Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File: 6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier: 4akb5cykXmWs6OTZ6wM5eOiSP2VS/kbkn3ffzdQS7zA=
Subject key identifier: 1E:AA:7B:A0:07:9A:4D:C6:B0:60:2F:5C:4A:17:8D:C7:53:D5:9F:99
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer: /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial: 019845BF527FD159A1DABE7429E16B902A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number: 02A0
Signing time: Sat 26 Jul 2025 08:00:23 +0000
Manifest this update: Sat 26 Jul 2025 08:00:23 +0000
Manifest next update: Sun 27 Jul 2025 08:00:23 +0000
Files and hashes: 1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: 8uNIbDKJp84fyBzSJMVxZCOZgGRJQeGNgMYDX8KUuco=)
2: h7PFRK9JVEjEeYKLwrOpI4thEoU.roa (hash: I2CraLnGlKelMJHEzdxSGPPTjEK/b4QFtKA7mGsY/DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:52:7f:d1:59:a1:da:be:74:29:e1:6b:90:2a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Validity
Not Before: Jul 26 08:00:23 2025 GMT
Not After : Jul 27 08:00:23 2025 GMT
Subject: CN=1eaa7ba0079a4dc6b0602f5c4a178dc753d59f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:77:0f:fe:91:dd:ff:29:9b:72:72:29:4e:
22:e0:aa:5c:fe:74:5f:d1:c4:cd:d9:5b:73:78:6d:
03:05:a1:a5:29:28:80:88:62:38:93:79:48:8a:6d:
b4:3f:cf:55:df:f6:09:79:66:42:f3:f9:11:52:91:
e8:64:27:dc:cc:5e:be:b3:4f:2c:74:b7:38:56:41:
13:a8:73:1b:1b:8e:07:b1:85:73:5a:ca:48:b3:5b:
75:e6:5a:ba:f4:37:04:31:4f:ce:f7:4f:37:e6:85:
b8:fe:e4:cc:7f:c7:fa:16:c8:b1:95:83:8c:bf:a2:
e7:f9:da:20:f4:86:04:8d:56:1f:a4:b9:c0:59:93:
18:50:38:44:4f:2a:d7:7e:99:36:47:fb:0c:33:00:
2a:99:0b:80:ce:26:25:8f:f3:72:1e:76:07:b5:16:
67:99:87:8e:49:b2:d8:0a:09:58:c7:ec:1b:14:c1:
28:74:75:2f:be:5a:57:1e:0a:9c:46:9f:9d:cc:85:
70:9f:e7:b8:d9:55:05:80:7d:7b:cd:de:7f:2b:c1:
49:c7:ea:ba:66:53:12:7b:b2:6a:80:f3:bc:65:64:
8b:29:41:df:24:e4:12:48:e9:6d:0d:04:d6:57:b9:
e3:f0:a1:8a:21:62:4d:16:08:00:4c:45:22:73:de:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:7B:A0:07:9A:4D:C6:B0:60:2F:5C:4A:17:8D:C7:53:D5:9F:99
X509v3 Authority Key Identifier:
keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:74:b4:f8:23:be:d5:1a:b9:48:57:22:ac:e6:36:47:7c:
46:d8:b5:78:98:81:71:78:eb:16:9d:4c:8b:e5:f8:f9:ff:d2:
85:52:a6:aa:42:e0:90:2b:e0:43:f0:5c:25:a9:b6:d2:8a:6b:
19:80:d2:0f:59:4f:9c:29:53:f6:7a:e8:ba:05:a3:0b:7a:49:
f6:f7:b4:61:1a:38:74:b9:b7:4e:47:8c:a9:22:b2:4b:12:15:
90:e7:aa:b1:a7:24:df:8f:ef:ac:2b:b7:48:b9:ce:b6:dd:23:
ef:6f:41:68:f8:39:e5:37:06:81:e7:4d:13:ac:03:b4:56:ac:
93:7e:0f:8b:15:40:b8:f0:9c:7a:df:6d:3d:76:3b:94:05:05:
af:8e:98:bb:80:f2:1e:f4:60:d4:c8:4a:b6:53:80:c5:4b:ff:
85:e6:b6:f1:75:70:a5:6e:d2:c6:87:b1:3c:40:4a:b3:a8:dc:
e0:30:47:57:5c:9e:81:f3:bd:e1:89:58:e5:de:3a:97:1f:1f:
4f:80:a7:11:e8:04:15:7a:8d:20:11:54:2b:16:3b:ec:32:a1:
38:94:3c:a9:b1:9d:90:dd:9d:cd:33:5b:cc:8a:f6:35:c2:a8:
5c:e0:ee:34:85:38:c8:7b:65:43:21:3e:ee:03:8f:03:7b:4f:
2d:17:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:13:56 2025 by rpki-client