Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier: ss/KNsK66ZXUmVCReja0+kWUEqRK49NjE8sdSyA15uU=
Subject key identifier: D0:D0:28:3D:2A:F1:9D:7C:4F:78:72:21:08:70:EB:93:19:61:4F:97
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 01974E2027BF75F868803C5E4220FD69A91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 06:00:19 +0000
Manifest this update: Sun 08 Jun 2025 06:00:19 +0000
Manifest next update: Mon 09 Jun 2025 06:00:19 +0000
Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: Hvt0ScJCLp9ExHUke3eRN2ygJjllEkbYKBmDZSNmrNw=)
2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:27:bf:75:f8:68:80:3c:5e:42:20:fd:69:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: Jun 8 06:00:19 2025 GMT
Not After : Jun 9 06:00:19 2025 GMT
Subject: CN=d0d0283d2af19d7c4f7872210870eb9319614f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:fd:80:2d:c7:44:f7:c2:39:2a:75:14:59:
4e:af:a9:f7:4b:61:f5:1d:8c:f1:0f:fa:2b:e6:e0:
de:2f:dc:01:99:68:92:31:c8:54:60:7a:71:8e:77:
87:3a:47:9f:b6:ca:b7:87:1f:bb:f5:47:4d:79:04:
79:bc:14:b9:f0:71:1b:be:d2:a8:0d:d2:be:9c:ac:
3a:fa:b2:6f:2e:cd:7c:53:27:04:0d:9e:6c:05:2a:
76:c9:22:a6:3e:a6:d3:de:2d:cb:bf:4b:b3:f6:45:
5c:0d:ce:5b:58:f7:d3:5e:46:b3:0b:dc:50:d3:0e:
d4:60:17:98:2b:1d:22:e0:c6:dc:0b:b4:99:06:fa:
a2:61:49:c1:93:1d:c2:9b:89:98:b9:54:f8:b6:93:
56:b3:6e:82:9b:43:6a:00:e1:28:05:f5:02:90:90:
37:0f:34:11:e7:cc:6f:c2:48:24:36:0d:95:39:0d:
74:ca:02:5d:5f:0d:9e:fc:8f:5f:27:22:0a:c0:dd:
7f:e7:c2:c0:64:a0:e9:eb:df:98:a7:a3:c3:95:cd:
48:fb:f7:c0:a3:5f:ad:8d:bb:fe:d4:0b:3a:38:b5:
c2:1f:86:77:44:ea:3c:54:65:1a:4a:21:6c:58:aa:
b4:4d:aa:82:2c:41:14:4f:95:c4:c5:d5:db:40:9b:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:28:3D:2A:F1:9D:7C:4F:78:72:21:08:70:EB:93:19:61:4F:97
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9f:3f:e9:18:22:d2:5b:4e:c2:76:cf:b9:c9:1d:cf:d7:18:
cd:88:92:14:cc:70:6e:f0:60:30:00:cd:5d:44:8f:e5:ef:42:
71:f1:64:97:c4:da:b7:48:21:04:d0:4f:ec:84:dd:da:27:79:
17:64:12:53:d2:fe:45:e2:5a:f3:bf:33:3a:3f:e8:5d:d4:d7:
70:12:d8:6c:3c:62:f2:c0:17:f7:c5:ad:39:48:17:6b:d4:cb:
13:ca:72:d4:1e:92:b5:ad:67:7b:7e:4f:d5:6d:52:5b:5c:11:
f3:ab:99:d4:2a:3a:82:9e:76:8f:3c:0c:36:59:5a:d4:77:31:
60:ff:8e:8f:1a:1c:65:be:56:25:6a:c5:56:94:87:26:0d:49:
f1:9e:95:b3:d9:d8:df:44:94:36:9c:b6:83:f5:61:66:60:c7:
18:62:41:59:7c:0b:76:67:52:6f:3a:8f:47:a4:bb:b6:2a:9f:
9e:88:0a:51:39:44:0c:d7:17:71:b7:a6:db:e5:ab:12:f7:37:
e9:d7:26:f6:9e:dc:5b:f9:92:ff:0a:fe:52:d0:b7:f1:6f:53:
0e:95:a5:16:d8:01:5c:e5:ca:bf:a3:12:4a:89:b6:01:58:a8:
e0:14:a2:95:04:2d:6b:74:16:79:ba:ec:7b:e6:a3:85:97:e0:
bd:38:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:31:38 2025 by rpki-client