Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: /6NQ7XcP4WpOJZeAnTqcctgvNOSovdM1uiWdfmRBdJM=
Subject key identifier: A9:CE:4E:3B:60:DF:26:91:CD:9A:38:7D:5F:11:98:6A:D0:8D:6D:93
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019855A090D668A46482CCDA9CA817E1DF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 10:00:42 +0000
Manifest this update: Tue 29 Jul 2025 10:00:42 +0000
Manifest next update: Wed 30 Jul 2025 10:00:42 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: uzqk5L9PWnJEFfVTR3R00vOmqzFr6lIiowfHK9pDJ64=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:90:d6:68:a4:64:82:cc:da:9c:a8:17:e1:df:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jul 29 10:00:42 2025 GMT
Not After : Jul 30 10:00:42 2025 GMT
Subject: CN=a9ce4e3b60df2691cd9a387d5f11986ad08d6d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:02:f3:6f:ca:89:49:7c:59:5f:f9:e6:d8:
24:1f:0b:28:d7:a8:84:c3:ee:b9:f5:7d:eb:4c:55:
3e:33:fe:3e:b7:6b:a2:1d:5b:0f:11:7c:41:b1:57:
9f:82:4d:ca:7f:09:f4:d8:81:26:dc:12:a5:1a:92:
2f:60:e5:bf:ca:46:02:12:fb:b2:f0:8a:07:26:88:
20:a6:f4:f3:41:a8:74:76:c1:f2:99:79:c9:f1:41:
f0:27:c3:76:59:d0:b9:1f:15:55:3a:28:db:8c:2e:
89:b8:81:80:05:a8:85:ef:25:c7:73:f6:b4:a8:ab:
8a:10:18:d0:37:0e:9f:48:41:cf:09:b0:78:9b:d1:
2c:2b:54:70:a5:60:e8:be:0f:71:7c:74:fa:5e:91:
eb:18:26:fb:0f:e2:de:18:5a:0d:38:d7:83:bf:96:
0e:5a:04:fb:6b:1b:05:43:00:13:ba:51:39:7e:7d:
ee:47:92:8b:29:d5:f1:ac:b1:08:2b:0f:a3:86:48:
1e:92:09:e9:57:f9:16:b0:9f:b1:49:ac:e6:db:6a:
c5:ca:19:5f:22:2e:ef:46:b6:95:09:8c:9c:f7:66:
ab:84:c0:35:39:e5:e2:c4:4f:c7:db:6d:4b:97:6e:
1b:32:a4:7d:52:bb:4d:de:7a:1a:32:33:52:6f:bd:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:4E:3B:60:DF:26:91:CD:9A:38:7D:5F:11:98:6A:D0:8D:6D:93
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:85:ed:c6:dc:79:28:cc:bd:dd:3b:5c:f7:82:16:1b:3e:
85:ec:26:c6:97:34:0f:37:53:f8:bf:83:1b:98:00:b4:72:de:
d0:be:de:80:ca:e2:5e:db:25:d7:5a:16:ab:60:e8:09:3a:af:
91:01:8f:38:45:23:47:78:24:77:bb:ca:fa:3f:dd:0d:ae:69:
53:1e:37:fd:93:a4:65:35:98:14:6c:75:a1:39:c3:27:2c:b8:
44:2b:52:14:4c:91:70:09:05:27:a7:98:05:5f:5a:b4:18:12:
08:ca:ac:2e:1d:14:23:e7:aa:2e:9f:78:89:0b:da:50:a4:ed:
5d:a6:0b:c4:05:77:f5:e1:5b:d2:be:c7:37:fd:1e:29:ec:9e:
75:a9:79:fd:b3:ea:87:4f:bf:b0:10:02:70:02:30:85:a9:56:
6c:da:ed:d1:da:94:14:15:9a:87:ac:f9:51:4c:7c:5f:5b:ab:
0f:d5:b7:90:fe:bf:61:d9:fe:74:5d:df:a4:40:dd:c4:b3:63:
fc:79:fc:f7:fa:26:35:98:94:5e:3d:90:b3:c7:b7:9b:8e:76:
ab:7b:d0:f6:f0:68:57:fb:64:02:c5:9d:27:ef:d7:58:1f:4a:
58:af:43:3c:10:9a:0a:a4:fd:a7:a0:4f:97:e7:ed:76:1f:12:
e2:1d:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:36:13 2025 by rpki-client