Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: rgDwdcHK3zhe8+lA271Fvqjg6XH9tqVawpPF3dnU60o=
Subject key identifier: 4A:BC:A7:DF:15:0C:26:70:BF:9B:A9:37:4A:8D:A0:36:85:B4:7F:94
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01975BDBE6A6041ABADAA9A38888D3ACE6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0CA3
Signing time: Tue 10 Jun 2025 22:00:27 +0000
Manifest this update: Tue 10 Jun 2025 22:00:27 +0000
Manifest next update: Wed 11 Jun 2025 22:00:27 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: mGKHBjYMLBgqoC/uMMjI/MBX8fvmz/btCGdZ5gDJC9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:db:e6:a6:04:1a:ba:da:a9:a3:88:88:d3:ac:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Jun 10 22:00:27 2025 GMT
Not After : Jun 11 22:00:27 2025 GMT
Subject: CN=4abca7df150c2670bf9ba9374a8da03685b47f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:59:89:69:18:f1:ad:ff:aa:ef:fd:7c:b7:
6f:90:3a:29:c0:3f:81:99:9e:bc:ef:df:2f:85:68:
9d:57:70:8f:44:cb:c4:94:72:8c:a3:ae:fd:30:fe:
91:51:ca:5f:21:25:76:a8:b2:35:2b:07:04:c6:ed:
fc:16:3c:0d:77:03:9a:76:6e:20:54:a3:bb:a0:63:
9a:f9:af:fb:09:64:7f:21:13:ca:9b:cb:9d:37:bf:
5b:e0:dc:a6:4e:ad:b2:b9:1d:3d:d9:8e:50:6b:a4:
d5:e2:10:91:b9:0d:f2:94:52:82:6d:74:b6:c2:93:
2b:79:e1:18:77:e3:c4:33:d2:97:d3:4f:8e:fe:cd:
07:ba:32:50:f2:18:ae:c2:e4:88:14:22:22:08:53:
13:cc:a8:df:3f:96:99:a4:9d:3e:3c:7e:2a:5a:11:
d6:12:c0:12:fc:71:87:cd:da:4c:93:2a:e7:6f:cd:
9a:fd:76:ab:bf:af:e0:3b:a5:01:81:70:58:3b:e4:
e6:bb:30:d1:59:ea:5f:25:cf:3d:d1:44:51:8a:07:
2f:9c:49:d0:35:6f:a3:5f:40:fe:b4:c2:51:8a:a5:
2a:da:64:a4:1b:88:56:9f:0e:8f:a6:b7:22:2f:2d:
3e:49:24:e4:0e:d2:c5:f4:1d:3a:85:dc:db:c1:64:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:A7:DF:15:0C:26:70:BF:9B:A9:37:4A:8D:A0:36:85:B4:7F:94
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:13:66:91:a6:9f:de:d7:65:a6:12:00:2d:90:f3:d6:d8:63:
91:aa:1b:c2:29:e3:6f:2f:5a:64:40:81:c5:a0:2b:67:d8:47:
46:57:3f:57:58:c3:45:23:4f:19:d2:46:67:df:a1:53:df:71:
4c:74:df:07:06:52:2c:ff:6d:3d:04:a4:e9:84:7f:67:2b:92:
ea:40:a5:ca:31:83:93:f5:c0:c7:79:29:c0:9b:2b:d4:ac:6b:
71:91:42:c9:89:33:09:fd:6b:5a:65:a8:2f:40:4d:e2:dc:6b:
f6:26:81:4a:d1:e4:13:31:cf:7b:54:bd:ea:87:65:28:5b:fa:
8c:70:fb:99:53:f6:ef:b4:6a:fc:80:3e:6a:4e:d0:8c:f6:89:
fc:cc:64:e2:3b:e3:2a:88:f5:75:6e:00:9d:be:07:6b:a7:6e:
94:48:cc:a9:9b:37:86:b1:49:7a:f1:aa:22:22:e5:fe:e5:c8:
b5:c4:f1:08:4e:f1:59:b9:0e:cb:ea:2e:f7:c1:3a:2b:f0:f3:
97:3a:87:cf:66:43:15:8e:80:28:7b:a7:1c:ea:2c:ab:3d:52:
74:76:d2:f6:35:19:1c:c1:23:53:f7:b6:f9:a1:33:ee:6c:e6:
24:5d:08:c7:29:de:d3:f7:9c:b8:e8:9f:4a:51:52:e0:8f:5b:
b5:9a:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:34:07 2025 by rpki-client