Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: ApMJo9MIMmk/wJsRIoWK+R2i794T413mWtGPyKEy1jI=
Subject key identifier: BA:2E:CF:77:2F:0C:EF:13:4D:28:9E:D7:27:D9:7E:5F:FC:00:D2:77
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019858DABAE159FBAD987FE4020FD1C500A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 01:03:06 +0000
Manifest this update: Wed 30 Jul 2025 01:03:06 +0000
Manifest next update: Thu 31 Jul 2025 01:03:06 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: gBKR2av9PDMWmrJ6SG61/NYxAODuhei/Jrw8tQkQg4c=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:ba:e1:59:fb:ad:98:7f:e4:02:0f:d1:c5:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jul 30 01:03:06 2025 GMT
Not After : Jul 31 01:03:06 2025 GMT
Subject: CN=ba2ecf772f0cef134d289ed727d97e5ffc00d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:ef:ce:91:4a:3c:0b:6c:e2:06:7c:c6:be:
76:c4:34:0b:ad:d2:be:78:89:ef:57:19:e8:a3:80:
ba:73:63:84:b6:f8:fd:96:85:c2:39:b5:25:6f:be:
08:ab:a6:12:b4:e1:16:27:00:e1:0a:bc:55:c5:da:
e8:d7:de:9b:2b:95:6e:1f:60:79:7b:c0:42:36:15:
2c:c0:a5:2e:1c:95:4d:cb:8e:39:ee:82:64:70:3d:
bb:64:f1:2b:1d:fb:39:df:88:47:0e:45:e1:fd:9a:
60:f2:f1:aa:6e:06:4a:0c:21:3b:c0:44:44:17:90:
28:b0:19:d1:2e:16:79:37:41:cb:2c:f8:ed:47:e7:
ed:bf:e9:f7:78:e0:78:17:4a:29:c4:a6:09:c3:60:
bd:77:ae:1f:5c:cb:a8:db:38:7e:c0:5b:04:41:12:
7c:0b:a8:26:3d:59:ec:4e:4d:37:f6:2e:65:ce:14:
8a:fd:a5:4a:25:ed:85:ad:69:2a:d5:56:a5:19:8f:
4a:d3:72:53:0b:c1:54:1b:fb:59:87:03:67:77:b1:
8f:43:28:21:44:1e:67:15:d9:1a:86:e6:99:38:fa:
b3:1e:56:46:79:37:32:55:0e:52:46:3f:31:bf:23:
d4:36:ce:75:d2:3c:31:2d:49:f2:b4:c8:0d:a5:36:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:CF:77:2F:0C:EF:13:4D:28:9E:D7:27:D9:7E:5F:FC:00:D2:77
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:f7:93:ee:ce:d2:04:80:a1:9e:b8:f5:ab:88:95:80:94:
35:52:4c:b1:61:cd:c3:6b:84:c5:9b:55:e5:f6:bf:8e:43:45:
ad:7e:ac:78:42:4f:77:cf:42:52:77:20:52:ea:e5:ce:47:70:
6e:51:4b:d3:07:bc:61:bd:9c:47:46:d7:e1:74:ca:06:d7:f6:
ee:02:39:43:3a:fc:2f:99:f6:20:29:9c:03:ad:e6:f8:e3:1c:
37:0f:62:99:a0:38:76:2e:6c:ae:74:fb:15:e7:9e:d9:db:fe:
88:3e:6f:1d:55:e0:bd:d2:ef:0f:c9:44:7f:2c:fa:a7:03:c3:
d0:fd:61:a8:e5:84:41:f0:83:4f:4c:af:e7:f4:8d:42:17:cb:
95:44:18:e0:d3:55:1a:39:04:d4:7f:15:bd:28:49:8e:70:f7:
7c:a5:ad:7d:13:ab:5b:d8:85:ac:09:5d:24:7a:94:6c:f3:46:
dd:cb:32:51:e8:0c:5f:eb:da:0e:aa:60:c7:66:f9:43:64:0b:
3b:ab:95:f5:8e:20:23:22:e8:c3:fc:62:5d:b3:68:d4:ba:c0:
07:4c:e7:81:fd:3f:5c:03:e1:13:f3:2b:46:2a:b8:b5:1f:ac:
6d:a3:cc:e0:ec:04:ff:21:81:fb:08:b7:e8:4d:01:ad:04:b1:
e7:a1:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 10:35:28 2025 by rpki-client