Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File: 6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier: BA984zyCZEVYCvXKYozKEE2Kq88cthUIEnWbHqYl1VU=
Subject key identifier: 86:81:90:A9:DF:4E:84:F1:CA:D9:C4:2A:D1:DE:9D:40:31:3A:C9:08
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer: /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial: 01984B554081458142705DCF492DF676E3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number: 0AE6
Signing time: Sun 27 Jul 2025 10:02:14 +0000
Manifest this update: Sun 27 Jul 2025 10:02:14 +0000
Manifest next update: Mon 28 Jul 2025 10:02:14 +0000
Files and hashes: 1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: EuZn+mtRyhMoDcymxWEs5O8pitxMYhexCclG67qVUM0=)
2: gWnW9lnMPM8qZ8END1_wzvVFr0k.roa (hash: c0ARRE6viXKVlOCnUB1u64Fg2irbTI2KZRKH/h8XIAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:40:81:45:81:42:70:5d:cf:49:2d:f6:76:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Validity
Not Before: Jul 27 10:02:14 2025 GMT
Not After : Jul 28 10:02:14 2025 GMT
Subject: CN=868190a9df4e84f1cad9c42ad1de9d40313ac908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:9b:6b:e4:91:95:a5:c1:d5:96:bf:af:5a:
b5:54:ba:a4:39:e5:c8:cf:b6:7c:c5:da:f0:6d:a0:
87:4d:37:f3:2b:8d:a8:d4:19:17:75:a6:15:4d:6d:
da:40:73:df:26:47:84:f4:73:ac:bf:47:10:e7:18:
d5:9f:43:76:ef:fc:8c:2f:cd:26:c3:d7:14:06:84:
96:4f:71:36:c7:c2:63:0f:fb:33:a6:65:0f:92:17:
c7:be:e8:78:44:21:de:2b:ae:25:20:b9:fc:e6:b4:
a3:3f:eb:d7:a6:d5:ac:2a:06:71:9c:1d:5e:12:01:
96:78:b5:4e:d3:72:09:73:61:e8:77:3f:49:48:7a:
d1:a2:b1:b2:ad:1b:8f:a7:29:61:e6:37:93:52:40:
f0:ef:5b:0d:80:b9:f9:3e:76:a5:35:eb:23:f2:e4:
f1:2f:45:d5:1a:08:b6:82:66:ac:23:d1:60:e5:27:
14:2c:4f:cf:01:89:02:d9:4f:23:b6:aa:4b:b3:e6:
5c:31:8c:d9:53:58:ea:a6:26:cb:c0:40:22:bf:40:
5c:d3:d3:30:44:2d:06:64:3e:6e:56:5b:ac:64:42:
15:4e:f2:e4:b1:48:30:30:ba:a7:30:91:dc:52:87:
17:e6:47:42:c2:1b:4e:4f:a0:34:52:ce:cc:ec:93:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:90:A9:DF:4E:84:F1:CA:D9:C4:2A:D1:DE:9D:40:31:3A:C9:08
X509v3 Authority Key Identifier:
keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fa:d5:b0:b3:54:4a:6d:ea:97:55:d9:74:ad:f8:b8:d1:0c:
92:2c:48:90:4a:f6:84:7d:d0:d0:dd:5f:b4:50:02:7d:47:e6:
ce:17:00:1e:be:01:69:29:f6:93:8a:33:7e:93:0d:cf:ea:24:
ee:3e:6f:35:4d:74:80:19:1e:77:7b:fb:ad:ef:4e:b4:af:9c:
d3:9f:2e:4c:9a:26:db:be:7f:4a:aa:4e:25:34:d4:55:42:c0:
7d:49:4e:f6:de:f5:8b:8e:01:a1:34:fa:85:ef:60:34:bf:cb:
3d:70:97:78:2c:7b:df:9e:18:99:12:3f:e5:55:9f:e0:08:65:
8c:45:db:1e:14:02:b3:c1:b2:57:3a:71:65:b9:78:4e:03:0f:
1f:84:01:cb:ff:d7:a7:ef:48:5d:db:86:29:f9:ef:a8:34:7b:
53:cb:ab:06:56:6d:55:12:30:92:7c:c9:c1:f8:7d:1e:d9:e1:
c7:ac:12:d4:17:05:41:c3:6b:b5:ef:0f:eb:11:58:a8:31:6f:
d0:ac:6c:97:0f:8c:00:5e:d7:e3:5e:85:9d:06:46:c4:ae:96:
54:ee:44:c7:20:4b:90:b6:a5:35:e6:35:ac:b1:d4:1d:cd:6f:
22:ff:b6:88:5f:46:96:bb:3f:a6:9c:c8:d2:1f:81:3a:b1:a7:
27:2e:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:32 2025 by rpki-client