
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 2GW5tXKqfo45lGOLzia3IbrBDZxxOSinXg7zqJ9dkxE=
Subject key identifier: 25:E1:75:A7:F8:EF:96:51:85:A5:D9:D1:56:65:3A:4F:15:22:C6:86
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019764036D2A7FE1F6F9E83076745AE307EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0E8D
Signing time: Thu 12 Jun 2025 12:00:35 +0000
Manifest this update: Thu 12 Jun 2025 12:00:35 +0000
Manifest next update: Fri 13 Jun 2025 12:00:35 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: eEzPK8T7m72Zlv5fkY2xrHCYeEbBTBe772BrUNPuHu8=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:6d:2a:7f:e1:f6:f9:e8:30:76:74:5a:e3:07:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jun 12 12:00:35 2025 GMT
Not After : Jun 13 12:00:35 2025 GMT
Subject: CN=25e175a7f8ef965185a5d9d156653a4f1522c686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:9b:bc:d6:4f:72:42:98:c9:01:33:1e:85:
4b:0e:e1:d4:02:fc:9b:21:d2:74:cb:9a:51:b4:e9:
1d:17:07:1e:6e:ab:16:ef:65:11:c6:3d:eb:31:e9:
53:3c:cc:77:e0:78:5f:2c:5a:ee:1b:eb:c8:70:98:
46:74:28:d2:08:8b:f6:a8:95:ed:12:72:0b:a3:6b:
7d:7f:62:2b:78:4e:a0:23:1b:e0:18:14:fe:5e:f1:
fc:90:5d:27:d7:28:31:0e:02:6c:b2:f5:d3:7d:cb:
b7:fb:2e:15:62:88:9f:39:af:50:74:56:77:53:39:
c1:76:41:79:a9:53:97:b5:b1:07:f8:f7:64:e6:4c:
29:7b:93:32:e1:7b:38:47:7b:15:e3:98:40:43:d2:
b7:8b:6d:d0:fa:c2:74:58:2c:7f:5a:9e:d7:d7:40:
e8:07:19:4a:b4:41:4c:80:b9:72:f6:fe:b5:e8:2e:
2e:7f:4b:85:9e:39:87:21:96:75:4c:13:24:04:8a:
8a:c2:b1:52:e4:4c:08:43:56:cf:58:0d:67:6e:59:
62:45:ea:0a:80:5f:a7:6b:66:74:e2:ef:0a:71:ad:
c3:71:30:80:44:57:4b:9f:e1:78:59:7a:49:f6:99:
55:99:c8:16:e6:91:0d:68:65:c8:f2:b3:1f:63:7d:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:75:A7:F8:EF:96:51:85:A5:D9:D1:56:65:3A:4F:15:22:C6:86
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:33:57:ee:76:da:98:ef:c0:24:8d:47:7b:1b:ca:b3:b6:
e2:2e:99:dd:c3:54:40:a0:87:97:9c:8d:8d:ae:bf:d0:e5:05:
c0:f7:17:a4:d7:a1:80:74:2d:6d:49:07:cf:90:2b:8d:ae:31:
91:a9:db:43:91:09:0e:c1:3f:e6:fe:75:9f:30:14:34:8d:25:
53:ea:6c:b6:82:c7:a1:27:7e:6e:28:09:9e:59:55:14:fc:0c:
51:ce:44:67:2b:52:1f:2d:46:d9:8e:ba:5d:9b:78:3b:df:c0:
6d:78:1e:1b:95:8e:8e:36:9f:37:9f:c5:6d:a8:d9:9a:a2:c3:
60:41:c1:b7:b5:0f:3c:40:55:9f:b6:ba:86:6e:39:b8:7f:2d:
5f:3d:76:13:b1:a6:13:3b:d4:04:58:53:ef:a2:4c:87:77:14:
14:56:b9:00:25:bd:c9:48:33:11:b2:0d:6f:ad:b2:3a:05:e3:
d3:1d:70:c8:0d:ba:08:5d:36:3e:34:d6:d1:40:ba:46:3a:dd:
b4:c6:85:49:98:98:d3:f2:cc:44:86:13:28:b6:a0:82:b0:66:
6f:ee:71:a9:dc:4e:35:bb:5d:fc:33:8f:4a:d3:6b:db:29:07:
cd:78:12:2e:d5:3d:e9:cc:91:db:a9:b8:18:56:8b:17:5f:28:
71:9b:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:54:51 2025 by rpki-client