Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: PrEdiPbpCQEVZnM9C6BlGBzoZDsdL3kq5ozk6uOSF08=
Subject key identifier: BC:9B:2F:03:5C:AE:1A:22:82:D3:9B:C1:EC:6C:2F:A9:11:F1:B5:30
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 0198530E4540223531F7F1B4B24F6D6DCBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:01:40 +0000
Manifest this update: Mon 28 Jul 2025 22:01:40 +0000
Manifest next update: Tue 29 Jul 2025 22:01:40 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: cr0VBQGA/HBoKg1Hh7QPyBoPq1V6vplmG3sKlQ4OEP8=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:45:40:22:35:31:f7:f1:b4:b2:4f:6d:6d:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jul 28 22:01:40 2025 GMT
Not After : Jul 29 22:01:40 2025 GMT
Subject: CN=bc9b2f035cae1a2282d39bc1ec6c2fa911f1b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:d4:fa:7d:c9:79:6a:b1:07:45:a3:59:4f:
be:ca:78:4c:f0:28:a7:98:70:fb:3f:73:bc:e2:93:
47:ae:e4:e7:8d:53:fd:3f:32:4f:63:e0:3e:ff:cf:
d3:a2:79:3c:e0:7b:ef:6b:1c:0e:96:ab:2d:80:d5:
8e:f9:24:5b:e7:6d:a2:68:27:39:82:10:e4:ff:21:
60:b0:11:83:0d:8e:83:7b:7b:1e:5c:bd:67:25:57:
8d:44:d9:42:55:13:37:92:bd:22:12:0c:13:df:82:
0b:ee:27:66:c2:eb:3b:0e:1e:30:b6:ed:4e:55:c6:
b1:96:54:96:f0:9c:ef:91:5e:53:1d:9e:b2:f4:fd:
fc:ee:5b:07:12:db:de:d3:6d:e9:c4:9d:49:c0:6e:
a4:09:df:00:28:83:41:09:68:c2:4d:d8:5a:d1:a4:
13:40:63:fb:7a:01:71:e0:57:00:53:c0:66:4c:a9:
d6:44:b7:92:32:23:ed:6b:63:69:22:05:ac:9e:02:
1d:6d:4d:9c:47:c8:4f:13:90:a2:67:cc:ce:23:b1:
ad:0d:66:0b:f3:97:9c:81:cf:6e:03:1f:e1:31:63:
1e:d8:23:14:4a:b4:22:34:d8:89:3b:83:53:83:83:
19:29:20:c9:cf:03:04:6a:98:7e:bc:5f:93:44:97:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9B:2F:03:5C:AE:1A:22:82:D3:9B:C1:EC:6C:2F:A9:11:F1:B5:30
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:a8:ef:be:70:16:5e:e3:1f:99:74:50:df:9c:20:60:66:
03:b2:03:4d:44:37:46:d4:4d:83:5a:b0:e7:a1:c8:8d:17:6c:
44:3a:b6:f4:55:1e:91:aa:69:86:68:0f:f6:0f:01:bc:90:ad:
ac:6f:5e:ed:4c:56:94:26:6c:d6:c2:e3:19:77:cb:dd:fb:77:
f5:ff:35:19:1b:d7:ba:19:af:dd:7f:27:0c:6d:63:5e:4f:b0:
11:f2:f5:90:01:05:85:de:8f:68:d9:c0:83:f3:f5:d1:aa:84:
c0:eb:1f:bd:b1:93:9a:f0:53:b8:74:87:95:86:e0:cd:b5:17:
c2:13:90:1a:0e:d8:78:d0:fa:ad:40:39:0c:5f:b1:6a:46:e2:
b6:51:53:22:f4:c0:a7:51:af:52:5f:c5:b2:e3:38:f7:62:60:
76:5c:bb:0d:35:47:c8:fd:dc:6a:e1:c3:cf:6f:81:34:93:38:
fa:57:d8:c9:eb:60:a0:b0:71:f3:2e:13:4f:36:22:9f:00:f3:
fc:2f:e6:f2:cd:ab:61:40:75:3e:25:36:5e:0b:f6:de:8d:9d:
61:14:08:f4:02:41:aa:1e:3a:70:a9:57:a6:c3:74:02:21:1b:
88:5e:d3:bd:00:c8:2c:ab:06:cc:5a:1b:2c:ef:cd:96:72:e9:
72:c6:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:48:48 2025 by rpki-client