Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: XZfwq/w8r2T9f3ksM8vf9dCiPu43tR3X2Q+FVLsTQLU=
Subject key identifier: 6F:85:7B:C8:47:9A:7E:4D:26:5E:C5:94:9A:4A:31:60:73:A0:07:59
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 01985720FC773131410E67EFE1A4929612A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 17:00:36 +0000
Manifest this update: Tue 29 Jul 2025 17:00:36 +0000
Manifest next update: Wed 30 Jul 2025 17:00:36 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: zVjWKyOaULDc+Y7NMI2bqKOr+juGiuJjVkChd938UAQ=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:20:fc:77:31:31:41:0e:67:ef:e1:a4:92:96:12:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jul 29 17:00:36 2025 GMT
Not After : Jul 30 17:00:36 2025 GMT
Subject: CN=6f857bc8479a7e4d265ec5949a4a316073a00759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:d6:35:fa:ea:26:f7:93:ec:65:1a:54:90:
be:86:7f:f0:4c:14:4b:4d:f1:95:a3:9a:5c:02:be:
08:01:f6:a2:cf:8b:ea:65:40:ed:50:8e:c8:7b:51:
bb:0a:5f:a1:21:b6:c4:48:11:f2:13:e1:f1:f7:47:
1d:c0:6d:97:46:0c:54:38:2b:de:cc:d6:b7:c5:02:
6e:1a:ec:42:82:12:ba:62:90:44:29:be:5d:1b:4c:
20:0f:b2:59:a1:b2:07:f4:c9:e8:5a:49:ed:4f:bf:
44:bf:c2:8f:f1:eb:a4:14:d7:2b:cf:14:78:2c:78:
41:48:01:dd:9e:08:d3:5f:a0:88:44:e6:81:19:77:
09:a9:e6:bb:cc:57:a8:a8:5d:ee:b1:e9:21:07:7d:
f1:ff:52:83:72:69:dc:32:84:4f:f9:de:7c:ea:12:
b1:fc:ea:3c:3a:0e:24:9d:f8:fa:01:fa:bd:33:69:
4d:e7:aa:04:e4:57:3c:a5:f7:50:d9:67:99:8c:44:
3b:5e:b3:43:d0:e0:00:41:6f:f8:b2:be:ae:8c:7b:
d9:9f:6a:1c:c3:62:04:e0:45:38:2c:fe:94:ac:22:
fd:75:ad:aa:f2:9f:66:00:c6:b0:36:fb:1c:42:9b:
0f:ba:b0:dd:c3:54:c2:58:f4:74:40:8c:be:42:4a:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:7B:C8:47:9A:7E:4D:26:5E:C5:94:9A:4A:31:60:73:A0:07:59
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bc:7a:e2:5f:e5:1d:c1:ae:94:00:58:9e:42:e7:07:b3:1f:
f2:24:d2:e7:61:21:d2:7c:b7:ec:f4:86:5f:1c:9c:0d:c9:71:
6d:fb:0f:70:4e:6b:06:ef:7d:20:69:dc:5d:b9:e7:a8:da:1f:
58:d2:b0:1d:dd:14:a5:25:6f:2a:9c:c5:24:85:15:cd:c9:6c:
89:cb:bb:87:86:32:e7:7e:b4:a7:cc:f9:d6:b9:bc:0a:38:28:
6f:72:91:7e:cc:25:d5:f1:a0:5c:73:35:be:b8:12:44:8d:2c:
a1:fc:a2:e1:02:67:11:ae:9f:aa:21:24:57:8c:b0:d6:40:b7:
ba:98:b4:a9:8a:3b:47:ce:9c:23:ce:da:38:13:7a:39:66:13:
e4:22:23:93:7d:b3:a6:e4:a0:45:ef:ad:ce:e8:5d:57:0b:6a:
d5:58:dd:77:c0:16:77:15:51:6d:d9:73:d6:e2:f2:2f:85:9d:
12:90:ca:79:51:94:3d:1a:da:f2:a0:d8:6e:f1:d8:04:2c:31:
cc:da:75:bd:cd:3b:fe:a4:62:cd:a9:4e:4e:fb:cb:3d:7a:2c:
ae:d5:cf:a2:9d:76:ea:1f:49:4e:80:f3:31:16:49:23:fe:60:
35:53:41:ce:02:ce:b6:2e:ea:80:53:09:b5:ea:eb:d6:19:a5:
4e:b1:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:59:04 2025 by rpki-client