Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: VKB7l1EBJQIcA1BeZRG+3QZoAQs4U6GzgbkOzU5g3M4=
Subject key identifier: 40:6B:45:E0:B3:C0:5C:E4:79:A2:9C:2A:3E:52:01:DB:B4:6F:23:6E
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 019749684F1573FE0C7333760B00342A11F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0CF3
Signing time: Sat 07 Jun 2025 08:01:02 +0000
Manifest this update: Sat 07 Jun 2025 08:01:02 +0000
Manifest next update: Sun 08 Jun 2025 08:01:02 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: 1RP02dfTpuTij/w/oxcnz+JnTs36WD3Pv9X1FbJrDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4f:15:73:fe:0c:73:33:76:0b:00:34:2a:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Jun 7 08:01:02 2025 GMT
Not After : Jun 8 08:01:02 2025 GMT
Subject: CN=406b45e0b3c05ce479a29c2a3e5201dbb46f236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:39:96:4c:fd:89:3a:20:c2:1d:c1:40:35:
6c:2b:d4:4e:86:51:7c:e3:8e:06:25:d3:cc:06:d2:
d5:81:f1:70:79:0a:49:85:de:2d:f4:1b:85:17:f8:
a8:7b:55:5e:2c:45:2e:2a:25:01:b7:a8:5d:c1:42:
04:0e:9f:29:25:d3:f3:a3:2f:ec:ff:cf:9a:33:70:
c6:9e:c0:92:e4:f2:d3:ac:df:63:d3:46:4a:2f:f6:
cb:ef:f8:d3:da:18:a2:14:68:0f:71:c2:b4:22:4f:
43:aa:dd:40:cd:56:f2:bc:27:67:e5:2b:99:7d:53:
05:c5:d9:09:f2:53:6f:59:30:15:86:3a:8d:b6:31:
d5:31:bc:a3:57:f5:bb:d4:1c:a7:f5:b4:4a:58:02:
ea:db:c3:62:36:61:51:39:58:58:a7:3a:47:8a:6e:
65:68:3b:7f:f6:35:2c:22:84:f1:1f:47:d7:6f:e4:
07:82:c0:23:ec:6c:07:85:6a:3f:0b:ab:75:4b:5a:
92:bf:89:15:b5:10:80:19:f2:fb:da:93:70:b4:48:
0a:f9:15:9e:40:98:bd:c1:13:5f:f8:41:57:8e:6c:
93:d3:6e:55:c2:67:7e:8b:4f:e2:de:47:65:04:cd:
3c:17:26:4a:16:6a:3e:87:9d:d5:dc:98:1f:02:4d:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:45:E0:B3:C0:5C:E4:79:A2:9C:2A:3E:52:01:DB:B4:6F:23:6E
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:47:ea:7d:03:3d:ae:58:da:4a:2f:31:c2:d5:b5:2e:6d:df:
a9:70:f3:b0:a3:37:7b:ba:02:51:fc:25:58:bf:a4:96:d3:d2:
4f:cc:07:b5:ac:db:85:f8:90:00:9f:b2:96:26:06:77:68:85:
7b:c1:48:71:c6:af:66:e4:18:04:cd:3f:66:c7:75:0b:a6:5b:
71:cb:96:5e:92:22:da:4a:cc:85:55:b3:1a:0d:ef:bb:34:d9:
64:4b:1b:ef:3f:e7:7d:d5:da:bc:5a:91:53:5e:c4:ce:50:57:
b4:1c:fc:a5:2f:48:c4:46:ef:53:b3:a2:c7:90:8c:f0:62:c6:
6d:30:d8:7d:ed:26:dc:ed:1e:8b:62:35:ac:96:88:fd:01:15:
fa:0f:f3:13:47:74:8c:e0:30:08:37:42:95:fe:31:90:0b:ea:
ea:d3:51:17:ab:bf:20:2c:7a:6c:89:ca:44:43:0d:18:37:78:
32:28:da:47:da:b0:16:78:d1:66:d0:02:55:f4:04:c5:2a:cc:
74:fb:eb:00:d5:97:59:a0:fb:8f:c2:31:fc:a3:bb:0e:fa:94:
0c:41:e7:b9:82:e7:be:ae:82:6b:de:cf:57:51:31:17:c2:ac:
f3:e5:0f:57:c9:34:0d:f6:20:bc:d6:16:b1:c5:c5:af:83:85:
64:b1:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:55 2025 by rpki-client