Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier: oLWXG7XJGorAqMnovaW3fshBR0gDGJRpWpsbJa0smRc=
Subject key identifier: 3F:29:E1:78:C2:A5:EC:FC:BD:E7:8B:DB:95:5D:70:14:B0:BF:AA:53
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 01974AB1C436FC2A5339068A80C9DAF66E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number: 1540
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: xh0WsDAcCTeqTztVc+zlhiph/4AQv3ixrW+k20fTXMc=)
2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c4:36:fc:2a:53:39:06:8a:80:c9:da:f6:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=3f29e178c2a5ecfcbde78bdb955d7014b0bfaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:5f:6e:08:ca:8f:bd:85:77:40:c8:78:a3:
e1:6f:25:38:e9:34:35:a5:e3:6b:2d:cc:fb:bf:89:
b3:b0:32:6f:6f:10:8c:79:dd:77:88:01:d1:c1:26:
be:62:f0:b1:0c:3a:30:2f:13:ea:69:c4:52:80:01:
3c:36:83:20:cf:ff:19:5e:fd:9c:ba:22:c3:b6:aa:
43:1a:d3:e2:7b:bc:99:d2:5a:5a:c1:f1:44:35:b8:
df:43:ab:81:07:d6:ea:ab:c7:75:dc:c4:15:92:a9:
bf:3e:1b:68:10:4a:1e:5e:80:cd:dc:f6:65:87:53:
05:54:35:1f:45:82:93:74:a8:28:54:42:f3:9a:28:
28:a8:05:ef:62:1f:d6:2c:e3:8e:98:e9:0d:d7:46:
e6:b8:65:b4:dd:ce:dc:2c:96:8d:81:3b:70:f5:52:
d7:dd:15:35:bc:fb:b7:d8:46:b7:85:bf:84:67:48:
c5:ea:32:52:0e:3b:8b:52:85:e8:5b:c5:d6:cb:65:
79:fa:04:4f:b8:41:42:00:51:10:13:73:cc:7c:84:
2d:3a:0f:6e:4f:d5:a6:8e:0c:9d:22:79:22:10:6b:
9a:52:ce:51:9c:0b:5c:88:d5:8d:a8:a2:d2:c6:ff:
93:53:52:62:14:9b:3f:d8:f7:22:8a:21:45:f8:f3:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:E1:78:C2:A5:EC:FC:BD:E7:8B:DB:95:5D:70:14:B0:BF:AA:53
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:d7:a5:0d:06:04:44:41:2a:95:5c:63:53:ca:b1:ff:5a:
83:02:b1:76:d7:d7:3c:2c:8b:b0:c1:28:91:32:e6:56:ba:74:
cc:32:7a:51:08:e0:ea:65:52:8c:58:5f:ab:a7:c8:99:bb:5a:
68:d6:7b:89:e4:18:1e:ae:fb:43:1e:bc:d3:fe:91:73:34:c2:
48:90:06:e6:8c:a3:88:c4:90:3e:ce:9d:8b:42:53:e3:8f:1b:
e5:06:97:78:e9:29:5f:bc:88:22:9e:88:5b:0c:c6:31:f3:b8:
58:a0:ae:2a:bf:ea:07:ce:72:fd:0d:b8:c3:65:c6:05:e5:0f:
15:33:0c:92:a3:f5:d6:5a:d1:43:2a:e6:e3:7a:ad:c9:2f:b1:
f5:69:e1:3d:0e:ec:03:0e:dc:12:30:1d:00:98:30:e6:65:b5:
37:14:0f:1e:7f:7d:98:a8:93:f6:87:b7:c4:8f:d6:89:06:d4:
b4:9c:c1:f4:69:cd:28:85:45:0e:b0:da:32:ef:0f:b8:ba:f3:
1d:26:ee:85:97:85:78:3c:56:e6:fe:f5:b8:a5:d4:c2:3b:7b:
08:a9:03:19:31:3f:15:71:37:84:35:38:20:fc:c6:71:f7:50:
53:a1:ca:55:d0:9a:05:4a:a1:ae:76:12:7d:6b:16:cd:a3:25:
aa:e8:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:24:07 2025 by rpki-client