Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: u/WniGX8tXvWxq0hBH76o/SjYzr9nPLOf7VJkKeZtFM=
Subject key identifier: 95:94:84:5F:64:E6:7D:9E:F5:5B:04:DB:26:0B:13:9E:D8:E1:0F:66
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019865B8C522DF2B4272DCF4AE14695EB71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 135E
Signing time: Fri 01 Aug 2025 13:01:04 +0000
Manifest this update: Fri 01 Aug 2025 13:01:04 +0000
Manifest next update: Sat 02 Aug 2025 13:01:04 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: 0QyHy9dVDuW+F1Ftyn91BYlLefGv4zddu3W70HWc/as=)
2: FtcuzKMMTKsG4IefMTUbvthdvHQ.roa (hash: fh/bmOX6Q7urxhPxPp4WqcpQdlVctOh99ozTUlRP7Pc=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:b8:c5:22:df:2b:42:72:dc:f4:ae:14:69:5e:b7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Aug 1 13:01:04 2025 GMT
Not After : Aug 2 13:01:04 2025 GMT
Subject: CN=9594845f64e67d9ef55b04db260b139ed8e10f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:c2:e2:dc:4b:28:64:fb:35:ae:4c:da:fe:
a9:e9:c1:04:d7:8e:81:25:5d:90:4e:0c:95:c0:09:
f9:2c:5a:f9:76:43:3f:88:c4:34:1e:42:72:b2:84:
92:d1:48:80:c2:de:01:5d:e1:78:71:5a:23:87:cb:
1f:f4:f2:c7:73:fc:cd:48:8e:33:11:9c:90:7f:9e:
db:ae:40:63:23:2e:2b:24:ca:3e:25:ff:ae:89:5e:
1c:ea:b8:46:31:c4:7a:d2:04:f3:bb:85:17:ca:75:
d2:01:98:5d:00:cd:e8:ae:b5:ad:cb:8e:bd:1e:07:
a2:36:c0:21:82:14:9c:dd:98:07:03:8a:6e:d1:a2:
c6:dd:0e:36:d6:79:d1:51:20:78:bf:27:df:77:70:
34:6a:cc:e2:b3:bb:e3:7f:af:5f:5b:ca:f4:94:c5:
58:b5:e6:10:53:ef:6b:f5:08:e8:75:e6:98:5a:05:
63:03:02:6b:65:2e:5f:5d:90:16:fe:8b:59:48:b6:
a5:9f:37:27:18:2a:a7:3d:5a:f5:75:d9:96:55:4a:
03:89:79:d7:f7:ac:a2:3d:2f:98:7e:d4:1a:97:da:
d7:54:9a:06:75:2c:41:26:62:66:61:d3:05:f9:e8:
58:02:d4:2e:2f:00:bf:73:68:01:46:df:54:69:f4:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:84:5F:64:E6:7D:9E:F5:5B:04:DB:26:0B:13:9E:D8:E1:0F:66
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9f:05:11:58:9a:9c:6c:5a:d4:28:a4:ba:ac:bf:73:11:57:
ac:1e:04:ab:d9:20:09:55:de:18:a8:c5:c2:3e:dd:77:21:e4:
7a:e9:19:dd:13:2f:2b:9e:bb:77:e2:92:c4:19:bc:ca:66:94:
b7:d0:bf:70:4d:39:bc:df:80:e4:e4:cd:a2:87:32:ae:7e:c0:
60:1a:44:c4:ee:d5:5c:a5:63:95:ef:db:17:92:6f:09:03:f2:
6d:c2:e5:63:5b:37:88:7e:93:af:c6:4e:13:53:64:49:2a:6a:
70:2f:eb:c8:5c:45:b8:cc:f2:92:35:b8:e6:0a:e6:0f:79:23:
b6:d3:4e:53:4b:b7:0c:62:8d:30:d2:2e:2b:fa:f5:83:62:c1:
00:f7:ae:97:f8:e2:b2:ef:2e:e1:e6:a2:35:8e:c2:ae:44:ad:
56:06:1c:f5:5c:99:ec:b3:a0:c5:33:ba:ee:7c:af:ae:b9:48:
8c:99:98:ac:61:b7:db:67:a9:47:14:a5:b4:d3:19:76:65:b7:
a0:86:46:12:b0:2f:a8:37:aa:be:05:b5:c6:a8:5a:38:e4:a0:
2b:d4:29:b8:d7:fd:d2:51:88:71:6a:c7:53:b8:00:bc:5f:3d:
b4:40:00:15:80:ea:09:5c:70:df:48:ca:c3:ef:f3:c0:44:22:
ce:e7:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:56 2025 by rpki-client