Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 8u4jZehrkv3DZxej4gygDR8tCAH2NAWSlSCG2xhMs2o=
Subject key identifier: DF:23:9C:E7:07:40:1D:64:0D:4A:16:F7:77:AF:29:D8:C3:6E:4B:79
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01975C49EB44F1865179185F7598CAEF55AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0E89
Signing time: Wed 11 Jun 2025 00:00:37 +0000
Manifest this update: Wed 11 Jun 2025 00:00:37 +0000
Manifest next update: Thu 12 Jun 2025 00:00:37 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: +q4YWl+fe8RHVbiNrO4QJ62bMNeiHoMNLgwq7FH6a9Y=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:49:eb:44:f1:86:51:79:18:5f:75:98:ca:ef:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jun 11 00:00:37 2025 GMT
Not After : Jun 12 00:00:37 2025 GMT
Subject: CN=df239ce707401d640d4a16f777af29d8c36e4b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:0d:0d:07:a2:53:69:dd:64:e4:d6:e5:35:
31:06:7c:79:c9:79:f7:f3:f6:ff:a4:ad:d8:9f:80:
c5:b5:67:ad:5b:66:22:40:5e:17:63:ed:c1:59:45:
20:10:c7:08:ff:b3:b0:83:5b:18:5d:b9:78:fe:db:
e4:6e:e2:a8:ac:be:af:f5:e9:4a:f8:ed:7f:4f:72:
8f:92:cf:b8:10:d0:ae:b8:dc:68:27:9d:30:58:8a:
f1:0f:e9:9c:2f:27:ed:f2:2c:ed:23:8b:b4:32:bc:
f2:15:f1:01:f3:ba:25:87:6d:ad:af:14:c5:30:91:
0d:80:22:45:39:fc:b3:a5:e6:f2:a8:f8:8b:40:7e:
53:71:bc:03:6f:a6:11:48:df:fd:84:f9:99:86:57:
56:87:53:46:f3:3d:5a:a7:69:a2:2b:d1:67:09:ae:
3e:e2:41:90:aa:21:da:1e:82:13:b6:2b:c9:7e:60:
fb:12:60:c0:c7:a5:5f:31:89:42:ff:b3:3a:7c:d1:
1b:25:34:a8:ab:81:0b:91:57:5b:23:53:75:28:06:
71:51:81:3f:a9:54:3a:8e:98:a8:3f:3e:7e:ed:fa:
e3:72:7b:eb:37:8b:bc:5c:e1:d3:24:4f:47:9d:79:
dc:c2:4d:01:f3:e6:93:c1:2d:70:31:34:bd:10:8d:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:9C:E7:07:40:1D:64:0D:4A:16:F7:77:AF:29:D8:C3:6E:4B:79
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:02:fe:f8:46:ed:a9:ae:21:4a:0a:f3:0c:ce:33:c8:df:
d1:c9:34:f8:6d:c9:4c:e9:d3:ea:ab:18:31:82:62:76:50:78:
01:89:e2:13:65:67:29:7d:82:05:7b:05:01:19:e6:e0:8e:d0:
2d:63:bc:50:6c:9a:73:fc:2b:42:38:a9:33:c4:65:c7:39:03:
b2:ac:74:8d:16:a0:2d:ca:1d:94:77:b2:69:a6:3c:8a:d8:02:
1a:14:28:b0:fd:62:bb:31:be:77:f9:4d:c1:0e:a9:6d:6c:d4:
02:1f:4a:28:fd:57:75:59:95:66:be:65:4d:b0:74:e3:67:80:
55:42:ab:f6:74:4b:53:76:7d:ff:54:0c:ab:f6:41:5e:50:6e:
a1:d7:96:f8:e2:56:89:de:ad:c4:ee:b2:9e:7a:31:82:c7:f1:
da:f0:28:a1:df:a6:4d:72:34:09:24:36:78:48:f2:7b:3f:ef:
5c:ec:be:3a:d3:bf:ca:7b:f0:d8:e7:81:b7:b9:ad:25:e2:31:
5d:1c:08:2d:3c:5c:0f:66:ff:c9:e1:79:9a:06:ee:4f:a6:f5:
90:13:b9:3e:3b:72:1b:0a:d1:f1:6c:8c:17:17:fb:b9:91:07:
f6:98:99:93:a2:b2:cb:db:05:ff:07:33:69:e3:10:16:bf:2a:
42:2b:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:54:05 2025 by rpki-client