Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: yvqKSc2aYpS/uIrn8EeqrQcvZpoQlV7QrtMIPwE3klY=
Subject key identifier: 46:2C:A3:F8:69:47:75:8C:8C:EE:15:3B:4B:2D:F9:24:65:23:61:07
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01976D3E5E04233BA0592954216890B1EC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0CAC
Signing time: Sat 14 Jun 2025 07:01:33 +0000
Manifest this update: Sat 14 Jun 2025 07:01:33 +0000
Manifest next update: Sun 15 Jun 2025 07:01:33 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: bw2fSp04ICANdbB5SYDkV5bk4lYN4sougDiaZ36Qtc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:5e:04:23:3b:a0:59:29:54:21:68:90:b1:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Jun 14 07:01:33 2025 GMT
Not After : Jun 15 07:01:33 2025 GMT
Subject: CN=462ca3f86947758c8cee153b4b2df92465236107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:b3:c0:1f:ca:1d:fe:f2:b4:7f:5c:c9:00:
21:38:69:5f:d9:c5:0e:f6:08:82:f1:1f:c0:a5:bc:
47:46:56:02:4b:86:6a:3c:b2:4b:4f:b8:71:3c:dc:
3c:a0:b8:d9:08:39:a9:70:97:b1:21:1d:25:be:af:
8a:bd:81:dc:7a:dc:3f:52:86:8d:63:be:74:b3:7c:
33:40:8f:b6:5b:57:6b:95:21:6b:96:4f:34:db:8d:
9d:c9:0b:cb:63:a0:a6:78:d3:e8:48:9f:f8:24:f8:
43:9b:f8:62:a5:e7:0e:60:42:03:37:39:35:61:ef:
d4:a9:a0:10:89:dc:56:d8:47:ca:53:5f:5a:c1:88:
b3:36:a1:93:4c:9e:6d:b0:29:40:14:e5:13:41:ce:
85:a9:81:e6:20:5a:91:c0:e5:40:e5:87:d6:f5:33:
70:02:af:66:27:95:68:aa:74:cc:40:0c:d8:65:60:
85:7b:72:d3:96:3d:68:8b:cc:84:e0:62:24:64:e7:
f9:4c:e8:1f:74:15:37:6b:0a:21:5d:34:a7:04:1a:
8b:43:00:ba:3f:db:ef:a0:65:a9:af:13:39:65:62:
03:8c:3b:b4:0f:32:3c:95:c1:a3:25:15:85:89:ee:
1b:23:95:84:f7:98:b6:43:b5:14:e0:99:9f:f6:f8:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:A3:F8:69:47:75:8C:8C:EE:15:3B:4B:2D:F9:24:65:23:61:07
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4a:9d:3b:90:37:53:79:9b:d1:45:9c:a3:06:1f:f5:a2:7a:
02:4c:c6:19:7e:8c:e5:37:50:58:4a:25:0b:33:0b:c5:6b:94:
d1:1a:eb:ec:05:06:c5:4f:c1:df:07:9a:60:f8:16:46:78:e9:
d3:68:10:28:6a:e2:de:a9:87:cb:a3:e1:19:5c:df:69:d7:a9:
77:4a:f7:3c:e1:e5:a0:85:d2:74:0c:c2:0d:d7:17:1d:cc:c1:
59:0b:c7:82:1b:47:ed:60:83:28:c1:f9:b2:e8:97:8d:81:15:
be:41:c7:2b:84:71:5a:f8:7f:47:ee:65:81:98:39:74:66:fe:
10:ea:18:44:e7:39:f1:7d:de:3f:e8:64:d9:78:9d:eb:24:05:
db:68:18:96:79:ee:34:20:c5:a7:23:cc:95:9e:97:a6:38:e4:
cd:d1:c1:a8:76:a8:df:c0:60:15:e0:b9:72:29:72:1c:ff:4d:
66:c2:6d:cc:a6:58:c1:12:a2:d5:1d:fe:64:68:90:b4:60:e9:
1e:a5:f4:93:68:04:db:8b:42:75:59:65:4a:7a:90:59:6f:13:
f3:d2:0f:9e:6d:b0:29:98:8f:b6:4b:0f:c4:8e:0a:43:fa:8e:
60:80:05:7a:92:b6:c2:fc:47:61:f9:ee:2d:76:2d:7a:dd:3c:
dd:fb:b1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:26:18 2025 by rpki-client