Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: UYwOJVn7JfEFTXlqw28Rv0GxwcbkDX3XsN/XUuIeF5Q=
Subject key identifier: 10:E4:2B:BA:23:1A:98:A1:D9:70:34:52:A0:25:81:06:14:EE:C1:3A
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 01983FF4241759F8930B0A384AEF5A59F268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 05:00:21 +0000
Manifest this update: Fri 25 Jul 2025 05:00:21 +0000
Manifest next update: Sat 26 Jul 2025 05:00:21 +0000
Files and hashes: 1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: un6xHkKKAKanikV9EjxEGMg3Mh65CXCJqBrakab9hyY=)
3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:24:17:59:f8:93:0b:0a:38:4a:ef:5a:59:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jul 25 05:00:21 2025 GMT
Not After : Jul 26 05:00:21 2025 GMT
Subject: CN=10e42bba231a98a1d9703452a025810614eec13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:c8:4a:2d:53:7d:c6:c7:9a:9b:d4:39:1c:
41:26:80:0b:b9:0b:8b:9a:95:39:99:43:43:bd:e1:
b2:92:73:5c:5c:00:00:0b:df:e1:19:54:a9:86:ac:
3e:fc:50:6e:11:e6:89:13:89:6f:db:7d:a9:ca:45:
cf:3a:3b:ad:2e:a0:ad:5c:4d:b1:22:18:35:93:07:
12:04:22:af:06:24:f5:1b:0a:4e:86:90:c8:cf:90:
ec:9d:23:37:fa:eb:fb:5f:1c:4f:6a:2b:9a:77:2f:
29:76:28:31:32:93:68:0a:de:e2:43:60:fa:12:67:
3d:cd:04:72:1e:56:55:53:4d:60:ae:53:3f:16:0b:
d0:9a:82:f0:06:75:10:5f:42:cd:9c:8d:85:a9:31:
73:cc:08:27:b6:74:00:6d:03:12:bc:48:70:c9:33:
2d:a4:eb:aa:1f:af:56:2c:4d:5d:78:f1:7b:04:bd:
9f:a3:fe:6c:7f:a2:eb:91:55:48:41:04:ae:6a:b4:
00:64:71:eb:05:21:b2:46:09:d4:d1:2b:5b:02:96:
51:50:57:c4:76:0c:a3:0c:3e:b7:21:55:5c:32:2e:
c8:ef:74:89:ab:eb:2e:af:e9:8e:c8:95:aa:56:8f:
c6:fa:4b:1c:3f:20:11:2a:00:1f:4e:38:36:e9:35:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:2B:BA:23:1A:98:A1:D9:70:34:52:A0:25:81:06:14:EE:C1:3A
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:44:fb:e4:f7:dd:6b:9b:bd:3e:3b:ab:c4:be:e7:25:17:73:
0c:42:fe:ef:c2:0e:03:f1:de:0b:5c:20:ea:d4:82:e5:f2:6e:
7e:b2:97:cd:fc:aa:c5:d1:3b:0e:39:aa:9d:b0:15:42:50:51:
6b:ef:4b:ab:65:23:b4:4d:17:b8:1b:f3:89:e5:b9:84:dc:79:
c6:54:94:d6:17:27:ec:38:87:8b:94:29:69:be:35:09:16:6e:
e6:c7:d4:d0:69:d6:be:7b:5e:2f:45:83:8f:1a:8b:fb:ff:1b:
dd:ab:4a:d8:6d:3d:d9:53:33:67:5c:ab:4b:ce:55:ba:19:e3:
dd:dd:ca:0a:71:3c:a8:0e:93:73:fc:11:a5:67:50:54:cb:1a:
9a:2b:ff:bd:5e:92:a5:ad:dc:f6:d7:ab:8a:65:a8:bf:b2:13:
90:df:2e:d4:cb:7c:39:31:44:72:91:57:0e:a4:3d:c1:ae:fb:
ea:e7:53:85:be:58:7c:a8:f9:2c:cb:cd:fc:90:71:84:87:ee:
00:9a:06:ef:62:ad:51:04:8d:88:14:bc:6f:b8:db:f8:3f:c4:
1b:34:b6:75:47:03:fb:1a:a9:23:44:22:96:f1:8e:58:6e:32:
09:40:5d:aa:7d:78:63:b4:b7:2c:df:79:9c:75:f6:2e:a7:90:
2b:73:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:23:25 2025 by rpki-client