Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: 7DgMo5aJ//1wqlSaKcIMbYftWR+3wiLvt1CLtcz33BI=
Subject key identifier: 3A:61:E6:3A:F1:C0:DB:5D:78:CE:6F:66:1D:35:9D:0D:59:C6:B9:B9
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 0198548D9629F154D5B65A7FFEB00E4D312F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0D81
Signing time: Tue 29 Jul 2025 05:00:21 +0000
Manifest this update: Tue 29 Jul 2025 05:00:21 +0000
Manifest next update: Wed 30 Jul 2025 05:00:21 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: xvHgfyMpQwbxP+NWukMJ/O8UK1xOuHypHIdXkVHR+R0=)
2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:96:29:f1:54:d5:b6:5a:7f:fe:b0:0e:4d:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Jul 29 05:00:21 2025 GMT
Not After : Jul 30 05:00:21 2025 GMT
Subject: CN=3a61e63af1c0db5d78ce6f661d359d0d59c6b9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:d1:ee:9d:0f:57:fa:76:9e:d2:a1:42:fc:
57:23:91:75:cd:91:a0:0e:f3:a0:89:ac:ff:03:9b:
ae:b1:ca:ed:b6:1c:92:0c:d4:4f:28:75:0e:dc:e0:
98:51:84:34:a8:df:d2:a2:96:47:9e:e1:b1:6c:32:
71:de:6e:a5:c1:e7:27:2c:8c:29:a2:e6:f5:49:83:
57:ca:30:14:c1:90:1d:98:b7:6d:c4:5a:ee:52:53:
43:12:e2:d4:86:80:a0:5e:9e:83:55:8b:17:3a:58:
a6:10:6c:b7:ab:b6:04:51:78:fa:6a:90:0d:7a:44:
3d:c9:21:fe:ed:e4:52:24:21:15:5d:0e:2c:9a:8f:
f1:62:2e:dd:05:86:59:75:d2:de:09:a2:50:4f:f8:
29:82:a9:db:c2:aa:91:eb:11:9b:a8:94:42:41:27:
28:41:76:9e:81:28:1d:84:47:f7:87:fb:b4:02:0e:
cf:f0:a1:f4:a5:6b:97:77:73:53:f6:ac:50:bc:b4:
79:7c:d4:b5:44:74:69:4a:fe:72:60:27:82:5a:e6:
e7:db:af:a4:72:8c:9f:d4:9a:f6:b2:30:7e:b2:15:
a0:b7:dc:a2:f8:8c:95:11:82:58:9c:70:c1:79:71:
e4:34:d4:fe:fb:92:ed:5d:10:d7:53:59:27:ca:64:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:E6:3A:F1:C0:DB:5D:78:CE:6F:66:1D:35:9D:0D:59:C6:B9:B9
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:38:8d:78:94:74:1b:24:b2:92:a6:30:bf:f6:80:17:60:ec:
61:f8:c0:a7:44:b9:60:57:b2:88:af:09:1a:c5:26:5a:f1:ac:
b5:11:df:a5:09:3f:84:86:22:f8:6d:2d:c3:b5:12:72:98:d7:
4a:2c:f8:1d:4e:11:16:b4:e5:0f:5c:42:bc:03:7a:cc:b4:09:
07:c9:d0:34:2c:69:e5:b0:c0:79:3a:77:a9:fa:97:e3:ce:80:
d0:02:43:45:74:a7:72:90:d8:90:26:66:1b:2a:2e:62:b4:ad:
87:50:9a:5d:f0:85:d0:25:93:70:29:46:77:d6:8a:4c:64:78:
86:61:81:86:10:a9:f1:e1:c1:f8:4e:5c:6e:8b:0d:17:e3:cb:
e0:97:58:bf:bc:07:a4:90:67:cc:37:76:2a:cc:14:18:e6:bb:
73:a5:f9:93:91:bf:76:b0:7b:e4:31:69:b2:1d:a1:c4:e6:4b:
15:a9:d4:e0:e2:f3:cf:08:2a:d6:36:f8:32:73:fb:b9:2c:21:
6b:36:00:e3:bd:31:2b:e8:1f:f9:28:2a:1a:f6:1d:6c:6c:6b:
d1:de:d9:09:4e:36:cb:ec:5c:50:df:0b:5e:c1:db:09:bb:c1:
56:0d:57:0b:41:33:95:ed:6e:4a:e8:c5:66:14:5c:3f:95:ae:
ce:cc:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:07 2025 by rpki-client