Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: bcbecqB9lC53c5S8ooH4wK1IATUDoWzuXZC8hZ1MtTE=
Subject key identifier: B0:17:04:1F:D0:70:6C:E4:92:3C:02:2B:B7:7A:80:ED:B4:96:A3:B8
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01975A5B8C4C0B1C41036DC42F5FFD66B4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0E88
Signing time: Tue 10 Jun 2025 15:00:38 +0000
Manifest this update: Tue 10 Jun 2025 15:00:38 +0000
Manifest next update: Wed 11 Jun 2025 15:00:38 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: b4Tdlq54BmyscD9uxj27lRsZIxvIQA9OZc4SgRtkk3o=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:8c:4c:0b:1c:41:03:6d:c4:2f:5f:fd:66:b4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jun 10 15:00:38 2025 GMT
Not After : Jun 11 15:00:38 2025 GMT
Subject: CN=b017041fd0706ce4923c022bb77a80edb496a3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:35:1f:75:a1:3c:bf:59:b1:62:2c:f4:a2:
ce:a7:a6:64:a6:a4:99:16:b8:ed:08:f9:cb:da:b1:
a1:1c:e5:c3:be:67:5e:6c:a2:4a:ef:58:e2:eb:10:
4d:59:0f:da:d2:f5:77:12:96:28:f8:f9:98:55:60:
61:b1:d6:22:23:b7:a5:ae:cf:19:a9:a4:01:53:22:
a2:4d:91:df:35:c9:87:91:3b:37:99:d5:90:26:04:
05:7f:d1:4d:19:fb:d7:6d:53:97:7c:d2:69:25:ce:
00:33:f9:ff:ed:62:6b:13:d2:c0:e5:12:f4:51:de:
6a:97:87:56:13:ce:d4:93:7f:5e:7d:c3:62:21:65:
68:09:16:20:80:21:9c:a4:25:84:ef:e6:77:ef:b4:
d4:42:c0:05:7a:3d:98:9d:57:3c:50:f9:e1:0e:1f:
d5:ab:09:e2:50:d3:9b:75:a9:0d:b9:77:27:df:42:
08:83:c6:ff:d2:1e:03:42:e9:df:48:fe:cf:9d:5a:
d2:c2:d9:0e:6c:9a:90:7b:50:da:93:b5:06:86:fd:
bc:09:e4:d7:2a:08:81:49:3b:5f:dc:51:fd:4e:3c:
d9:6f:cb:41:13:68:a0:b9:46:94:7d:9d:4e:9a:ca:
88:76:92:3a:26:42:3e:54:21:97:9f:52:ee:ca:42:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:04:1F:D0:70:6C:E4:92:3C:02:2B:B7:7A:80:ED:B4:96:A3:B8
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2a:ba:d9:1c:54:7c:63:36:65:79:95:88:de:cc:32:ad:e9:
c3:e2:09:32:fa:3b:5d:97:bb:15:6e:57:b6:7b:9d:b6:9b:7d:
21:66:e2:56:db:02:42:5a:c8:70:63:3c:d1:0e:79:52:66:e2:
fc:93:eb:2c:58:2c:d2:60:d7:74:19:07:7d:ef:56:c0:c7:95:
51:cd:af:c2:1a:cc:15:ba:f8:47:b0:96:0d:38:ca:54:81:ca:
52:56:11:a9:10:53:c3:15:b7:0d:d5:d3:3c:dc:ac:58:39:f8:
8f:cb:04:7f:fa:2f:7e:5a:21:dc:34:46:2f:9f:a7:23:fc:dd:
29:39:f8:44:4c:4d:6c:39:15:eb:f9:df:ff:3a:74:18:04:0a:
6e:32:f0:ee:63:82:88:aa:c1:7f:06:d7:dd:9d:55:ab:1e:22:
a1:57:15:3e:70:e9:0e:d0:12:3e:ca:0a:5a:85:d4:86:5f:0f:
6a:57:16:72:5a:6b:af:e4:38:32:78:fb:0e:e8:f9:df:06:4e:
12:ca:2f:dd:4f:8d:55:e7:41:3d:7d:30:53:0c:c0:71:7d:cf:
86:49:0c:36:44:8e:93:e4:e5:2c:7c:f2:db:24:5d:37:03:8f:
65:b0:10:c5:38:6e:bd:2e:01:ea:40:12:a8:85:b4:bf:f8:9a:
51:4b:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:51:27 2025 by rpki-client