Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: eQdYA3MYVHUhnEC5NGuJootP2opBWe0sFcsyUSfVP4c=
Subject key identifier: 28:B5:78:DB:43:66:91:2F:FD:A7:7F:1A:93:53:30:E9:26:9A:89:0E
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 0198451AADF3CE550B0691F93E3AA80C597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 0CE5
Signing time: Sat 26 Jul 2025 05:00:33 +0000
Manifest this update: Sat 26 Jul 2025 05:00:33 +0000
Manifest next update: Sun 27 Jul 2025 05:00:33 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: BH/0q/Fp0phxNFeIei6xPPzgWGRr0h+1PYTYtrFRsng=)
2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:ad:f3:ce:55:0b:06:91:f9:3e:3a:a8:0c:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Jul 26 05:00:33 2025 GMT
Not After : Jul 27 05:00:33 2025 GMT
Subject: CN=28b578db4366912ffda77f1a935330e9269a890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:e9:3d:4c:bf:6a:a0:1c:0d:35:08:a1:78:
cc:54:dc:ff:38:a4:47:ac:79:2b:13:84:83:45:b6:
c6:6c:5c:0e:7b:36:e8:24:9b:4c:ee:8c:6d:47:22:
06:cf:6d:f2:c8:5a:43:f4:b1:56:54:43:41:7c:7b:
f8:3b:7a:0b:a7:01:d5:61:42:d9:b2:31:3e:ae:37:
4d:f4:3e:c8:80:46:19:f9:27:3a:7a:8f:cc:19:4c:
1d:2e:39:8d:be:a5:d6:98:db:48:bf:ca:7d:54:7d:
9d:95:2f:f3:68:df:fe:cf:dd:a4:60:d0:0e:7e:db:
38:99:52:0e:ea:71:4e:1b:f5:10:4a:c8:20:e2:51:
13:bf:8b:3e:7f:ec:58:0f:c5:4a:8d:4b:73:62:6c:
aa:de:1a:a9:a9:3e:33:55:34:21:23:78:a6:a4:1c:
25:18:df:8f:b2:1b:db:3c:32:3b:0a:59:14:5a:78:
1e:9e:57:56:69:01:8f:88:1a:4e:78:aa:6a:f3:80:
3b:47:cc:b9:39:29:02:d5:e2:26:19:40:b7:e4:3e:
b7:2d:d0:94:30:87:64:5d:a9:a5:be:41:83:cc:c3:
f7:cb:d3:7b:3f:22:c1:0c:fc:f6:f0:ab:7a:9a:76:
22:a0:ca:91:dc:27:26:98:2d:5c:1b:bd:8d:1a:74:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:78:DB:43:66:91:2F:FD:A7:7F:1A:93:53:30:E9:26:9A:89:0E
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:52:40:07:a0:21:37:03:15:36:5d:51:d2:b8:4d:db:e8:
d0:1f:49:5d:e4:5c:03:ea:2e:e8:c7:1a:fe:31:d9:83:f4:73:
cb:4f:45:39:a2:71:57:39:c2:2a:b8:d9:42:cc:08:4a:06:24:
4a:03:a8:36:67:f9:72:42:b1:fc:37:5e:69:74:bf:3b:24:7a:
39:f0:b9:39:a4:87:9c:15:17:ae:d1:78:eb:d2:25:e5:1b:cc:
e2:be:ae:1e:77:26:05:fc:f4:2c:9c:11:79:cb:db:ad:9e:6d:
62:56:5b:8e:23:2e:dd:eb:0e:ed:38:70:5d:19:69:ce:53:6e:
7d:0d:fc:66:07:bd:c3:4e:57:43:b8:cd:bd:8f:63:39:d8:b6:
64:ba:31:52:d0:cf:e7:2d:c0:8d:30:c2:05:51:20:61:fd:80:
fc:73:a4:f6:4c:2d:67:a4:ba:a0:f1:24:c5:a5:08:0d:91:c1:
86:64:96:90:8a:6f:43:a6:05:29:08:68:e8:cc:fd:f7:52:6f:
74:0d:4b:dd:f9:f8:3f:b0:92:d5:ae:23:94:8d:75:c8:bc:ff:
79:ef:dc:d4:d9:08:5c:1b:63:71:6b:09:6f:06:1e:00:99:36:
ac:ec:a1:14:6f:57:81:16:62:69:a1:f9:63:22:cc:77:59:7b:
4e:36:02:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGq3zzlULBpH5PjqoDFl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi
NTZhOTIwHhcNMjUwNzI2MDUwMDMzWhcNMjUwNzI3MDUwMDMzWjAzMTEwLwYDVQQD
EygyOGI1NzhkYjQzNjY5MTJmZmRhNzdmMWE5MzUzMzBlOTI2OWE4OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1trpPUy/aqAcDTUIoXjMVNz/OKRH
rHkrE4SDRbbGbFwOezboJJtM7oxtRyIGz23yyFpD9LFWVENBfHv4O3oLpwHVYULZ
sjE+rjdN9D7IgEYZ+Sc6eo/MGUwdLjmNvqXWmNtIv8p9VH2dlS/zaN/+z92kYNAO
fts4mVIO6nFOG/UQSsgg4lETv4s+f+xYD8VKjUtzYmyq3hqpqT4zVTQhI3impBwl
GN+PshvbPDI7ClkUWngenldWaQGPiBpOeKpq84A7R8y5OSkC1eImGUC35D63LdCU
MIdkXamlvkGDzMP3y9N7PyLBDPz28Kt6mnYioMqR3CcmmC1cG72NGnSrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi1eNtDZpEv/ad/GpNTMOkmmokOMB8GA1UdIwQY
MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut
MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx
LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoRSQAeg
ITcDFTZdUdK4Tdvo0B9JXeRcA+ou6Mca/jHZg/Rzy09FOaJxVznCKrjZQswISgYk
SgOoNmf5ckKx/DdeaXS/OyR6OfC5OaSHnBUXrtF469Il5RvM4r6uHncmBfz0LJwR
ecvbrZ5tYlZbjiMu3esO7ThwXRlpzlNufQ38Zge9w05XQ7jNvY9jOdi2ZLoxUtDP
5y3AjTDCBVEgYf2A/HOk9kwtZ6S6oPEkxaUIDZHBhmSWkIpvQ6YFKQho6Mz991Jv
dA1L3fn4P7CS1a4jlI11yLz/ee/c1NkIXBtjcWsJbwYeAJk2rOyhFG9XgRZiaaH5
YyLMd1l7TjYCGQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:26:09 2025 by rpki-client