
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier: 1auOZCNpJhqTKE1NVwQI001rnw25SDVjSyPwGulCkaw=
Subject key identifier: 6C:9E:8D:3E:92:07:83:D5:74:FC:7E:1B:67:B8:9C:62:A1:B9:C4:74
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 01984A0A43926A52A7A777C60371F6BB64C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: xyieTsBFRT5tj+jLZeuBQbEerlAXL7QaDQfqgslBHjw=)
2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:43:92:6a:52:a7:a7:77:c6:03:71:f6:bb:64:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=6c9e8d3e920783d574fc7e1b67b89c62a1b9c474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:e4:e6:46:7a:09:bf:fd:a1:82:e0:b2:5a:
62:a9:a6:b8:79:6b:00:40:00:a8:82:fa:a6:78:53:
e1:02:79:6f:b1:a4:ac:bb:6a:58:4d:a8:bb:43:f0:
46:d0:56:7f:64:4b:62:ae:b5:5a:b6:3f:c0:15:05:
ab:12:74:64:68:83:7e:74:9e:0a:35:3b:92:04:60:
df:2b:e1:e1:35:1d:bd:92:d6:9d:d8:05:61:5a:66:
79:9f:e5:28:34:ca:d1:d9:77:35:05:3d:b3:03:1f:
52:ce:f5:b7:29:5d:bb:7c:2b:7b:04:6c:97:e4:06:
65:a4:76:21:0d:09:2f:ff:91:12:33:9d:e6:11:18:
f6:d5:02:f0:07:9d:08:c5:9f:03:27:2a:81:3b:db:
d9:ed:4d:19:c4:e1:07:d2:f2:87:9f:f0:eb:a6:42:
73:78:c8:6b:06:4b:45:17:e2:f5:98:1c:6a:81:0e:
12:32:0e:28:a6:c2:01:3c:26:29:ee:08:2a:fc:3d:
10:24:cb:db:d4:ff:e5:8a:b5:e4:22:c9:eb:ca:f2:
18:17:24:32:f0:05:44:82:b9:53:23:47:fe:fe:ab:
da:d3:29:be:d8:82:73:ae:95:6f:14:7d:96:c2:7f:
3f:ad:95:34:f6:11:07:31:c3:93:47:89:22:fb:fa:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:8D:3E:92:07:83:D5:74:FC:7E:1B:67:B8:9C:62:A1:B9:C4:74
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:4d:43:af:d0:fc:b7:31:8e:9c:7e:bc:06:45:0c:c9:c3:
75:a2:91:f9:56:28:e4:cb:f0:8c:14:5f:35:8d:d9:53:66:af:
e9:e2:87:65:82:b6:ce:2e:02:a0:92:4e:b2:57:a4:cd:b5:32:
0b:7f:38:02:0f:82:d5:50:2a:9c:0f:04:8e:d1:21:f1:47:52:
e3:8b:4c:e6:f5:8d:cc:8c:c4:b7:02:f2:5b:8f:f4:12:80:74:
c8:38:62:d9:a1:62:91:67:39:92:0f:d7:80:66:13:6c:2e:99:
cb:2e:c0:28:6b:3b:80:ad:76:62:c6:dc:a5:d6:fe:60:b8:71:
b3:43:5d:d4:22:13:bf:46:e8:da:6d:34:46:12:cf:a6:6f:6c:
35:09:19:3a:d7:b2:18:8f:fb:78:7a:5a:77:a9:ab:81:e1:64:
17:77:f6:5a:7f:1a:d8:22:84:d0:df:10:9d:0c:af:f4:29:10:
b8:1a:5b:bb:39:d8:dd:b1:64:32:25:de:fd:9d:f7:e5:78:11:
9f:46:e1:80:c5:54:ca:69:8f:3a:9b:9b:fd:14:d0:c7:09:07:
10:d7:bd:ab:e6:69:c7:2e:9e:43:23:fd:c3:da:dd:2f:19:8c:
e2:dd:ae:43:6e:bd:fd:42:0c:cb:f7:64:0f:08:60:a8:8c:77:
0a:c7:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:59:11 2025 by rpki-client