Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File: 6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier: oGMdL5olRCxmeY6DYT4XME4oA7O2ScPwn+S67oKw2Fo=
Subject key identifier: DB:80:3F:66:CC:D7:59:08:0D:C1:EA:14:F2:C5:65:13:AA:F7:E2:30
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 019855326638FE60A4DB1911B874E61AA824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number: 08D3
Signing time: Tue 29 Jul 2025 08:00:23 +0000
Manifest this update: Tue 29 Jul 2025 08:00:23 +0000
Manifest next update: Wed 30 Jul 2025 08:00:23 +0000
Files and hashes: 1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
2: 1KHRlfAmZCjgdchpsV2t_4c1OSE.roa (hash: WCQTHOW/Hv3m0ge62Xw1HCKv223lQ6k0GOEHqDCZYTs=)
3: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: ujQ0jTdnYT35eYPRmwuLym0G08a5aGD0KRypH24FgvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:66:38:fe:60:a4:db:19:11:b8:74:e6:1a:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Jul 29 08:00:23 2025 GMT
Not After : Jul 30 08:00:23 2025 GMT
Subject: CN=db803f66ccd759080dc1ea14f2c56513aaf7e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:70:5f:78:a2:ff:09:6f:05:94:48:65:ac:
a6:85:bd:02:05:d6:f2:a3:b3:44:66:21:c3:68:14:
aa:7b:89:51:ec:c5:68:de:9a:d6:45:e0:dd:d0:11:
0f:46:fa:92:14:1c:93:b2:a6:e0:6c:74:ab:58:7f:
fb:65:31:f4:b8:57:c2:97:d6:f3:36:15:b0:a8:56:
80:32:00:d0:1b:1e:bf:66:f5:e1:ac:59:57:27:e5:
de:c1:5e:e3:91:52:e3:51:28:e4:b1:cf:e4:66:d6:
22:6f:67:4f:c5:d6:15:68:95:36:0c:8b:0f:84:b1:
95:43:92:53:b8:d1:1b:2d:56:f2:06:8e:cb:67:a0:
39:12:0a:10:9d:6b:87:d5:e1:21:51:9b:43:ff:d0:
15:36:22:f8:e1:0f:72:33:fa:3f:f4:51:43:7a:18:
75:ce:00:7c:dd:b0:2b:74:69:9c:dc:4c:f5:7b:6a:
a1:84:8c:39:f8:56:13:90:02:f0:67:53:28:62:2c:
c4:51:e6:e0:b5:27:1a:4c:d0:fa:93:2d:e1:0a:e2:
18:5d:c6:f7:7b:13:3f:9d:b0:4f:57:58:fa:e4:6e:
38:c6:77:6e:49:66:f0:c7:cf:cd:56:43:7b:54:32:
7b:09:a9:d2:d7:a7:1e:0c:0c:f2:f1:ae:71:e3:fd:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:3F:66:CC:D7:59:08:0D:C1:EA:14:F2:C5:65:13:AA:F7:E2:30
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7e:cb:fb:08:66:1f:d7:1c:22:a0:75:10:fb:00:f8:33:cf:
70:a3:9f:63:58:8f:1d:1f:dc:71:5a:bc:50:ea:1d:ee:4c:7f:
4a:55:da:eb:41:85:ed:23:4f:66:ba:5c:43:a2:8e:11:db:11:
33:98:04:16:59:d0:bd:ee:ff:f1:d3:8c:38:af:73:3b:12:fa:
e5:54:8b:4f:37:e7:99:06:0e:e4:cf:f1:b1:23:f9:aa:12:c7:
c0:ec:84:8f:16:49:10:9d:d8:99:97:be:37:bb:a0:d2:f8:e3:
34:92:94:7e:31:68:cb:ba:18:7f:55:94:20:aa:f1:50:42:b4:
9e:37:63:cf:d1:c8:70:8e:1e:d9:fb:5d:05:f8:b5:b0:9b:1b:
88:73:1b:ea:fb:0b:fd:86:1b:ed:fe:15:c7:b5:2c:1e:03:1f:
c6:21:b8:28:32:30:b1:59:cb:eb:33:ae:49:32:07:96:b6:1b:
66:99:41:ba:65:b3:39:20:c0:7e:73:5d:99:42:60:de:5c:bd:
99:70:08:52:1e:e3:fd:0d:bd:d0:74:07:ac:5c:7a:4b:85:66:
ad:40:e3:10:4b:2c:ae:a3:e9:6f:1e:db:a6:31:7b:13:31:17:
99:f0:e8:95:83:e2:5e:85:9f:e9:b1:7d:e7:eb:fd:f3:1c:fa:
cb:64:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:12:31 2025 by rpki-client