Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier: 2+YAe4BoPFwP5jvkO79SYpdN78lQaG1LraJhYweFzpQ=
Subject key identifier: A9:F0:16:75:E8:A3:B1:9E:13:C1:AC:4B:9D:59:10:53:00:1C:B2:B8
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer: /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial: 0198481B850177023F423C7B1E92B919A664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number: 01FA
Signing time: Sat 26 Jul 2025 19:00:19 +0000
Manifest this update: Sat 26 Jul 2025 19:00:19 +0000
Manifest next update: Sun 27 Jul 2025 19:00:19 +0000
Files and hashes: 1: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: rwpUOWYHnyPhvaFLQgPX6mLkBn5P2RGnnoh/Aq3I7pc=)
2: As2aEQ-Qc40w6qz5lbdZOvfcUl4.roa (hash: wBu3pTqJ+Uf9xdHuwPeUbe92Udv+KfCa1hQtrwjxXdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:85:01:77:02:3f:42:3c:7b:1e:92:b9:19:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
Validity
Not Before: Jul 26 19:00:19 2025 GMT
Not After : Jul 27 19:00:19 2025 GMT
Subject: CN=a9f01675e8a3b19e13c1ac4b9d591053001cb2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:a7:b2:5c:ff:22:d2:c3:6c:36:50:67:ad:
36:b8:f5:e7:3b:c6:ab:19:0b:dd:90:d4:99:8f:11:
79:d0:4a:1c:71:6c:e6:f0:d3:3f:0c:5f:34:87:2b:
cf:93:3d:e2:b3:ea:66:17:04:24:51:82:c8:dd:e0:
a2:6a:fa:7f:f9:9d:50:71:6c:e3:14:b7:b1:44:2a:
70:3b:d6:73:cf:5b:2e:96:a5:58:45:c0:60:e5:25:
ae:95:ed:c0:c8:e8:a8:74:e3:5c:47:c4:26:77:eb:
5d:a1:a5:dc:63:c7:98:17:70:90:ad:09:4e:05:4a:
62:9f:ca:59:1b:01:76:7d:10:d1:d6:a4:b7:c8:f4:
80:e7:82:a9:9b:6c:bb:db:21:df:08:38:6a:8d:c6:
64:92:6e:25:1e:57:bd:3a:dc:6e:3e:34:1e:74:4b:
d8:00:ce:0a:94:61:ed:43:c8:14:f4:b6:92:b4:8b:
ad:d1:d1:bf:32:4b:74:08:ed:ca:32:d1:f5:15:18:
e2:b5:c4:51:ac:c3:f8:1f:7d:f4:d2:12:07:0c:bd:
df:85:a3:1e:3e:b5:20:27:54:55:b1:b0:47:73:6f:
17:ec:9e:ac:86:2e:30:8a:07:9a:3a:a4:cc:7e:a7:
ff:db:f4:98:e8:6b:51:ad:37:f0:93:ce:33:a7:7e:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:16:75:E8:A3:B1:9E:13:C1:AC:4B:9D:59:10:53:00:1C:B2:B8
X509v3 Authority Key Identifier:
keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8b:df:3c:7c:40:39:a3:a7:65:b1:b2:b4:b3:20:bb:d3:83:
fe:66:29:fe:83:43:30:0e:bb:96:60:b7:b9:3f:8d:cc:4d:d2:
01:ba:66:05:9a:34:45:72:a2:60:b5:b5:6e:12:29:1d:0a:5a:
30:c2:08:ae:97:41:e7:52:c4:64:aa:f5:f9:0b:3b:13:4c:2b:
53:c5:ea:b1:4b:2d:bb:c2:d7:a7:ae:b4:91:e8:82:eb:78:9a:
30:37:21:08:bc:b3:1f:a9:1b:b4:1c:49:f0:7a:6b:08:35:aa:
49:16:4a:99:72:44:76:8b:d9:8a:1e:1c:51:13:00:a3:f3:06:
c4:02:cd:af:aa:49:3a:6a:e0:2f:a2:86:1e:3b:12:c9:12:cb:
0f:2c:ef:a9:d1:64:72:31:26:ab:f4:d4:57:7f:3c:5e:b3:29:
04:08:c9:7c:a3:6f:3f:63:91:0a:d1:6d:74:9b:7b:5f:2e:e9:
26:20:af:36:bf:e3:62:47:c6:73:29:51:cc:46:0b:9c:53:a1:
65:47:7d:02:31:04:b2:13:c6:1d:3f:75:56:ad:52:f0:b3:99:
25:c8:66:75:dc:bb:3e:86:94:6d:74:9b:99:b7:fe:0f:62:16:
63:87:ae:31:56:c3:9d:e0:85:79:04:96:7d:8f:9b:82:f8:23:
61:a1:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:09 2025 by rpki-client