Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: Is2BPEOEy1nx88541U3gt8hLb8+9ZtM/NMYDA4JcOOw=
Subject key identifier: 09:FE:05:97:3B:0A:67:80:74:26:EA:D8:CC:9A:48:2D:12:81:1E:B1
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019749D641759D8E4093D2DC26133009A77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 12CB
Signing time: Sat 07 Jun 2025 10:01:07 +0000
Manifest this update: Sat 07 Jun 2025 10:01:07 +0000
Manifest next update: Sun 08 Jun 2025 10:01:07 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: sUVaS5DUDviA9Lsljf4pl6q1MKW8osaiUJsV/x4NXCw=)
2: FtcuzKMMTKsG4IefMTUbvthdvHQ.roa (hash: fh/bmOX6Q7urxhPxPp4WqcpQdlVctOh99ozTUlRP7Pc=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:41:75:9d:8e:40:93:d2:dc:26:13:30:09:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jun 7 10:01:07 2025 GMT
Not After : Jun 8 10:01:07 2025 GMT
Subject: CN=09fe05973b0a67807426ead8cc9a482d12811eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:37:0e:56:67:bf:03:2e:ad:db:53:10:b6:
09:61:1e:f9:a9:67:2c:58:34:d8:77:6d:a3:ca:80:
37:20:24:16:8e:0f:60:35:dd:90:34:78:70:e1:e5:
89:9d:c1:7a:04:6e:0d:ef:5e:c0:86:99:a8:59:5e:
53:b9:3f:98:f7:63:0e:75:6c:3c:dd:07:9b:d4:e9:
2f:38:a3:2a:14:ea:77:a3:e9:58:4e:70:77:46:f3:
c8:20:6b:aa:78:80:2d:30:c9:41:46:47:68:95:52:
17:d6:7c:02:a9:8a:66:88:ab:92:ad:6d:40:6f:f8:
b6:a4:d6:95:73:e9:c4:2f:b9:92:68:93:55:01:d6:
b9:a3:b5:20:5e:73:28:eb:5c:1b:a3:b0:43:7e:6f:
2b:8f:ef:25:8f:c7:ff:c9:d4:f6:ff:f3:4a:60:80:
11:44:3a:78:ff:d0:56:f0:e4:68:ee:a4:59:7d:a3:
1a:1d:38:69:9e:cb:93:40:79:91:fe:51:75:4f:5b:
75:db:f9:32:7d:d8:62:6e:f2:c1:52:00:41:f2:4c:
9c:3a:71:7f:43:37:ca:3e:6c:d1:3d:7b:36:2c:e7:
ad:d6:e3:d7:df:65:43:0f:cd:21:f0:3a:09:7a:55:
a5:da:63:60:69:d2:22:19:70:9b:43:56:e9:1b:51:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:05:97:3B:0A:67:80:74:26:EA:D8:CC:9A:48:2D:12:81:1E:B1
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:53:1f:bd:45:e6:03:c7:12:45:3c:0d:31:53:e5:a5:38:
e1:f6:f6:82:e6:0e:bc:d7:0a:d8:c7:43:01:7f:97:95:84:15:
a8:c8:f6:cc:41:a3:cb:b7:96:a6:2a:ad:6f:61:56:71:f1:e8:
31:0b:36:16:1e:47:aa:2d:9c:66:b1:1a:50:b6:47:db:03:e3:
4d:50:d4:8f:98:4a:b7:eb:f8:1f:86:41:07:bb:eb:f8:0e:87:
e1:31:7b:ba:68:45:1a:af:db:e7:79:0a:b6:0b:e8:b6:d0:0c:
5b:d0:0c:aa:c6:1b:3e:8e:e7:78:91:9e:5b:a8:21:bf:85:b1:
e6:48:a8:cc:16:ce:12:4d:93:f7:0a:06:a9:50:b8:b0:17:f7:
0d:4d:e0:06:d5:7f:95:92:b3:f8:17:61:4a:00:b1:54:32:9a:
76:f6:ce:88:07:7d:00:47:dd:06:1b:fe:89:80:86:72:19:da:
7d:71:4b:a8:ce:0d:99:8c:ac:a3:ac:0b:85:95:8f:66:c7:28:
77:f0:7e:ea:99:71:8f:76:b9:fa:22:a2:6d:b8:a4:c7:09:cf:
fd:72:55:13:50:4a:3f:9a:32:12:50:ce:80:fe:bf:47:71:7c:
d5:bd:e0:fb:55:63:1d:1c:c6:8f:e4:6d:dc:30:5b:2b:28:c7:
23:a8:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:50 2025 by rpki-client