Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: uMROOwUb8QabVZaT+XqMtqsOerq0io7/drx5OENhGVo=
Subject key identifier: D1:2E:42:32:26:65:EC:12:3F:8B:BD:0A:A8:59:2A:1E:9E:F2:D4:A2
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 019763963BFCF5388FF328F6AC5E5E8300ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 1557
Signing time: Thu 12 Jun 2025 10:01:19 +0000
Manifest this update: Thu 12 Jun 2025 10:01:19 +0000
Manifest next update: Fri 13 Jun 2025 10:01:19 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: C+nHV4/IhxBk54wNm8h5KNbiY+lQdMLchY+w6bcA6CU=)
2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:3b:fc:f5:38:8f:f3:28:f6:ac:5e:5e:83:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: Jun 12 10:01:19 2025 GMT
Not After : Jun 13 10:01:19 2025 GMT
Subject: CN=d12e42322665ec123f8bbd0aa8592a1e9ef2d4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:52:87:57:9a:b7:25:5d:cc:e4:bb:80:37:
a8:8d:37:7a:c0:46:a6:68:c4:1e:f8:a3:f2:49:94:
a1:3b:94:2b:ab:28:d2:fe:4b:50:81:c9:59:80:f0:
9d:0b:11:04:9c:62:1e:ed:e3:2c:d4:da:2d:38:1d:
74:d9:06:0e:7f:ad:d7:76:d0:65:55:7e:1c:1b:69:
f2:13:8a:b7:8b:1c:97:d4:c5:b0:dc:dc:cb:71:cc:
69:a6:7d:d3:66:13:e4:f3:93:32:37:a2:59:31:f5:
6a:e5:91:d9:93:b3:78:74:3c:67:20:ce:e6:91:f8:
ee:f2:65:54:06:08:06:9c:ef:dc:b7:d7:de:87:26:
e5:86:89:19:91:68:34:25:cd:d7:da:40:76:0b:4e:
db:c6:d3:24:6d:6c:7f:75:82:ec:54:39:ca:93:55:
5c:75:9f:e0:50:92:81:77:dc:f5:88:d5:be:a6:44:
f7:c4:aa:ae:68:c7:c0:82:92:c5:5e:38:a5:8d:f8:
3e:b0:54:47:ee:5f:02:eb:0c:ea:39:ef:a8:7a:5e:
e7:6e:eb:72:4f:2c:f6:88:b7:d9:89:a9:6f:88:55:
68:f4:de:68:ed:af:96:df:84:87:b3:6d:eb:9b:c7:
ae:60:ff:f4:6b:dc:95:23:6e:b2:58:d7:b0:0e:f1:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:42:32:26:65:EC:12:3F:8B:BD:0A:A8:59:2A:1E:9E:F2:D4:A2
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:53:31:b3:5e:f1:79:90:6c:a1:6f:25:b8:cf:27:4a:74:
49:8a:53:0d:94:09:8e:c7:aa:75:21:25:c7:2c:34:28:3a:cb:
b3:1a:0f:bf:33:a2:31:4d:4c:4b:bf:6f:79:98:19:48:f8:bf:
da:15:72:9a:e9:53:15:ea:7a:79:8e:fc:dd:d8:0c:8a:ac:ce:
77:38:c7:96:f4:92:f4:23:2a:27:d3:8e:46:d7:73:9f:1f:16:
3a:98:b1:52:c2:07:22:6c:32:65:3f:47:ba:24:ee:87:f5:ae:
47:52:c8:1b:88:df:5a:c7:5f:20:62:01:df:4b:f5:f9:c7:02:
c6:e3:1d:95:50:75:0f:8c:9f:54:6b:5a:9a:61:ec:7a:1e:ec:
40:22:73:0e:dd:47:73:1b:4d:42:77:9f:39:1b:7e:72:20:68:
48:87:a0:2e:23:a7:82:d3:ed:5d:d1:05:1d:15:c7:cd:33:19:
af:74:2e:96:c4:32:f2:36:64:01:8a:1f:7e:7c:67:6b:f5:28:
82:3d:d1:5e:42:ee:7a:b4:44:13:5b:e5:96:b0:fb:e8:27:ab:
14:a2:3b:fd:b2:c8:cc:62:d4:8a:3c:56:ed:57:cc:f3:83:44:
45:28:ce:95:f8:f9:96:02:cb:aa:36:e2:77:70:1d:05:71:b3:
60:dc:a4:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjljv89TiP8yj2rF5egwDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3
OTRjM2YwHhcNMjUwNjEyMTAwMTE5WhcNMjUwNjEzMTAwMTE5WjAzMTEwLwYDVQQD
EyhkMTJlNDIzMjI2NjVlYzEyM2Y4YmJkMGFhODU5MmExZTllZjJkNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJSh1eatyVdzOS7gDeojTd6wEam
aMQe+KPySZShO5QrqyjS/ktQgclZgPCdCxEEnGIe7eMs1NotOB102QYOf63XdtBl
VX4cG2nyE4q3ixyX1MWw3NzLccxppn3TZhPk85MyN6JZMfVq5ZHZk7N4dDxnIM7m
kfju8mVUBggGnO/ct9fehyblhokZkWg0Jc3X2kB2C07bxtMkbWx/dYLsVDnKk1Vc
dZ/gUJKBd9z1iNW+pkT3xKquaMfAgpLFXjiljfg+sFRH7l8C6wzqOe+oel7nbuty
Tyz2iLfZialviFVo9N5o7a+W34SHs23rm8euYP/0a9yVI26yWNewDvEgNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEuQjImZewSP4u9CqhZKh6e8tSiMB8GA1UdIwQY
MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt
YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj
LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz9TMbNe
8XmQbKFvJbjPJ0p0SYpTDZQJjseqdSElxyw0KDrLsxoPvzOiMU1MS79veZgZSPi/
2hVymulTFep6eY783dgMiqzOdzjHlvSS9CMqJ9OORtdznx8WOpixUsIHImwyZT9H
uiTuh/WuR1LIG4jfWsdfIGIB30v1+ccCxuMdlVB1D4yfVGtammHseh7sQCJzDt1H
cxtNQnefORt+ciBoSIegLiOngtPtXdEFHRXHzTMZr3QulsQy8jZkAYoffnxna/Uo
gj3RXkLuerREE1vllrD76CerFKI7/bLIzGLUijxW7VfM84NERSjOlfj5lgLLqjbi
d3AdBXGzYNykrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:34:20 2025 by rpki-client