Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: YGz+ciTthiCBEW4eWWxpkuVnPOkuvBWSYmosNiA2ujM=
Subject key identifier: 73:62:12:38:C7:70:8C:8F:5B:CC:AB:C0:03:80:ED:F1:B0:2D:C0:1E
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 01974854FC4405606D4AA70528F3C3C3B71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 03:00:18 +0000
Manifest this update: Sat 07 Jun 2025 03:00:18 +0000
Manifest next update: Sun 08 Jun 2025 03:00:18 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: o8jlVDUj/TtA+rTzZBIeohcCxcxTCPolJdDq2QSUyBI=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:54:fc:44:05:60:6d:4a:a7:05:28:f3:c3:c3:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Jun 7 03:00:18 2025 GMT
Not After : Jun 8 03:00:18 2025 GMT
Subject: CN=73621238c7708c8f5bccabc00380edf1b02dc01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:e5:e3:c2:01:9e:9f:fb:94:58:44:1f:ff:
1c:f5:f6:18:6e:97:58:e0:f4:5a:99:e5:f5:42:57:
00:bf:a4:f8:04:89:c4:a4:11:29:0f:85:42:ed:8d:
7c:46:07:46:15:d1:30:8f:58:b8:dd:70:0a:b6:d4:
38:df:55:a7:38:9a:e6:2f:bd:03:75:d5:e8:82:9e:
38:09:92:7b:a6:97:30:57:07:34:9d:68:60:88:a5:
fc:10:a7:c4:e0:9d:99:27:71:41:a1:33:3c:01:70:
54:b6:98:00:aa:60:c8:24:fa:b1:13:4a:46:b4:f7:
6d:05:fa:9d:b5:78:db:e7:ef:50:25:6d:5f:5f:f7:
1b:f3:6d:32:07:91:e6:e2:9b:12:95:16:c0:a8:09:
c1:f6:d9:7d:1c:3b:8e:d1:8a:a5:35:d9:08:cc:2c:
fa:64:7a:36:d2:9a:5c:37:fb:ba:da:8c:b4:39:c3:
ce:34:52:08:fa:b2:6d:ad:67:56:20:e0:7f:2a:36:
03:e5:bb:ac:17:16:d0:64:56:ce:c0:f2:54:eb:b0:
2f:80:cb:a6:61:75:55:60:52:1e:00:5d:50:b8:50:
69:f3:f0:f9:85:de:6f:21:07:97:8f:93:c7:a6:98:
76:e5:38:42:28:f7:9b:5c:e0:6b:25:9c:33:37:06:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:12:38:C7:70:8C:8F:5B:CC:AB:C0:03:80:ED:F1:B0:2D:C0:1E
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7d:ed:31:eb:bd:b4:e0:40:27:23:39:08:f6:92:07:36:ff:
aa:16:2b:30:f1:cb:3e:50:20:a6:88:96:a6:90:f2:61:92:a5:
3f:bf:65:83:ea:1a:82:91:77:04:74:15:bf:d5:fe:2a:ef:7b:
80:23:2c:f9:90:6f:d6:a3:38:99:05:d3:5f:e6:5a:4b:37:f7:
05:84:03:95:77:f3:db:bb:ea:b2:c5:85:b8:3e:74:ed:70:76:
79:a0:79:5e:73:23:6d:95:5a:cd:ec:f6:bd:05:ab:a6:50:82:
ab:f9:67:40:df:0b:83:ef:f4:59:d2:84:ed:4c:e7:cb:c5:db:
87:60:5f:ef:a5:8c:96:d2:40:66:9a:6a:cd:d6:d8:9f:89:6d:
25:eb:50:fd:cd:ef:e3:5e:77:7d:4c:33:80:0f:e2:a3:88:65:
5f:f3:c8:0a:a1:5d:d1:03:52:20:4a:a4:c1:39:68:72:bd:77:
ed:93:21:7b:d5:6b:69:77:4a:f9:90:37:7d:e0:2f:d9:4a:6a:
7c:64:30:e8:04:fa:16:d0:58:59:b9:04:96:5c:63:68:26:d1:
73:a3:41:48:a1:f3:28:d9:58:0f:3f:ad:36:c5:16:d8:8c:26:
bc:59:16:23:64:c0:06:c4:be:e7:1e:a2:7b:e6:9d:be:fc:b5:
39:f2:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:42 2025 by rpki-client