Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: KIAlzIbe6n4BVkGxgSxwgwLr4kW+FZC+UPOA0JHEzeE=
Subject key identifier: F2:E9:72:82:BC:E0:B2:1C:B2:EE:B5:59:A2:9F:0C:B1:F2:F6:00:E6
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01974E574F423B7EFC3E0A37A80ED91E1595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0888
Signing time: Sun 08 Jun 2025 07:00:34 +0000
Manifest this update: Sun 08 Jun 2025 07:00:34 +0000
Manifest next update: Mon 09 Jun 2025 07:00:34 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: xcse3qeDfAE5bDEiAF/JAKeYdB2xzb1EDhCjK82fW+A=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:4f:42:3b:7e:fc:3e:0a:37:a8:0e:d9:1e:15:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Jun 8 07:00:34 2025 GMT
Not After : Jun 9 07:00:34 2025 GMT
Subject: CN=f2e97282bce0b21cb2eeb559a29f0cb1f2f600e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:50:85:97:7f:04:e4:36:f4:ab:91:c7:a1:
8b:60:25:ba:b4:d9:02:cb:dc:4a:24:8b:37:e9:41:
89:b8:f5:18:d5:10:39:3f:2d:24:ef:91:a3:d5:92:
b9:8b:7e:d6:0d:23:41:91:d6:0f:06:51:44:0a:21:
11:c7:23:16:93:9d:7f:06:36:35:bb:f8:5e:2b:b4:
13:60:9a:0f:e2:0b:4e:3c:98:ec:9a:79:91:d5:59:
b1:c7:cd:66:a1:5c:8b:18:5d:eb:11:63:b5:17:d2:
f8:42:60:17:67:c3:3e:c2:e0:3c:62:19:09:16:17:
30:f0:e5:2b:b4:fe:4f:db:1b:53:a7:f4:33:00:d6:
2c:d8:bf:22:99:1b:46:a1:5f:0b:ad:72:bf:91:8e:
36:5c:88:57:2f:bf:b7:e3:2d:ac:9c:d9:f9:58:2d:
91:9a:8a:f0:b2:23:d5:ac:80:3b:74:aa:9a:39:ac:
7c:b0:ef:c7:0a:fc:82:0c:8a:e8:8e:d3:5d:a5:86:
49:c7:0a:30:3a:2c:df:95:f5:13:5e:7d:8b:73:d5:
83:5d:b6:7f:39:82:c1:75:56:5c:cb:12:60:fa:14:
2d:43:0a:4d:70:25:3e:ca:ea:4c:c6:af:3c:69:80:
0d:c6:dc:8e:d7:f4:c7:37:29:01:a5:7d:12:9d:3f:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:72:82:BC:E0:B2:1C:B2:EE:B5:59:A2:9F:0C:B1:F2:F6:00:E6
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:a1:7b:be:a7:16:71:d8:7e:82:98:14:15:7d:4c:02:9c:
b3:16:0c:4e:51:6d:bb:3e:96:10:e9:b8:91:54:dd:49:e2:d6:
b0:9b:0d:cf:e4:a1:27:74:ce:db:11:3b:e2:64:99:cf:f3:b9:
62:8c:b6:18:ab:6d:bd:ac:9d:e9:68:cd:0a:8f:7a:24:3a:fb:
e6:45:71:76:d8:69:9b:8a:6c:3b:eb:e5:36:bf:1f:0f:1c:99:
e1:c6:6b:71:e1:b3:6f:d5:7c:26:c4:c0:82:7b:3c:2b:53:0c:
ec:12:e7:2d:1d:35:cc:f8:2a:31:33:ea:fd:67:b5:31:d8:f4:
0d:a3:0f:c6:0d:2b:b0:21:d3:b6:b0:60:03:c5:f7:fd:7d:c4:
ef:a3:a3:c5:cf:d9:95:0a:87:28:4b:73:d8:5a:50:df:dd:4b:
0c:7d:3d:0d:d2:da:c7:f8:75:e6:4f:2c:d3:80:24:86:14:7c:
85:ba:72:f9:5b:6c:03:09:87:3e:4d:e0:98:b9:64:15:6e:cc:
ca:58:8c:93:f2:9b:8c:b5:b2:06:5f:c0:fa:9b:a2:69:4a:b2:
ec:53:4f:42:b2:94:b1:90:62:43:f7:c1:20:9f:f1:e2:4b:be:
ff:2f:03:a0:bb:1a:84:5f:df:6f:f1:63:1d:14:8b:64:e8:8f:
24:2d:a0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV09CO378Pgo3qA7ZHhWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjUwNjA4MDcwMDM0WhcNMjUwNjA5MDcwMDM0WjAzMTEwLwYDVQQD
EyhmMmU5NzI4MmJjZTBiMjFjYjJlZWI1NTlhMjlmMGNiMWYyZjYwMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqadQhZd/BOQ29KuRx6GLYCW6tNkC
y9xKJIs36UGJuPUY1RA5Py0k75Gj1ZK5i37WDSNBkdYPBlFECiERxyMWk51/BjY1
u/heK7QTYJoP4gtOPJjsmnmR1Vmxx81moVyLGF3rEWO1F9L4QmAXZ8M+wuA8YhkJ
Fhcw8OUrtP5P2xtTp/QzANYs2L8imRtGoV8LrXK/kY42XIhXL7+34y2snNn5WC2R
morwsiPVrIA7dKqaOax8sO/HCvyCDIrojtNdpYZJxwowOizflfUTXn2Lc9WDXbZ/
OYLBdVZcyxJg+hQtQwpNcCU+yupMxq88aYANxtyO1/THNykBpX0SnT/ksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLpcoK84LIcsu61WaKfDLHy9gDmMB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF2he76n
FnHYfoKYFBV9TAKcsxYMTlFtuz6WEOm4kVTdSeLWsJsNz+ShJ3TO2xE74mSZz/O5
Yoy2GKttvayd6WjNCo96JDr75kVxdthpm4psO+vlNr8fDxyZ4cZrceGzb9V8JsTA
gns8K1MM7BLnLR01zPgqMTPq/We1Mdj0DaMPxg0rsCHTtrBgA8X3/X3E76Ojxc/Z
lQqHKEtz2FpQ391LDH09DdLax/h15k8s04AkhhR8hbpy+VtsAwmHPk3gmLlkFW7M
yliMk/KbjLWyBl/A+puiaUqy7FNPQrKUsZBiQ/fBIJ/x4ku+/y8DoLsahF/fb/Fj
HRSLZOiPJC2gBg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:11:12 2025 by rpki-client