Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: FbsH4BY8lfwUgpjNdrrhrmYFbg33Ta8zNdM+wI88fmU=
Subject key identifier: F6:25:60:B4:70:D2:F3:24:09:E9:B0:B5:E5:80:03:08:71:64:AB:D3
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01975459D3F93A298040BAD4B5DDB12F04B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 13C6
Signing time: Mon 09 Jun 2025 11:01:02 +0000
Manifest this update: Mon 09 Jun 2025 11:01:02 +0000
Manifest next update: Tue 10 Jun 2025 11:01:02 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: Lqf9D3T6Km5h1Sovs6aqXIxrmZlDIxfMuVEI3d4dYkE=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:d3:f9:3a:29:80:40:ba:d4:b5:dd:b1:2f:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jun 9 11:01:02 2025 GMT
Not After : Jun 10 11:01:02 2025 GMT
Subject: CN=f62560b470d2f32409e9b0b5e58003087164abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:5a:8f:72:e5:80:c5:a1:4e:6b:64:12:2d:
d3:14:83:1a:ec:df:36:e3:84:2c:9b:93:cd:48:97:
3d:f7:95:bd:a9:08:9c:18:05:9d:2c:0e:c6:78:8d:
c0:a4:ea:8a:9f:7f:e1:f9:b6:d7:46:e9:e1:29:46:
2d:55:3f:81:c7:6f:93:a7:cb:08:f2:30:7d:62:db:
4d:48:bb:ed:06:c9:74:4f:4e:f8:d0:c3:a9:c2:40:
ce:07:09:14:4f:07:63:7c:ab:04:cb:a1:56:3e:38:
52:ef:dc:10:f3:91:57:60:db:38:8d:1f:1b:ac:26:
f9:49:aa:6d:c8:71:ab:70:3a:10:28:a4:c8:7b:34:
dd:0a:c0:aa:31:5a:61:d1:48:23:d8:f5:3b:64:47:
04:48:a4:e7:82:ff:34:7d:d4:68:fb:36:02:2d:80:
9f:f6:69:9d:df:ae:e1:4f:ec:b1:4b:ff:24:dd:86:
d8:7a:cd:06:8a:45:8e:68:71:59:f3:8c:33:ce:e6:
b2:0b:df:18:63:61:10:6a:34:6a:51:a0:92:2c:94:
20:79:76:1d:37:83:18:3a:a5:c0:ce:04:c4:41:ae:
3e:f9:60:72:76:5c:55:6d:16:5a:c7:09:f7:ca:c5:
ea:e3:27:25:dc:07:67:e0:ee:a5:d3:4d:8d:b8:ce:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:60:B4:70:D2:F3:24:09:E9:B0:B5:E5:80:03:08:71:64:AB:D3
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:2a:85:e7:8e:7d:0b:2a:27:89:f4:e9:5f:6b:8f:fc:e8:
2c:24:c1:b1:59:28:d4:34:4e:0b:af:b1:3d:42:32:5c:1d:fc:
94:6c:1b:5d:45:d4:ac:e4:f3:8e:32:8c:ba:55:ac:ae:41:a7:
05:b5:11:d7:b0:49:c9:d5:f7:c9:40:99:cb:0c:a7:37:a3:dd:
e4:85:ec:b8:38:67:62:37:ab:2f:47:1c:7e:c1:1a:c8:b0:d7:
11:af:3f:7a:96:00:38:8f:80:b9:a6:18:a7:02:af:eb:1f:f0:
2e:76:b3:e0:90:02:4f:e6:2c:f7:d0:ad:db:2e:0c:61:53:22:
9e:d4:06:b1:a4:9a:6d:7f:91:48:65:5a:f9:04:2e:8c:99:29:
52:ce:c1:ba:e2:70:34:b8:c5:41:77:6c:b8:d6:78:a2:07:71:
19:85:c3:c7:e8:03:7e:de:6a:84:78:b7:72:b0:db:af:bb:9b:
44:ee:eb:32:0c:1c:57:fb:f9:ff:40:5f:3d:9c:82:8a:85:8f:
2f:0a:44:0c:4d:99:86:82:86:d1:bb:c5:2e:ec:9e:2b:76:fc:
20:27:bd:5c:46:dc:84:de:03:b4:0f:18:8c:dd:60:65:32:09:
b7:e7:03:b7:28:b0:4d:6f:1b:52:b3:a3:ba:07:45:4c:ba:03:
7c:d6:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:53 2025 by rpki-client