Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: ki9qMwB94C5JPsKbGpX5QKMXJ9N6OLZYPQL1NIq5vNI=
Subject key identifier: 77:5E:3F:3F:02:DC:D3:46:CB:24:B3:1A:6D:84:F8:B7:FD:79:FF:66
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0197469E22D02BA2F77A4CD57522F1415D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0C4E
Signing time: Fri 06 Jun 2025 19:00:58 +0000
Manifest this update: Fri 06 Jun 2025 19:00:58 +0000
Manifest next update: Sat 07 Jun 2025 19:00:58 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: pG74B3WaqEbeb/5HUZZGntbcX5WM6RK0BZlDPcBN98k=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:22:d0:2b:a2:f7:7a:4c:d5:75:22:f1:41:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Jun 6 19:00:58 2025 GMT
Not After : Jun 7 19:00:58 2025 GMT
Subject: CN=775e3f3f02dcd346cb24b31a6d84f8b7fd79ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:38:91:23:63:26:ae:60:a7:80:9b:80:bf:
05:bc:44:e2:6c:72:21:71:1d:fa:d9:68:9e:56:2d:
64:0e:ef:7c:5e:0b:56:c9:b6:39:bd:18:ab:e7:35:
77:98:ae:cd:47:1d:d0:19:c7:28:6b:2a:f2:59:de:
2b:b6:2a:2f:63:f4:7c:a2:be:de:0a:d1:4a:3e:67:
2c:89:89:ed:8d:e8:c8:fe:05:31:41:a9:f6:f8:ae:
a2:8a:e4:03:73:bd:1c:2d:f9:d2:8d:1a:bd:42:99:
4a:70:7c:a9:64:9d:3c:3b:0a:98:ec:e4:c4:f2:e7:
6b:e9:8e:16:c8:3e:35:b3:6a:c7:b4:7d:0a:a1:4e:
e7:da:8d:f6:ff:51:25:d7:aa:74:be:66:34:3a:2d:
4f:c0:cb:9f:0c:55:47:0e:91:c7:45:14:89:ec:6a:
9a:66:5c:0d:6a:89:0e:e4:47:25:08:39:81:7e:8d:
05:cc:d1:27:a5:53:a1:0b:ac:bd:a1:55:65:bd:55:
be:23:e2:7d:7d:d5:93:1e:b9:2f:fc:42:3b:6c:12:
1c:6d:30:dc:04:63:53:0b:91:67:ec:24:69:83:5b:
2a:d7:3a:38:1b:ff:68:e4:eb:c2:58:cc:cc:69:90:
53:a9:a4:bb:b4:f1:79:94:82:0a:39:fe:6a:1e:e0:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:3F:3F:02:DC:D3:46:CB:24:B3:1A:6D:84:F8:B7:FD:79:FF:66
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:88:35:c6:5f:98:cd:c5:01:0a:72:8f:5f:c6:4b:9a:12:1c:
5b:88:25:50:6e:90:ae:0f:1a:ac:47:64:2a:15:96:2a:50:08:
38:b2:24:d0:d2:67:7c:df:30:df:65:08:b8:5a:5f:74:90:1f:
61:da:e1:76:c8:ec:ac:e5:c2:1b:3a:7c:a4:52:ce:f8:c8:03:
55:ef:b6:a2:93:16:dc:c6:3d:93:52:95:11:92:b1:69:a5:29:
79:c7:5b:e6:3f:12:07:f3:f9:60:7c:bd:c2:bd:f1:e7:4d:e4:
23:6f:e6:10:22:33:fc:e0:87:41:35:08:92:26:4c:7f:0e:e6:
e9:c7:44:98:da:5c:32:71:84:a3:84:57:7f:f6:68:67:f6:d2:
e7:a7:00:d0:a8:9c:60:c8:83:86:82:aa:c4:69:56:2a:c0:e3:
77:69:2d:02:f3:4b:65:9c:8c:73:6f:6a:ae:44:bc:8b:c3:c8:
6d:f2:eb:b5:a6:cb:af:b0:15:86:60:7a:75:63:df:23:53:66:
52:ca:f5:73:27:7d:ed:d8:2d:98:e3:fc:85:18:d7:bc:9f:f0:
82:d9:be:02:6b:1a:9d:52:68:cb:d2:73:1b:43:ac:64:5e:f4:
38:3c:be:2c:37:8d:9f:e1:cc:17:6c:e0:2d:e7:75:cf:33:3a:
5d:cd:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:21 2025 by rpki-client