Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: 8SuaRGXM3HOGX/+VPMjDhiof2faJHox8Eq2TvBu01Fg=
Subject key identifier: FF:B9:1D:1C:A9:F5:1F:B7:07:88:F2:4F:CE:80:D4:7A:D0:AC:34:B5
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 01984A09F697623879FAC3274AA2B78FDFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: TI5BF18mOKKH0cBNaS++JL3yy7d0CDVjjNwjdVrHQjM=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f6:97:62:38:79:fa:c3:27:4a:a2:b7:8f:df:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=ffb91d1ca9f51fb70788f24fce80d47ad0ac34b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:c3:7f:c3:cb:e4:59:d8:56:ab:30:89:dd:
38:bc:1c:a5:f8:28:c3:6c:38:41:ba:fd:5b:54:06:
eb:30:cb:64:c5:5c:a1:cd:5f:3f:a4:9c:f2:0d:b0:
80:1d:5d:f7:52:78:67:10:4f:1d:6e:96:bb:9c:c0:
0e:d3:c7:92:6b:67:27:f8:99:57:8b:4b:f3:52:40:
44:a0:3f:bf:f9:69:17:5b:74:56:cf:7e:6d:3a:8a:
74:41:bf:3f:3c:69:92:52:28:d2:c5:bb:8b:ac:4e:
f1:a8:2e:da:3c:57:55:f4:ee:5d:27:83:af:2d:bd:
b6:20:d7:2d:b2:55:a0:ab:1a:54:9d:cd:7c:01:ab:
9c:96:c3:7a:44:dc:3f:b1:02:c4:24:68:68:39:ee:
ad:0f:c1:fd:e4:0d:bb:ef:7e:b6:1b:be:05:f9:70:
46:cf:6b:0f:ff:0f:5d:7e:39:bb:03:ef:2c:bc:94:
60:7a:74:b6:87:22:16:58:ba:cc:07:49:74:dd:d1:
e6:7a:0c:28:7d:a7:15:ae:aa:25:26:eb:45:2e:72:
29:0e:a8:69:ea:a3:1a:20:c1:1a:c0:30:d8:f6:ef:
88:4f:37:a4:4a:19:9e:c8:0f:f5:a5:03:97:42:e8:
0c:4c:ed:59:2d:c0:9e:35:98:c6:b2:e3:dd:4e:eb:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:1D:1C:A9:F5:1F:B7:07:88:F2:4F:CE:80:D4:7A:D0:AC:34:B5
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:c1:6a:51:f3:c9:0c:59:71:7f:b8:86:38:c2:5f:3f:85:
15:0e:70:67:06:68:7e:b2:a1:43:dd:0c:b8:0f:6b:56:45:49:
02:00:d5:23:87:53:13:c2:00:60:a0:42:f3:11:2c:ff:6b:71:
6a:4d:91:49:57:f2:5f:e3:44:e1:bd:6b:e6:6c:20:f0:66:52:
7f:a6:25:ca:67:16:c4:cf:6e:43:b1:7d:07:79:66:2e:73:72:
bb:37:da:10:7d:1e:fd:c7:f1:1c:54:4d:86:85:6e:31:0a:02:
d5:24:72:ef:7b:41:90:0a:48:bd:da:0d:5c:0a:1a:3b:ab:00:
90:b7:ed:3f:58:09:50:08:fe:40:e5:07:b7:8c:5c:56:b3:83:
52:ce:76:21:e3:7d:fd:09:fb:44:b3:4c:bf:a4:6c:1b:91:e8:
2d:39:09:1d:52:0a:67:2f:4a:48:56:24:bf:58:cf:13:5c:72:
c9:77:20:0f:c8:e9:d2:9a:bd:a6:6d:06:b7:09:21:e2:93:db:
c6:55:18:21:f8:d3:66:79:35:4a:38:f9:85:21:08:e7:e4:e2:
d5:25:53:fd:95:0d:6b:aa:83:91:39:f4:ba:6c:59:cc:06:57:
5b:43:3a:34:a8:1a:36:a5:25:42:77:20:c8:4a:05:ae:d5:12:
20:25:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:33:20 2025 by rpki-client