Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier: TYpMOCHLI/1PGUe0hcikELz58T5BKzntT95miNW5o/0=
Subject key identifier: 95:D2:FD:CB:2A:13:D3:EE:32:35:A4:87:75:49:4F:79:1E:D8:0A:FC
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer: /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial: 01975C49ADB02A2EC3E46EF0C8702A0EFB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 00:00:21 +0000
Manifest this update: Wed 11 Jun 2025 00:00:21 +0000
Manifest next update: Thu 12 Jun 2025 00:00:21 +0000
Files and hashes: 1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: gBDmLoqqwybobL8TTgI2viTzx/IiUDyYZotzm6IwaHM=)
2: FI0vaC_-wS4Ctp40wQ6DLlcQC5Q.roa (hash: /18Wg9WgOUF/QfCmOwGmGVq/qijiG5C2ckmZROjPcZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:49:ad:b0:2a:2e:c3:e4:6e:f0:c8:70:2a:0e:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Validity
Not Before: Jun 11 00:00:21 2025 GMT
Not After : Jun 12 00:00:21 2025 GMT
Subject: CN=95d2fdcb2a13d3ee3235a48775494f791ed80afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:5f:c8:b3:b0:04:b2:8e:2a:ee:df:1d:5b:
eb:cd:75:70:52:5a:49:66:01:c0:fa:e0:30:de:df:
23:62:f0:d2:bb:3d:31:f0:39:3a:24:22:ff:9c:6d:
fc:10:1a:71:c0:a0:86:e0:a4:e4:c2:70:cc:05:78:
5f:0a:66:f4:7e:77:51:3c:03:78:b8:5a:59:7b:90:
25:b6:11:2c:06:3d:b0:d0:37:e8:94:d1:98:32:76:
33:ec:3f:7e:19:bf:3a:53:2f:8b:48:e8:77:d2:c7:
68:49:13:c1:b2:4b:ce:57:25:85:88:0c:17:f8:f3:
83:99:ea:9a:37:fb:5d:56:fd:0d:55:33:39:a2:98:
0d:84:da:50:6b:5d:77:bf:3c:d0:d9:ef:66:d6:51:
c5:d3:87:36:35:db:10:a8:94:5a:72:96:f4:e4:24:
a0:cc:3a:df:f2:2e:70:ad:15:80:4d:a1:34:9b:a7:
f9:b9:21:7c:22:79:f6:10:ca:ee:c5:2d:0d:f7:03:
23:81:bc:be:23:b9:b1:e3:95:f4:a5:31:ab:7a:ad:
ba:dc:be:9f:4f:4d:4b:cd:f6:89:b6:30:94:f9:96:
92:ca:5c:3e:79:dc:0c:ac:69:74:83:33:8d:4c:49:
15:89:43:6e:ff:5d:96:3b:d2:07:73:db:30:6e:bc:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:FD:CB:2A:13:D3:EE:32:35:A4:87:75:49:4F:79:1E:D8:0A:FC
X509v3 Authority Key Identifier:
keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fb:88:b5:02:d2:3d:a7:1e:0e:8f:c9:62:7b:57:c0:29:ca:
84:75:eb:c5:05:24:c9:61:eb:28:0f:4e:6b:fd:fa:57:70:f6:
16:eb:2a:0c:e1:c2:91:be:30:e2:5d:bd:8c:8b:2e:73:eb:a1:
4c:0c:21:ce:fc:e0:f0:4e:e7:2a:43:38:f0:72:cf:93:a7:b5:
27:8b:e5:37:1c:50:94:90:42:2a:78:fc:d0:39:51:b3:fa:0c:
db:05:09:57:de:71:67:51:c5:b4:84:9f:7d:fb:2d:0c:78:a9:
ac:78:89:82:63:c5:8d:42:e4:99:52:d7:8b:c8:e5:0b:52:d5:
e4:e3:45:de:ad:c0:c4:d8:f3:e9:62:42:e7:d8:21:f2:90:1f:
d9:6e:83:be:99:4f:3e:bf:3a:83:33:dc:7c:db:2e:23:42:f5:
59:81:02:9c:ef:2b:16:34:ac:3c:05:00:59:f9:e9:c5:d4:a0:
4d:da:7a:29:77:12:ce:a5:00:16:52:5d:8f:bf:08:23:6d:bb:
c3:d8:cc:82:97:89:0e:08:12:81:bf:1d:4e:b0:03:a7:a3:5d:
d0:a1:e3:98:0c:61:c3:02:51:fb:55:a2:62:4a:d0:6a:8a:a0:
d8:a1:d8:81:da:d5:90:3c:5a:87:42:07:eb:8f:0e:27:68:38:
ea:c5:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:24:46 2025 by rpki-client