Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: BvBKpDY9zN4JIlM+xHDpnwA56ye9C/yIToL9iEV0t+g=
Subject key identifier: BF:AD:EA:DB:7C:A4:9E:41:E0:14:A9:61:ED:D6:12:44:FB:DB:66:CC
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019841AC5FBC1CDD286696AD9860E713B4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 06FA
Signing time: Fri 25 Jul 2025 13:01:12 +0000
Manifest this update: Fri 25 Jul 2025 13:01:12 +0000
Manifest next update: Sat 26 Jul 2025 13:01:12 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: NhCyIj6WZqLg6L6iEiVJ+VITLccN/hN2sNJkJqN6KwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:5f:bc:1c:dd:28:66:96:ad:98:60:e7:13:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jul 25 13:01:12 2025 GMT
Not After : Jul 26 13:01:12 2025 GMT
Subject: CN=bfadeadb7ca49e41e014a961edd61244fbdb66cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:48:2b:bf:42:6d:cb:28:fa:80:5f:61:54:
b3:5a:b1:c7:e9:b7:cf:00:73:a6:90:cb:81:6f:cc:
3f:38:e3:20:10:b2:da:07:58:f5:a1:a3:f3:c0:cc:
f1:2a:c0:a0:14:1e:7c:10:68:15:d1:82:e5:89:72:
22:40:3c:0b:a8:c9:c0:de:b2:e2:9f:5c:98:4a:8d:
01:49:11:a9:80:9b:49:34:37:af:fd:2a:30:c1:f1:
42:a9:c6:ea:ec:89:96:71:53:b8:03:e9:ef:96:8e:
78:04:9f:3c:00:09:da:39:59:13:db:21:e9:08:68:
85:02:10:11:ac:dd:07:44:9e:d4:e8:90:43:aa:c1:
7b:88:3c:d4:2f:6a:e0:ab:46:d7:35:41:67:99:0d:
3c:e1:4f:2d:1b:16:61:18:eb:48:03:82:4a:83:8b:
24:2e:06:13:9e:ce:86:3d:45:9e:0d:69:63:2b:aa:
b1:3d:5f:3a:e3:97:f9:de:ce:c0:9b:f3:be:da:a9:
dc:63:62:5c:cf:3b:ba:b1:8d:0c:2e:4c:f8:e1:78:
49:2f:62:27:af:96:1f:90:99:52:e3:a5:5e:33:45:
ea:32:99:48:53:08:b2:7a:09:0e:25:b0:78:d9:11:
fb:f7:84:70:ba:ab:a3:d1:65:61:61:4d:90:14:a4:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:EA:DB:7C:A4:9E:41:E0:14:A9:61:ED:D6:12:44:FB:DB:66:CC
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8f:86:9f:b8:c0:a7:b2:2e:b1:7d:d2:23:f0:7b:69:e8:e9:
b1:d7:fb:25:c4:ec:20:73:1b:fc:55:10:d8:b7:79:3e:c2:d1:
36:fa:6c:75:4c:3a:56:95:ee:d9:32:ff:fd:c8:e5:d0:2a:43:
df:88:4c:5e:4d:ff:16:17:cd:e1:59:db:fb:9f:6f:63:2c:e6:
4b:bd:a2:0c:73:1c:11:48:ef:4c:db:ad:95:1a:88:9e:ff:7f:
3c:23:a2:c0:e3:ca:50:4b:2b:c5:12:9b:55:8f:58:ce:80:c0:
ea:68:f3:e0:8b:42:65:41:db:69:81:e8:a0:34:13:60:51:af:
47:10:09:c6:a6:81:ef:4e:e5:99:38:83:a2:df:d1:b5:d1:5b:
f3:e3:24:74:f1:bc:39:e6:1b:da:d3:62:7c:fa:da:a3:56:54:
d1:8e:0c:95:e9:8f:2b:ce:ef:04:d9:a0:cc:c6:d4:bf:06:a5:
7e:00:59:d0:03:8c:34:69:ae:42:38:62:5b:62:66:61:09:5e:
93:44:9d:cd:a5:f2:dd:32:7c:f6:a7:1b:ad:ec:b6:74:24:bb:
23:61:e0:d0:85:9f:ea:68:b7:0d:7c:55:ba:e8:ff:0c:02:a3:
dd:7c:a5:b7:8c:f9:c1:ed:59:e2:f6:bb:a5:02:f5:8c:b2:23:
dc:80:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:23:49 2025 by rpki-client