Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: rv90pk7RhQF5r9MgQSU0aQuwsS27O3yELNEZItG/DyU=
Subject key identifier: E6:03:F9:F6:F3:0A:96:C2:B2:C3:6C:09:CD:D6:15:55:FA:A8:F6:52
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 01975BA551074CA16437E6E5DEE032E444C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 08DB
Signing time: Tue 10 Jun 2025 21:00:49 +0000
Manifest this update: Tue 10 Jun 2025 21:00:49 +0000
Manifest next update: Wed 11 Jun 2025 21:00:49 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: gYxyisC/NpmpwsQ9HAgmbozvD93+aeFngb42D681ocI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:51:07:4c:a1:64:37:e6:e5:de:e0:32:e4:44:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Jun 10 21:00:49 2025 GMT
Not After : Jun 11 21:00:49 2025 GMT
Subject: CN=e603f9f6f30a96c2b2c36c09cdd61555faa8f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:54:10:e7:5a:fe:13:44:6f:4a:b2:ca:f0:
a4:b4:b2:b8:14:a8:51:9e:72:24:4f:ec:60:6d:5c:
66:92:71:7e:56:8e:ce:e6:a6:c6:7f:4b:7d:f3:67:
5b:48:42:c7:38:78:2b:e0:2b:19:53:bd:79:7d:0f:
84:e6:78:2d:c5:2d:49:a1:08:b0:9e:0e:be:75:b4:
3a:fd:5a:99:b2:32:8c:47:17:8c:95:54:1f:06:a8:
3a:6a:3f:1d:b4:76:aa:54:72:ec:34:6d:f0:90:69:
4c:83:93:20:c2:af:8a:66:1d:98:46:88:c8:3e:b1:
1f:79:42:3c:18:22:a7:2a:7e:81:c5:b4:95:9e:90:
95:41:99:40:6e:37:94:e9:a2:c5:c1:38:87:db:ef:
3c:a3:94:e3:ed:35:c4:fb:d6:3e:0a:3c:14:37:41:
f9:00:b9:7d:c1:cc:c9:41:27:2d:55:3f:e3:cf:6d:
1e:5d:c0:5e:d8:85:1a:02:da:60:81:f6:66:23:11:
8d:44:f8:6e:3f:35:64:dc:a0:f3:5a:fd:32:ee:c6:
a0:be:8c:aa:86:36:60:58:68:67:11:36:2c:78:04:
b4:d9:42:b1:25:25:29:ac:5f:e3:98:31:2e:c9:81:
1d:77:2a:4f:89:24:09:f6:04:16:08:55:76:df:81:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:F9:F6:F3:0A:96:C2:B2:C3:6C:09:CD:D6:15:55:FA:A8:F6:52
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:16:33:69:c4:53:44:55:15:e4:91:34:2d:73:4e:21:be:
ba:be:f1:59:03:3a:91:f1:8c:07:5c:59:94:00:dc:e7:d8:bc:
1b:35:4e:c1:8e:af:6d:ef:55:ce:10:2e:14:78:8d:58:c9:6a:
1c:50:ef:a6:f8:a5:60:28:7e:5e:15:de:df:d2:d6:75:30:fb:
cd:e6:b1:2f:6c:2d:36:ff:8c:81:26:40:9a:31:6b:68:e0:51:
fa:69:46:fe:fe:e7:21:d8:ed:03:36:84:b3:20:5a:5d:d5:9d:
c1:85:7c:00:0c:98:2b:16:c8:ee:14:d3:11:62:fa:c8:4e:93:
04:28:50:d4:eb:bb:e9:fa:42:89:20:a6:97:bc:bf:83:b7:f9:
3c:7e:1f:6e:ac:40:9f:29:c3:8f:92:19:26:c7:73:c5:f8:89:
15:3f:76:7e:c6:b0:3a:96:44:37:64:43:3c:d6:47:fc:3d:2d:
a3:36:74:23:f6:0b:fb:e6:f5:18:6e:be:8f:43:f6:78:48:a5:
5d:70:3a:b6:e7:6d:67:d5:ba:89:9b:22:46:b4:22:1d:70:2a:
0c:1a:dc:9e:5d:78:3f:1e:98:4e:9e:f9:56:83:f1:08:e7:ba:
01:3e:7b:2d:bc:25:cf:c0:68:87:8f:56:d2:49:b1:e5:f7:cc:
34:e3:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:36 2025 by rpki-client