Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File: 6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier: AkYVwIDGXfa9kq63eW1iJLFDarl627md3dFbrYYI+9Y=
Subject key identifier: D4:24:92:81:27:78:D1:EC:D6:64:F9:F1:21:D9:7F:4C:A8:60:02:C8
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer: /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial: 01975611727187E8C34BA7C01DE554235AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 19:01:13 +0000
Manifest this update: Mon 09 Jun 2025 19:01:13 +0000
Manifest next update: Tue 10 Jun 2025 19:01:13 +0000
Files and hashes: 1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: CAd3rhH2DaTGmwE4LsIhLelTcE2SfO/urOCkTpEhQK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:72:71:87:e8:c3:4b:a7:c0:1d:e5:54:23:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Validity
Not Before: Jun 9 19:01:13 2025 GMT
Not After : Jun 10 19:01:13 2025 GMT
Subject: CN=d42492812778d1ecd664f9f121d97f4ca86002c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:3f:13:9e:23:80:f7:26:88:91:f2:9b:2b:
fb:9c:22:8c:3c:92:1a:91:f2:3f:26:70:13:08:e1:
10:65:05:33:a9:a3:99:8e:68:9e:b6:b0:d4:79:1d:
76:db:5e:1c:7a:3f:1e:48:c8:be:0d:1e:93:a8:46:
4f:c5:57:41:85:52:2f:a6:69:41:a8:7c:68:b6:6e:
e8:36:90:15:a2:c8:85:5f:b8:91:77:29:86:13:c2:
9e:6d:46:94:18:49:73:2d:27:78:36:fd:1c:c3:47:
f4:60:fc:ed:75:04:d0:b0:0c:87:e5:94:1c:35:3a:
df:4d:6e:47:02:c0:05:c0:cb:37:96:f4:18:49:b7:
93:85:23:c4:de:23:83:65:3b:19:e4:96:cd:8e:d0:
d9:a4:2c:d1:b0:68:39:b4:96:65:b3:a1:2a:fd:56:
77:09:22:b0:3a:c6:a2:03:89:74:89:65:fb:71:34:
a7:fb:1e:ba:1d:58:b5:b0:fd:c9:70:7a:fe:ea:bf:
3d:a2:4d:23:a0:9e:d1:be:0b:52:d2:33:d6:2b:d6:
a3:75:4e:1c:3a:4b:24:d3:5a:58:b4:09:51:68:ff:
b1:c6:9a:ae:df:48:8b:65:2c:ad:b0:f3:d5:46:0e:
67:60:a4:9c:7d:6b:ad:55:f0:b0:aa:9e:f8:ad:e0:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:92:81:27:78:D1:EC:D6:64:F9:F1:21:D9:7F:4C:A8:60:02:C8
X509v3 Authority Key Identifier:
keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ff:f6:8e:1e:a7:2d:14:62:c1:79:82:5a:99:9d:7b:bc:bf:
0e:91:43:e6:43:4f:86:cb:21:25:1d:ae:fd:f5:95:e3:f5:e9:
92:b0:b4:1b:07:98:bb:e3:d9:79:6e:21:5f:bb:56:6a:b1:c9:
3e:83:f3:d6:93:4e:52:02:37:04:3a:39:53:ce:9b:05:7c:52:
18:34:81:00:d7:3d:9f:82:76:2b:51:d9:b7:01:c4:19:f0:2b:
6d:42:19:68:c0:cf:3c:55:60:d1:92:b1:02:12:ea:4c:4a:2f:
7b:a9:5f:32:d7:5c:05:28:02:93:3c:94:58:64:a3:4b:98:27:
aa:6e:01:4a:7d:d2:fa:ea:ff:89:3f:f0:63:21:a1:31:c8:ba:
1b:94:9f:28:19:fd:18:02:4a:b1:1e:c6:22:13:d2:22:ff:28:
2f:45:29:b9:b5:72:54:c2:a6:92:a7:b4:88:b3:54:80:ab:1a:
40:cc:9e:2f:8d:92:c3:77:9f:1f:63:3a:7f:7b:72:0d:52:b0:
c5:ff:19:b8:36:53:86:6c:2d:c2:47:0f:f2:49:19:69:2b:8c:
19:fd:22:1a:c8:63:4e:ee:4d:fb:6a:59:8e:8e:53:0b:ad:93:
f1:f6:77:f3:db:f2:82:b9:13:c9:76:d2:7d:e5:19:56:ed:d4:
c0:e8:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:17 2025 by rpki-client