Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: VrZFIyYr6DiTyRHhb0exhDUh3AVLPqJSN7es/BeO2qc=
Subject key identifier: 30:98:03:2C:8B:12:9B:EC:9C:23:AD:2B:C3:40:54:34:47:97:FD:42
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 0197C3803B000FE1C85AFB20F6116F110CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0B09
Signing time: Tue 01 Jul 2025 01:00:50 +0000
Manifest this update: Tue 01 Jul 2025 01:00:50 +0000
Manifest next update: Wed 02 Jul 2025 01:00:50 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: 2NIX7LnYwk+FHR0SfTehNmBQERYDC/0euwOfzVB9WZ8=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:3b:00:0f:e1:c8:5a:fb:20:f6:11:6f:11:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jul 1 01:00:50 2025 GMT
Not After : Jul 2 01:00:50 2025 GMT
Subject: CN=3098032c8b129bec9c23ad2bc34054344797fd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:a2:39:40:ca:c3:e7:94:67:70:90:66:b8:
50:26:81:28:68:2b:7b:c2:35:d3:f3:6b:ab:f5:d0:
20:3f:6b:91:d5:fa:83:50:07:ca:85:b5:27:fc:af:
9f:3f:7d:8d:5c:57:5a:67:6f:08:c8:e4:41:a1:3a:
5e:8a:7f:c8:8f:f1:47:73:6f:41:12:f6:8a:f9:20:
fd:0a:ba:85:fd:a2:08:b7:54:2f:0f:9a:af:0f:14:
b1:67:64:23:5a:30:b9:20:f1:1f:bf:45:c3:3c:a0:
43:41:67:53:63:ec:38:82:d4:72:23:db:1e:d8:3d:
14:b3:20:08:d6:d8:8f:2b:ae:d1:5a:4f:bf:b7:bc:
fc:0f:b7:ff:6c:a8:37:b3:c7:ed:25:4d:7e:e7:bf:
6b:91:91:b7:ef:79:13:02:9f:6a:8a:4e:12:68:db:
30:7f:46:72:1f:f1:d1:df:67:38:94:ad:d2:e2:d4:
30:2d:84:1f:7c:aa:0a:2d:73:25:89:ce:b8:1b:ff:
96:ed:7f:0c:3b:d7:09:3c:d6:c4:27:73:5a:8a:9a:
89:54:ce:15:77:c8:56:98:04:77:d6:44:f1:67:81:
f0:45:35:cc:9c:a6:ad:c7:15:65:8b:18:03:79:33:
8c:43:b6:ba:50:11:a8:c6:cc:84:9d:a3:15:fc:2f:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:03:2C:8B:12:9B:EC:9C:23:AD:2B:C3:40:54:34:47:97:FD:42
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:38:0b:e1:55:a6:24:8a:44:c5:e5:44:7b:e7:82:02:df:
fc:31:6a:d2:86:88:aa:6e:4e:5f:f9:bf:00:c7:5a:ec:d5:fa:
af:9d:b2:a1:3a:50:c1:73:f5:17:9d:52:e3:d3:53:42:c9:90:
31:c8:0f:b4:c4:03:53:72:61:5a:74:2a:32:bd:9e:30:3b:3d:
95:24:9d:2d:9c:86:0f:db:fd:42:17:1d:39:53:11:86:30:ed:
db:8f:1e:fa:10:3a:5c:3b:e3:7d:2a:6b:ed:77:69:7d:18:9f:
2d:c3:13:d6:ed:21:79:96:73:21:0f:6e:48:b7:b5:80:b1:99:
7d:17:c3:c9:1b:32:72:ad:87:8d:85:ec:1b:7c:29:66:73:dd:
d0:c2:49:cb:46:d1:3a:75:a2:d9:19:fe:58:09:29:40:6c:d9:
98:f6:05:12:6a:f0:51:89:15:66:e9:b8:33:cd:6d:1d:60:f4:
f1:5d:44:ab:a6:b6:84:6b:c0:2d:27:f0:d8:a9:5f:02:f7:78:
11:0c:c3:f7:95:c3:0f:0c:2f:2c:02:3b:2c:15:f1:ad:43:16:
64:fa:ea:ee:01:6e:ab:b0:34:a5:be:ca:fb:e7:c5:2c:bc:9d:
68:5f:92:ab:5f:c2:4d:e3:ba:9a:ef:df:23:98:81:10:5f:d9:
97:b6:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:42:24 2025 by rpki-client