Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier: 8YAvmZe1JR5nj2kE6rOWeP2BXeOoFVMBLbX71y2KGyI=
Subject key identifier: 3A:7F:B8:3B:C5:94:92:6A:46:BA:F9:3F:95:4F:10:62:3E:6B:62:6D
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial: 01974968741E393C1000B678C430FBA932DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number: 0CD6
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: 8UG52rkCX2sTlne9dZlb6rjm1y/FXY/G32uedEUdcAA=)
2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:74:1e:39:3c:10:00:b6:78:c4:30:fb:a9:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f4510444a17add7327146152943495ababb968
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=3a7fb83bc594926a46baf93f954f10623e6b626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:ef:60:a5:ef:37:21:34:f4:d3:ad:10:09:
41:13:8e:6d:fd:71:79:8d:44:26:33:e7:9e:3f:70:
91:c7:c8:e3:3c:a8:db:1d:ab:66:d7:e7:06:37:bc:
c2:0c:b5:76:31:4d:f6:aa:65:86:83:51:b7:f3:72:
a4:9b:dc:29:9c:d0:e4:df:70:68:f7:d0:a2:ed:ed:
2d:62:87:1f:a9:04:43:a6:2c:61:d5:11:b9:8e:6a:
0b:91:65:aa:57:18:0f:31:87:5f:db:d4:73:6f:64:
0e:67:ff:60:8a:ca:1d:00:7b:fd:52:a1:0c:d3:ea:
5d:9e:d0:98:76:10:46:2a:36:9b:57:98:e6:22:2a:
8d:c0:ef:ea:17:be:f0:61:99:97:ca:22:09:b6:81:
b6:29:9d:5f:f4:5e:06:4b:35:d0:b4:09:db:00:18:
f4:1e:80:71:c9:c7:a1:8d:57:d9:7a:e8:16:6d:73:
7d:6a:fb:eb:ac:3e:fa:9a:59:84:9f:e6:c9:4c:a8:
7d:9e:e4:bc:a5:39:50:7d:5f:60:8f:08:a3:d1:03:
e7:e5:17:83:07:65:47:c2:58:d5:16:66:dd:b6:36:
fc:d9:24:5e:b8:60:88:9b:3a:02:50:af:37:23:cc:
8d:b6:d4:b3:76:de:ea:cb:bd:01:ab:38:a8:7f:a1:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:B8:3B:C5:94:92:6A:46:BA:F9:3F:95:4F:10:62:3E:6B:62:6D
X509v3 Authority Key Identifier:
keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cb:ac:d5:4a:9a:b0:45:16:75:5f:75:5a:77:f9:eb:43:6e:
9d:e8:70:09:bf:61:f3:3b:e4:a1:e2:a6:ef:a4:62:28:78:db:
44:49:28:ed:b4:48:da:ad:de:09:ad:fb:23:78:16:3a:a3:3b:
0a:88:2a:30:be:dc:2f:18:5d:d8:c8:34:b0:41:6e:64:e8:25:
15:67:cd:c5:d2:95:5c:55:d2:d3:73:45:2f:51:c7:bb:c0:e7:
19:4f:50:1d:6b:be:6d:83:b1:8e:c9:81:f8:96:70:fb:82:4e:
f9:d4:f1:b7:aa:5c:73:c9:c9:d4:96:1f:b2:24:dc:a9:28:9b:
7f:cb:12:47:1c:e5:55:06:91:dc:de:f6:e2:c7:ad:b3:11:7f:
4b:e1:8c:ed:c0:e9:61:9e:91:a0:b7:b2:38:9c:86:5a:0c:67:
34:e3:5f:ff:95:f1:9a:65:4d:26:18:06:6a:a9:b2:e2:6c:23:
3f:41:1c:4c:e6:1e:3d:b9:52:dd:59:a4:5a:56:a1:b7:4b:5d:
ef:7a:87:80:9d:d8:27:ed:36:14:d0:69:73:70:dc:1d:ba:c1:
46:13:97:2f:b5:0e:af:09:be:d9:18:2c:ec:e7:8d:22:ff:b0:
d1:b8:e2:da:80:16:fa:ce:ff:86:0c:5e:fe:5e:ae:fe:4c:62:
35:9c:43:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaHQeOTwQALZ4xDD7qTLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh
YmI5NjgwHhcNMjUwNjA3MDgwMTExWhcNMjUwNjA4MDgwMTExWjAzMTEwLwYDVQQD
EygzYTdmYjgzYmM1OTQ5MjZhNDZiYWY5M2Y5NTRmMTA2MjNlNmI2MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3vYKXvNyE09NOtEAlBE45t/XF5
jUQmM+eeP3CRx8jjPKjbHatm1+cGN7zCDLV2MU32qmWGg1G383Kkm9wpnNDk33Bo
99Ci7e0tYocfqQRDpixh1RG5jmoLkWWqVxgPMYdf29Rzb2QOZ/9gisodAHv9UqEM
0+pdntCYdhBGKjabV5jmIiqNwO/qF77wYZmXyiIJtoG2KZ1f9F4GSzXQtAnbABj0
HoBxycehjVfZeugWbXN9avvrrD76mlmEn+bJTKh9nuS8pTlQfV9gjwij0QPn5ReD
B2VHwljVFmbdtjb82SReuGCImzoCUK83I8yNttSzdt7qy70Bqziof6HFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp/uDvFlJJqRrr5P5VPEGI+a2JtMB8GA1UdIwQY
MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt
YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj
LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMus1Uqa
sEUWdV91Wnf560NunehwCb9h8zvkoeKm76RiKHjbREko7bRI2q3eCa37I3gWOqM7
CogqML7cLxhd2Mg0sEFuZOglFWfNxdKVXFXS03NFL1HHu8DnGU9QHWu+bYOxjsmB
+JZw+4JO+dTxt6pcc8nJ1JYfsiTcqSibf8sSRxzlVQaR3N724setsxF/S+GM7cDp
YZ6RoLeyOJyGWgxnNONf/5XxmmVNJhgGaqmy4mwjP0EcTOYePblS3VmkWlaht0td
73qHgJ3YJ+02FNBpc3DcHbrBRhOXL7UOrwm+2Rgs7OeNIv+w0bji2oAW+s7/hgxe
/l6u/kxiNZxD7A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:24 2025 by rpki-client