89:13:68:
d7:d5:fc:01:05:93:b4:df:ea:a8:3d:9e:1b:42:91:19:64:1a:
fb:da:d7:9c:22:ce:80:e9:94:13:2a:8b:a6:ed:58:d2:43:c4:
6c:c5:27:d6:db:bf:b3:46:94:0f:93:64:fb:4c:32:3e:cb:28:
20:f9:38:51:f6:81:29:e9:11:59:d1:8f:9d:44:79:8b:29:bd:
45:05:fb:55:47:bb:b6:c9:e3:a3:58:08:66:22:b9:b4:4d:6e:
75:2a:f9:62:bf:b1:24:af:3a:4f:9b:9b:cd:e2:fb:21:fd:b1:
88:13:3c:8a:7d:70:a0:e6:3c:bf:c6:49:54:18:f2:3f:23:d2:
e1:c3:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:22:42 2025 by rpki-client