Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: 5I+ddnVfTnFXPpCu7LZemtNYgBfICpSzuwOT2lmp4Os=
Subject key identifier: 2D:78:9D:A9:F5:B6:DC:A1:33:23:78:2E:4D:2B:7B:E6:46:92:60:95
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 0197507CD84FC8420116FBC11A3A1F6EE82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 06FA
Signing time: Sun 08 Jun 2025 17:00:48 +0000
Manifest this update: Sun 08 Jun 2025 17:00:48 +0000
Manifest next update: Mon 09 Jun 2025 17:00:48 +0000
Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=)
2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: 6IxfTs4SmEISB4dPGAkBEyUwlsk7XtqVF2FOoP4PaOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:d8:4f:c8:42:01:16:fb:c1:1a:3a:1f:6e:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Jun 8 17:00:48 2025 GMT
Not After : Jun 9 17:00:48 2025 GMT
Subject: CN=2d789da9f5b6dca13323782e4d2b7be646926095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:b3:67:14:9f:ff:e2:f9:ae:2f:06:23:f1:
4a:87:6e:09:3d:07:e4:ac:ab:9e:78:cc:a9:03:74:
46:08:dc:86:d7:02:8d:32:0c:6d:e6:0c:0e:76:4e:
ce:94:ff:2e:d8:6e:4b:48:2c:01:80:3c:fa:8e:7a:
7f:ca:1c:7e:6f:9c:4e:2b:b4:04:0c:63:c2:5a:9d:
7c:9a:b3:03:82:4d:24:34:1f:20:da:3d:57:8a:47:
80:6e:c8:1f:d4:ae:cd:f7:20:4b:7a:a0:c7:de:83:
f8:00:04:34:02:b3:b7:e0:8e:a1:7a:d3:d1:4a:03:
fa:2b:76:18:db:a5:b9:f8:43:30:3f:5c:0d:e7:15:
81:35:57:11:fb:ce:71:2c:d3:0c:00:e1:ac:bd:33:
1d:63:93:4a:ae:94:b0:90:33:fc:e9:61:bd:6c:0c:
11:46:00:b0:c1:ba:0e:ab:35:a4:d4:f7:64:f1:66:
b2:a5:ca:ef:4d:50:5d:93:f6:86:84:6d:f6:56:ce:
4d:c9:24:6d:f7:11:6a:87:c5:3f:85:79:85:95:95:
2a:1d:48:fe:d0:40:13:09:42:99:23:53:04:71:7e:
9e:01:5f:1a:ac:f4:a2:89:ef:56:7f:e8:11:90:ff:
82:0a:56:af:81:32:90:5c:4f:53:0c:6f:64:26:5e:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:78:9D:A9:F5:B6:DC:A1:33:23:78:2E:4D:2B:7B:E6:46:92:60:95
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:eb:59:1c:41:ac:45:b7:ed:86:d8:65:27:95:9a:57:31:
72:ca:d4:10:ec:39:a0:2a:72:68:35:ff:31:15:cd:44:e2:6b:
52:55:3f:03:02:d4:f0:ae:40:22:99:86:55:9a:6a:41:4a:bd:
49:83:b4:b6:50:da:92:d5:11:25:07:ff:8d:38:1d:2d:fc:07:
3d:7e:03:48:11:c6:e2:d7:88:a6:61:55:66:7f:5d:dd:9c:7e:
89:35:66:57:8b:84:2d:d0:c9:a5:7d:7e:66:30:c8:36:aa:76:
4b:85:dc:f6:62:82:d1:97:ba:4b:21:64:e5:35:35:8c:06:3b:
e6:20:e4:14:0a:12:89:6a:66:32:36:79:f4:8e:e3:38:59:6e:
c6:10:bb:c7:f6:e7:0d:c9:05:03:cf:67:3d:fe:7c:9e:c1:ad:
92:fe:cf:0a:9b:10:ba:31:14:5f:6e:c9:ca:02:55:e1:83:b7:
a2:31:2f:99:e8:ac:e7:a5:25:ee:9d:ac:bc:21:8f:dd:a6:44:
d1:bd:02:0f:9f:a5:b6:fd:44:6a:eb:ec:f6:7b:b5:51:44:6c:
e4:a1:a5:74:56:f7:b9:a9:97:02:f2:7e:6a:00:bb:ec:e1:f8:
8d:e8:cf:5e:47:0e:62:47:3e:6f:e3:24:8c:45:12:ad:0a:ee:
85:4b:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:58:15 2025 by rpki-client