Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier: ariqAg+NQ3tce4cDBPj1lzTWWdP2QKI8gc82QcCDG14=
Subject key identifier: ED:6A:CA:17:44:E1:7F:FE:AE:F9:2D:D0:06:BB:E0:58:7F:E7:0A:D7
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 019748C330E0D6743FDD9E1E59E5F8CE18E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number: 0D1A
Signing time: Sat 07 Jun 2025 05:00:40 +0000
Manifest this update: Sat 07 Jun 2025 05:00:40 +0000
Manifest next update: Sun 08 Jun 2025 05:00:40 +0000
Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: k/gGsJoEkkNRIyPTGCUOGtKjs4ZpKFoGLieHkcJqYFc=)
2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:30:e0:d6:74:3f:dd:9e:1e:59:e5:f8:ce:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Jun 7 05:00:40 2025 GMT
Not After : Jun 8 05:00:40 2025 GMT
Subject: CN=ed6aca1744e17ffeaef92dd006bbe0587fe70ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:84:17:c4:b7:1d:5c:33:b7:6d:fe:44:30:
69:a4:91:11:ab:9f:43:42:71:70:4f:c5:a9:72:67:
0a:db:83:12:99:78:34:3d:33:90:0d:ba:6d:bc:eb:
c8:12:e7:5b:f0:d2:f2:e4:2e:5b:32:1d:4d:4b:18:
c7:a6:d3:25:64:a9:dd:69:f4:13:ce:37:e9:b2:24:
5b:d8:fd:93:c3:3e:b8:13:d6:55:5b:c9:1b:d5:b2:
65:ad:37:6f:90:66:a4:4e:6e:b7:d3:2e:11:2d:bd:
69:7b:a5:77:70:62:4b:e3:2f:ed:ad:6d:2a:33:45:
a4:03:20:1c:7d:a2:0c:95:f1:5e:93:57:62:98:d0:
9a:6e:03:54:21:2c:5b:21:c1:f2:41:b5:51:38:7e:
73:36:9e:25:c2:a7:7c:5f:39:c2:43:25:44:6e:0d:
ae:3f:f7:15:1c:6a:a5:bc:03:c6:8e:24:70:e9:c6:
ca:40:73:d8:74:b3:65:ac:5c:4b:46:09:52:94:a4:
96:8d:1f:e0:06:df:f8:e6:b3:b0:04:e9:95:30:8e:
bd:6e:22:41:80:31:ea:06:d8:8d:4d:23:01:38:9a:
68:2c:74:0c:be:7d:49:0d:21:cf:fe:f8:ad:16:42:
60:b8:40:97:3f:0d:8c:ef:40:d8:fb:59:33:e7:1b:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:CA:17:44:E1:7F:FE:AE:F9:2D:D0:06:BB:E0:58:7F:E7:0A:D7
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b6:fb:7c:a0:87:6c:53:f8:d3:a1:c2:34:cd:5c:80:a8:ae:
ec:94:5c:e2:7e:2a:26:52:81:d2:d5:67:5a:73:d1:86:a2:d7:
ed:72:4e:e0:71:d6:46:ca:e6:13:ba:2a:11:b2:64:88:6d:eb:
ad:2d:ea:67:4f:3e:da:16:31:a4:8d:94:9c:14:67:09:f1:82:
4d:70:3c:56:16:3a:81:10:af:26:d6:f0:e1:21:33:85:cf:a7:
72:02:ba:3c:bf:7d:92:bd:af:90:78:d7:78:d8:e1:f8:6e:45:
0f:a4:39:60:59:71:b9:c9:eb:33:98:4e:0b:d5:58:4a:73:62:
8b:eb:25:e2:e7:9a:da:03:79:b8:cf:bd:64:46:38:8a:f4:be:
95:db:66:30:7a:46:1f:69:7b:3b:bd:26:f6:d2:79:8b:44:99:
6d:24:bf:00:21:53:4c:f1:fd:11:46:04:27:5c:de:3e:41:b5:
a3:51:1f:64:0a:15:38:58:5e:f4:9c:6b:c4:16:55:d0:43:84:
2d:44:71:ae:c1:71:35:e8:bf:51:81:98:8a:0b:b3:71:fd:9b:
d7:d2:1a:59:5b:58:06:b4:f7:76:2f:a4:23:b2:9e:7f:82:0e:
c4:76:06:ba:10:78:9c:a1:7b:d3:b6:05:9f:d7:15:d8:5f:9f:
26:de:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:05 2025 by rpki-client