Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: RiNzNHi9Hcsx9I7tlCglooT+GD8NmjappDxy9zMowqU=
Subject key identifier: BB:6A:80:7E:6E:C3:33:48:A2:97:A1:64:0E:71:A7:65:D3:E3:D7:21
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01974E203883F188B54EC2C2CD1DDFC08EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 139F
Signing time: Sun 08 Jun 2025 06:00:23 +0000
Manifest this update: Sun 08 Jun 2025 06:00:23 +0000
Manifest next update: Mon 09 Jun 2025 06:00:23 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: FSl99jUXygiCxelrwWbAO3kmxmiG3Z6w1HEkQQXGs9w=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:38:83:f1:88:b5:4e:c2:c2:cd:1d:df:c0:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jun 8 06:00:23 2025 GMT
Not After : Jun 9 06:00:23 2025 GMT
Subject: CN=bb6a807e6ec33348a297a1640e71a765d3e3d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:ee:1a:7c:fb:44:c0:ab:ec:da:2b:a9:e0:
7b:67:c1:ef:17:68:b0:52:ec:48:a7:ec:d4:4c:36:
ac:dc:95:67:69:6c:60:93:57:c0:87:1f:f8:83:a0:
7a:ca:d0:39:bd:c6:ff:2c:e0:9a:02:9e:00:49:14:
af:2f:e3:6c:b8:7b:dc:31:25:ec:7c:4e:ef:ae:c4:
a0:db:58:30:bc:2e:71:73:c8:45:60:52:97:0d:24:
56:fc:9f:b5:46:6d:cf:a3:8d:af:a3:4c:1f:c7:f4:
e5:9c:d1:af:2f:d6:ad:12:a2:8d:29:15:92:8c:11:
c0:84:91:e6:25:e3:a2:89:e0:ec:fd:07:f8:4e:42:
e5:17:99:af:19:79:78:9b:d7:ec:06:d8:07:0c:55:
cb:e6:64:88:08:15:d1:2f:c5:a4:fe:99:62:b8:b6:
98:14:80:cb:76:d7:4b:fb:24:b0:fa:45:75:5a:9a:
fd:56:39:13:90:d4:7c:7d:7a:6f:b2:2e:45:fd:70:
34:76:8b:2c:9a:de:59:65:de:cd:05:e5:5d:74:4c:
e2:55:52:7c:7b:7a:66:21:a6:e6:a0:6b:80:b0:04:
2a:bd:17:c0:63:db:2a:e2:cf:82:ff:13:29:e6:10:
5c:cb:84:d5:fa:13:18:42:70:63:29:27:d0:e6:8b:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:80:7E:6E:C3:33:48:A2:97:A1:64:0E:71:A7:65:D3:E3:D7:21
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:84:d8:51:c1:7d:a7:00:f7:20:26:c8:e3:5a:8c:72:a3:77:
c3:6b:c9:d2:06:ab:57:21:73:f8:a6:9f:94:51:79:c9:13:31:
59:45:ec:ae:19:de:50:45:8e:f0:9c:a4:ce:15:ef:5b:e1:54:
a4:d9:1b:aa:46:93:9b:02:bc:64:2b:0d:03:4e:65:e5:d5:b3:
cc:59:57:cf:70:5c:74:59:40:ec:1d:a0:db:51:38:50:2c:1b:
82:a4:b4:7f:da:03:33:f0:0a:a8:b2:46:b9:f4:4d:07:90:c7:
aa:c3:0e:a1:1c:6d:31:c3:e7:f3:43:f3:9e:3e:4f:91:78:e6:
8e:d3:99:8e:35:ec:90:20:b7:5b:27:dd:fa:4a:6f:cd:88:25:
36:2a:80:08:c2:84:a8:15:5f:39:eb:5c:e8:31:5b:4f:a1:92:
a5:74:a5:ed:50:4c:4b:43:68:4e:f2:53:b3:07:e9:7c:1b:53:
21:51:d2:5d:b3:4d:3c:5d:c9:48:c6:4b:2a:d3:3a:15:16:15:
d9:23:c5:eb:65:f9:fd:c3:e5:cf:70:bc:e1:44:fd:18:83:50:
1c:d2:cc:43:5a:76:67:b6:55:cb:bb:53:5f:3b:32:1b:25:eb:
70:2b:27:15:2b:8f:f3:9c:6a:32:ee:52:b7:68:e6:63:f4:3e:
07:ea:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:45 2025 by rpki-client