Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: eXwYciqSZmrI4R++QVNkGx3nKbCQ/R2fQF5WrELLlU8=
Subject key identifier: F6:16:8C:6C:2A:52:D1:97:28:0A:AC:33:FD:9A:14:2D:83:D1:A6:D8
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 0197CD5F500D675ACB989EB8462586223C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 15C7
Signing time: Wed 02 Jul 2025 23:01:05 +0000
Manifest this update: Wed 02 Jul 2025 23:01:05 +0000
Manifest next update: Thu 03 Jul 2025 23:01:05 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: 9K6LLWqdy04IdbBrow7PNZEnoBfF/aHjLBJ7NRK5lpo=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:50:0d:67:5a:cb:98:9e:b8:46:25:86:22:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jul 2 23:01:05 2025 GMT
Not After : Jul 3 23:01:05 2025 GMT
Subject: CN=f6168c6c2a52d197280aac33fd9a142d83d1a6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:f4:44:80:9a:92:9d:2b:ce:5e:74:23:8b:
4c:df:ec:9e:f5:3e:d4:d4:fe:83:82:34:8b:1d:15:
5a:50:5a:c1:13:34:b6:78:35:6a:97:89:e0:f1:1e:
e9:01:60:42:ea:ea:bb:41:27:e6:19:d4:f7:1e:bc:
7a:f7:5f:00:bc:20:31:75:39:bb:7f:08:85:fb:0f:
e3:3e:8d:89:ba:25:17:39:07:b4:8e:48:1a:1f:b6:
18:a8:85:f9:55:0f:22:2a:ef:c5:f4:45:02:f8:be:
fd:cf:3d:5a:de:e3:e7:53:cc:fb:10:7b:1d:56:54:
fe:c6:3f:7b:b9:d7:82:84:12:d9:51:4d:f2:b4:c0:
3d:ac:88:7a:5f:ed:7e:fb:21:2b:0a:4e:36:3c:c4:
59:eb:7d:92:26:73:c0:91:ee:a9:a2:5c:eb:5d:a5:
b4:45:dd:54:d4:8a:11:ab:53:fe:da:01:61:64:55:
d1:b2:b4:8b:d0:00:92:e2:cb:b2:e6:29:da:29:56:
f1:30:cc:5d:72:f5:6f:68:c3:3c:a2:80:fb:a1:bd:
62:8a:59:28:66:58:7d:fe:91:42:f0:f4:08:ac:eb:
d1:40:df:a4:a8:59:3b:28:70:31:04:3e:e8:91:b4:
83:15:9b:14:05:78:2f:9d:ea:33:36:fd:52:a0:2a:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:8C:6C:2A:52:D1:97:28:0A:AC:33:FD:9A:14:2D:83:D1:A6:D8
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:92:ce:a9:d3:59:06:fd:d0:c4:86:a9:f3:cd:f2:b0:63:
17:b6:75:26:20:50:4c:e1:0a:4f:af:d0:94:a2:bb:e0:84:82:
bf:84:72:3b:b1:3c:95:b7:e6:77:1c:c9:b7:a4:c4:ea:9b:a1:
9e:60:f3:71:c1:ec:fc:89:fa:2f:30:18:55:39:ab:6c:cf:24:
56:a7:94:07:9f:3a:e2:7c:1e:a2:f9:2d:46:74:b6:33:92:15:
86:96:87:33:b3:9c:be:53:19:6b:87:e9:d8:cf:39:50:c5:19:
d3:1f:0a:5e:c1:ae:17:cf:15:6d:bd:01:a3:a5:49:6e:1d:3c:
2f:d8:0a:64:ae:0d:a2:d7:e9:44:ae:51:99:fb:ac:3a:2f:6e:
b4:e3:9c:22:c4:ea:a7:9a:4e:5e:ae:a7:42:8a:c8:82:0e:76:
18:e5:e7:6c:4f:4a:92:5a:80:0f:83:ba:c9:91:cf:60:92:26:
92:93:e1:02:5d:b5:35:cd:97:30:bf:89:75:f0:93:63:e8:58:
a9:2b:b8:32:ca:63:20:df:88:82:21:d9:4e:34:b5:f4:a5:a5:
4a:b2:a1:e1:9e:e0:82:3e:b9:c1:d7:c8:74:aa:7d:fd:40:c4:
d2:56:94:8e:6e:66:86:0e:f6:0e:9d:28:63:b7:0b:21:45:2b:
8a:60:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:57:19 2025 by rpki-client