
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier: UUfILBjHCXGBf1WJ3VSkOgmnT2/3o8vmtofnuqRsaAA=
Subject key identifier: 36:B1:1E:DF:0C:D7:29:FC:65:EC:3D:A7:6D:2F:8C:AA:68:49:19:06
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial: 01975F4B2E938405B8BD259E5C12C59DC3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number: 3C
Signing time: Wed 11 Jun 2025 14:00:52 +0000
Manifest this update: Wed 11 Jun 2025 14:00:52 +0000
Manifest next update: Thu 12 Jun 2025 14:00:52 +0000
Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: 5xnUdyoOPk9uIepb7k1KRxi7rpY1InmvQMUpSgd8Bws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4b:2e:93:84:05:b8:bd:25:9e:5c:12:c5:9d:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
Validity
Not Before: Jun 11 14:00:52 2025 GMT
Not After : Jun 12 14:00:52 2025 GMT
Subject: CN=36b11edf0cd729fc65ec3da76d2f8caa68491906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:50:a8:2b:d2:b8:81:62:6a:74:4e:98:12:
d7:af:cf:02:d8:46:4c:e4:16:6f:a2:fc:d8:e7:cb:
44:26:2c:b8:fd:cf:a9:4b:a5:cc:77:c5:58:c7:59:
f0:b7:fc:c0:4c:46:10:af:fa:7c:e4:fd:41:78:5e:
d9:46:e7:7e:cf:80:fb:53:e0:bb:10:01:9c:e7:43:
31:3e:40:0c:43:6e:2c:10:51:70:b9:78:e4:63:23:
73:d1:1a:07:f9:48:07:91:ad:71:2a:0a:80:4d:14:
94:53:0e:42:32:3a:4d:e9:b8:a2:48:a7:44:c9:08:
9d:c4:e1:c0:b6:35:4f:f7:63:e9:b7:93:88:d8:c7:
94:97:23:c8:1e:28:d8:8b:e4:44:1e:60:1e:0a:d3:
39:7d:81:5e:96:d0:27:84:ce:20:b0:2a:5e:5d:b2:
a1:f8:4e:43:e4:11:07:13:84:87:92:ec:fb:32:60:
b2:cd:53:98:62:41:05:2c:fe:79:cd:39:ed:bf:e5:
ca:37:5d:0e:38:dd:5a:5f:ba:fc:b6:4a:8a:7a:54:
5f:8b:05:01:c2:16:ba:a1:b5:81:cc:c4:08:ef:c9:
2b:12:7c:32:26:30:bc:06:d6:96:4e:40:74:e1:c7:
1b:8f:2c:3d:68:4a:5b:ae:14:d2:ef:11:bb:ec:e7:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:1E:DF:0C:D7:29:FC:65:EC:3D:A7:6D:2F:8C:AA:68:49:19:06
X509v3 Authority Key Identifier:
keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a8:ea:cf:05:a6:80:a8:2a:c9:a1:d0:07:4b:dc:24:82:aa:
eb:af:f6:5b:21:23:8c:1e:61:ba:2c:e2:76:49:15:0d:2a:2a:
58:4c:c0:a2:09:0f:cb:ac:9e:f9:23:b2:3e:d4:30:de:b8:2c:
15:bc:d6:38:f5:97:b0:1a:92:6b:79:5d:84:6f:1a:1e:fc:03:
45:4f:75:a3:a5:10:83:ae:8a:7b:7b:ba:30:42:d9:33:1f:3a:
f2:f1:4d:8c:18:0d:d7:06:1f:7f:60:1b:b0:2a:3e:fe:0b:ad:
85:5e:3f:3e:3f:ec:0a:20:88:70:08:93:ee:cd:9b:89:38:67:
60:4e:f9:fd:ad:64:b3:06:a2:cc:08:7c:ad:18:79:99:13:b3:
a1:dc:d0:96:3e:06:b2:ab:01:6c:99:ed:9b:af:74:cf:d7:f4:
0a:f4:9a:b5:ce:84:03:a0:37:c3:97:5a:5c:69:db:46:a9:bf:
fc:7b:ab:6a:09:b2:47:5d:1e:90:47:4e:d8:f6:9b:d7:0c:ad:
b6:83:ca:3f:ce:81:5b:f7:97:b0:aa:e9:84:c1:ca:d7:c0:b8:
a7:c3:d8:da:fc:98:40:e1:6b:b0:c0:82:1a:f2:1e:c7:13:95:
ed:7e:08:18:53:4d:02:e0:24:da:6d:34:9b:08:2d:5d:c5:ce:
ae:56:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:04:19 2025 by rpki-client