
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier: Gm221rEmE8BryJUFvugyRWBHs+FL131eIZS/eDL7zBU=
Subject key identifier: 5E:0A:E6:27:47:B5:35:00:FF:7E:D7:FE:04:BC:EF:19:CC:F7:DC:CA
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial: 01975F8235E38C44AF23D86DE4D08F62730E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number: 128C
Signing time: Wed 11 Jun 2025 15:00:58 +0000
Manifest this update: Wed 11 Jun 2025 15:00:58 +0000
Manifest next update: Thu 12 Jun 2025 15:00:58 +0000
Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=)
2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: GTad/Z795XeVSxjWKSvPR+C0UiFIrr0utEvEimuqfKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:82:35:e3:8c:44:af:23:d8:6d:e4:d0:8f:62:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Validity
Not Before: Jun 11 15:00:58 2025 GMT
Not After : Jun 12 15:00:58 2025 GMT
Subject: CN=5e0ae62747b53500ff7ed7fe04bcef19ccf7dcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:07:f1:de:49:67:76:7f:28:9c:88:ad:53:
2d:5c:c4:7d:ba:a7:f3:9d:cf:26:c8:b9:a6:2d:ef:
9c:82:19:6b:ec:6d:58:12:d3:2e:45:63:87:91:81:
a2:f4:88:66:aa:3c:82:a1:ee:30:9d:7c:07:a2:d9:
06:8e:54:5d:99:f9:7a:d2:16:d5:be:33:a5:f1:be:
bf:f3:22:ae:a7:59:2c:b9:ec:b2:04:47:a7:2b:bd:
30:0b:47:dc:72:77:3f:3e:c9:da:75:f9:c9:2d:8a:
30:cb:c5:71:6e:34:6c:a5:15:5f:e1:b0:60:99:34:
00:e4:e8:31:0b:ed:a6:d5:c1:be:df:58:44:f5:f9:
74:78:cd:e9:d6:24:cd:d4:5a:7f:d0:06:67:40:ce:
0a:11:cd:b3:c2:be:9e:13:19:6d:0e:96:32:9f:1e:
51:26:fa:fe:d8:49:28:66:63:2f:ab:40:b0:79:ad:
89:c3:62:78:a3:87:0a:f8:f6:bb:ef:eb:8b:77:3f:
1f:fa:0b:53:3e:75:db:83:76:7c:e5:43:fb:df:12:
10:b0:f3:c8:4b:5a:88:de:62:f8:76:ea:3f:02:d9:
79:e5:c4:5a:53:d8:03:6e:c2:2f:ea:66:f3:6d:b7:
3d:b8:e2:ff:ff:12:d7:2b:6e:27:91:6f:47:d8:c2:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:E6:27:47:B5:35:00:FF:7E:D7:FE:04:BC:EF:19:CC:F7:DC:CA
X509v3 Authority Key Identifier:
keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:71:67:ec:13:35:0d:d7:25:5c:8d:03:ad:10:90:95:d0:
69:09:08:d1:96:a5:01:23:09:e5:da:de:3b:ef:3e:05:c7:2f:
4b:40:04:a3:16:25:50:ef:45:62:80:f0:03:5a:31:88:f9:e5:
01:cd:54:ba:06:38:c2:bd:92:cd:e2:34:8e:65:89:89:19:aa:
a8:bb:9d:10:65:91:93:93:0d:77:ed:18:a8:33:c3:3a:fd:76:
e5:f8:ed:fa:94:8c:fb:28:9b:17:bf:d1:d7:0e:a7:2f:31:d7:
58:1f:81:be:2a:a6:62:39:87:79:82:e9:13:f6:3f:7e:1a:9a:
7d:22:23:b5:c7:de:02:5e:3d:62:d0:24:b2:99:a2:6e:ad:4b:
d7:43:e3:ad:44:59:28:f0:a6:72:84:2f:35:db:47:b5:49:f9:
e7:61:47:82:22:84:b1:4c:af:f5:59:5b:60:06:ee:96:b9:a4:
3b:55:34:1b:9b:41:48:f1:18:85:57:46:7e:a8:37:44:a4:73:
d6:00:49:17:c3:93:27:cf:4c:d7:21:ed:89:00:10:7c:6b:a8:
98:09:40:11:41:aa:7b:66:4f:f4:e9:ae:e8:bd:67:06:75:df:
bf:e9:27:36:42:d7:38:1a:34:26:db:46:33:4c:19:a2:42:e9:
4c:11:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:25:31 2025 by rpki-client