Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: DGYFTr5MNIrLYAOTqeDk7d5B/LnsHlIe2ST7GXXrYyI=
Subject key identifier: 02:E4:FB:52:4C:62:F0:EB:CA:6C:49:90:D9:71:33:FC:F2:DC:11:73
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 01984AAEB1922C75E5555DDFA12A03FA365A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:19 +0000
Manifest this update: Sun 27 Jul 2025 07:00:19 +0000
Manifest next update: Mon 28 Jul 2025 07:00:19 +0000
Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: kBmGAFLypL1d3FE1rSeZl1RCNuZYV4sE/TQqpOktjeg=)
2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b1:92:2c:75:e5:55:5d:df:a1:2a:03:fa:36:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Jul 27 07:00:19 2025 GMT
Not After : Jul 28 07:00:19 2025 GMT
Subject: CN=02e4fb524c62f0ebca6c4990d97133fcf2dc1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:7c:4c:c2:3a:ea:aa:dc:a2:0f:13:3b:f2:
62:23:1e:f1:d9:8a:68:4e:81:c2:cd:b0:62:78:a8:
0e:a1:96:4e:72:99:64:c6:86:2b:40:2a:ca:e7:dc:
16:68:9d:35:39:48:13:f1:4c:69:a1:49:de:76:73:
d5:b6:fc:5d:4d:32:9d:0e:d2:cc:3b:f2:eb:fd:5b:
23:ab:a1:27:73:3f:15:d9:86:cb:14:01:fe:99:98:
ff:22:77:cf:82:0d:7c:aa:39:54:e0:b9:48:9c:8e:
f8:97:8c:80:6e:82:ef:06:24:a4:55:28:e5:36:9c:
20:07:2b:73:60:6e:0e:72:3a:33:68:12:65:20:9b:
dc:66:b7:6d:89:ed:18:1e:ea:98:65:c1:e0:e5:6e:
ea:d4:a6:50:50:2b:ef:a8:7d:32:48:8b:85:02:50:
9e:43:0f:b9:95:10:fe:07:22:6f:0c:a6:a5:d0:85:
7b:7b:7f:e4:8a:b8:b8:f0:5c:d9:b3:dc:11:68:2e:
58:62:87:c4:03:c9:81:94:b0:6a:81:f2:99:ba:e6:
03:9f:5a:e0:e3:fb:e8:04:8d:23:ca:af:7a:37:ab:
2b:02:bf:96:52:e3:19:94:1e:2c:be:f5:26:b0:8e:
8f:b0:79:f4:21:62:f6:d2:c9:7d:48:59:eb:00:b7:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:FB:52:4C:62:F0:EB:CA:6C:49:90:D9:71:33:FC:F2:DC:11:73
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:11:14:2e:50:eb:56:32:90:4f:7d:97:a2:d0:45:0c:6a:0e:
28:5e:45:f1:f5:2a:36:36:9d:03:f6:7c:af:4a:c4:8e:67:88:
94:2a:03:86:4f:12:35:c3:d9:9f:f0:18:a5:26:dd:b6:39:70:
2b:97:34:6b:f3:d9:79:01:41:97:12:d5:57:f1:e4:85:ac:13:
96:20:e6:e3:43:5c:ce:d7:16:ab:78:09:94:92:60:dc:d8:09:
b2:e1:56:f8:95:b1:67:79:c6:a5:43:93:b5:f5:98:ab:67:ed:
7e:77:6a:50:8b:98:ea:c1:1f:a0:10:c5:0d:f7:a4:52:9f:63:
62:fe:f9:30:e6:5d:b5:a9:2f:f0:a7:2b:8e:5e:be:e3:aa:6c:
d1:cb:89:10:4c:10:a5:f1:bb:75:63:c2:83:fd:31:7d:95:2b:
47:bf:14:18:12:cc:ed:b9:f1:b4:78:1a:0b:e0:28:a1:dd:0a:
f9:ea:00:f5:ec:f1:ff:23:8d:cb:03:21:a3:c0:35:7c:93:9a:
f9:ce:bb:c3:10:17:db:61:60:21:3a:21:ba:27:17:f9:63:c6:
12:c8:e0:35:70:72:08:b3:46:2b:52:b3:fa:03:7a:5f:5b:68:
d9:5e:34:83:8a:b9:3d:61:23:a3:cc:75:7c:0f:ef:05:1b:bd:
d4:ee:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:45 2025 by rpki-client