Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: 3TyUNDlRxu8fWxLmQNTLQN4RcXUEzhDFcZ0NJ4ZCd/g=
Subject key identifier: 67:ED:AF:56:67:B8:80:57:1B:D8:B0:51:13:EA:1C:78:57:8D:74:BE
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 01974DB289B0B23F6E0AEC1A64953EC09DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 1100
Signing time: Sun 08 Jun 2025 04:00:35 +0000
Manifest this update: Sun 08 Jun 2025 04:00:35 +0000
Manifest next update: Mon 09 Jun 2025 04:00:35 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: 17axIlD4XsnNHpPdkAO2v8TeAJInOH1Dne9YZ0BVmn4=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:89:b0:b2:3f:6e:0a:ec:1a:64:95:3e:c0:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jun 8 04:00:35 2025 GMT
Not After : Jun 9 04:00:35 2025 GMT
Subject: CN=67edaf5667b880571bd8b05113ea1c78578d74be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:e2:26:16:91:4b:55:e0:3a:c7:b1:67:8a:
df:24:d9:5d:d3:24:71:19:4c:68:b6:5e:58:27:32:
bc:89:d3:06:57:61:94:b1:8c:2d:21:cc:31:38:23:
6a:be:c0:93:03:08:b2:49:de:13:80:bb:5a:2a:fd:
a0:80:1d:fe:8d:c1:f5:a6:c5:d2:91:95:7c:18:d4:
ab:23:3f:e5:dd:66:bf:2d:d2:bd:ea:72:cf:06:b8:
9a:9e:66:fd:92:b1:b1:e0:bc:0e:c7:cb:61:b7:af:
c9:4f:7e:6c:b4:47:45:78:6e:89:da:08:da:84:21:
0a:29:1e:34:b0:4b:0f:b7:3f:c2:4a:a4:a7:32:ca:
39:68:d6:71:10:5a:d5:21:58:0d:6f:df:24:89:61:
a1:a5:59:c3:55:7b:c0:38:7d:61:f6:af:ff:5b:dc:
c9:2d:b7:c5:c4:82:21:95:e4:93:ac:e2:7b:b4:64:
e6:20:97:ff:ba:e1:3a:a8:7b:87:c7:1d:47:f3:c4:
45:3e:3e:02:4d:68:f9:05:f0:ee:bf:9c:7d:d3:88:
a8:98:b4:4d:24:91:12:fb:ba:16:ad:3e:7d:81:4f:
57:81:3a:2d:0f:f1:f4:36:b2:9e:95:63:7b:f8:98:
e9:9d:ac:a4:dd:8f:9c:7b:75:50:72:65:3f:19:6e:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:AF:56:67:B8:80:57:1B:D8:B0:51:13:EA:1C:78:57:8D:74:BE
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:85:6c:06:f0:57:85:7d:01:c4:64:cf:78:b8:8e:a2:49:31:
a8:d9:13:94:d9:f3:24:9c:3e:7e:e1:51:94:48:ab:7d:47:d8:
38:e6:87:46:01:34:cb:de:c6:6e:cc:99:30:33:07:70:a2:10:
33:ee:ae:df:6c:2f:d3:b0:c1:ec:89:6b:77:62:f4:88:3e:14:
2d:a7:aa:9d:8b:6f:b2:3c:29:fe:9e:78:4d:1e:91:8b:7a:7a:
a4:ff:6a:ba:5a:72:41:b7:1f:b1:88:39:a7:b2:00:07:cd:ef:
2f:5f:04:47:f6:7d:4b:82:1e:0b:bf:cd:ec:7f:64:f8:ed:98:
43:6f:9b:3a:58:fa:3c:ed:82:82:ba:2d:b7:e8:37:e3:ef:92:
66:5e:39:48:88:c1:c7:ef:49:0e:ec:eb:28:81:06:32:4e:f9:
a7:da:c9:8a:5d:f0:7e:77:de:7f:ae:c5:e4:88:df:c5:64:1b:
ef:3e:e5:7e:4e:5a:c7:c5:2b:73:88:9d:29:c3:cf:0c:4f:01:
8d:a9:df:80:7b:61:eb:70:45:3f:0a:e5:eb:06:99:c0:22:ca:
74:48:81:4d:d8:e8:b2:95:79:aa:fc:aa:1e:89:bd:62:69:bc:
58:2c:d2:49:0e:cf:21:53:40:d7:e0:02:3d:d3:37:ca:8c:96:
fc:ed:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:17:35 2025 by rpki-client