Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: YBeMEY3SIFNllYxJAhMzgI5N3razx0qlPXuOrwtR6E4=
Subject key identifier: 26:42:EA:7C:04:44:CA:42:04:98:21:11:3A:C1:10:F0:2A:D9:68:D6
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01984B8A36018EAF126C7606D0DC354840D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1446
Signing time: Sun 27 Jul 2025 11:00:05 +0000
Manifest this update: Sun 27 Jul 2025 11:00:05 +0000
Manifest next update: Mon 28 Jul 2025 11:00:05 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: FnPwk2Rtwg8BmOamY19Fihostsyu6hz8NnlsUUwNjHM=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:36:01:8e:af:12:6c:76:06:d0:dc:35:48:40:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jul 27 11:00:05 2025 GMT
Not After : Jul 28 11:00:05 2025 GMT
Subject: CN=2642ea7c0444ca42049821113ac110f02ad968d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:90:11:1d:29:15:ab:ca:a1:5e:ae:0e:d6:
b8:d4:1d:82:8a:44:cc:4c:3b:17:fc:59:c7:50:15:
5f:c4:b4:a6:5e:ac:4f:e6:99:cb:a3:cf:82:a8:d0:
41:b3:df:34:ff:b9:fe:2a:95:64:1f:d1:2e:44:4f:
ee:20:4a:e6:f1:d3:52:a1:3d:fd:ea:ab:79:66:a0:
47:dc:b5:b3:fc:d5:ce:27:9e:93:78:a3:1c:1e:ad:
38:c6:cf:99:15:43:c2:b2:55:73:b8:f5:e7:22:a4:
05:62:70:4b:1d:57:69:f2:2d:d5:57:b2:39:60:6d:
e8:3d:2b:68:a4:2e:df:f7:b6:7f:af:00:d4:ce:da:
3e:0a:aa:dc:d6:21:88:92:dd:7c:4c:30:39:ae:97:
99:25:41:24:10:ea:97:32:20:a9:6c:5d:9a:b8:60:
cc:82:dd:f8:ee:e5:58:64:63:e0:cc:36:45:35:7c:
13:19:7b:11:cb:59:f1:d1:4b:fb:68:33:15:ce:71:
0b:fa:fd:20:b8:0e:41:fc:e9:76:6d:c6:0c:bc:9c:
05:c5:9f:ea:fa:11:17:6d:c4:6d:5f:c7:b7:06:c6:
8e:7c:f8:1c:b0:1b:7d:5e:88:89:25:4a:84:7b:dc:
e7:4f:7c:c9:5a:fe:17:ed:ef:fd:da:43:a3:ff:46:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:EA:7C:04:44:CA:42:04:98:21:11:3A:C1:10:F0:2A:D9:68:D6
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:56:6d:28:36:4d:fc:d2:10:eb:ef:6c:22:42:11:40:94:
bd:d0:54:da:d3:90:4d:97:c6:3d:2f:59:3e:ed:3b:30:68:c2:
5a:67:04:21:1d:56:23:80:e2:64:ec:d0:3a:4c:e7:bd:91:8f:
5d:6b:6f:53:45:63:f1:66:d2:b0:23:2e:92:56:a0:fe:b1:7e:
7c:77:3c:06:af:2e:ea:b5:ef:05:c8:7d:11:ea:e1:2c:45:c1:
98:32:82:36:0c:ba:5a:67:2c:85:fa:77:15:ac:0a:c6:a0:41:
43:d1:f2:d5:d0:23:25:02:2d:56:70:15:8d:4d:9f:2f:68:1f:
9a:f4:a4:62:42:c8:b4:86:2a:81:b3:ea:d8:5a:be:b7:8f:86:
33:8d:6a:88:9a:8b:30:c3:d1:50:8b:7c:7f:ff:ea:f1:d9:08:
02:6d:cd:f8:7b:d9:12:39:9b:bf:af:78:85:6a:8c:59:bd:12:
b5:74:fc:86:02:50:fa:f7:a0:2e:b7:04:f4:25:03:fe:cc:2e:
70:4d:83:c2:87:a7:01:14:2b:1b:b1:3a:f9:b7:45:79:78:54:
20:3d:f3:5e:ef:35:a6:19:ce:a8:60:66:36:3d:e9:78:07:f1:
d4:fb:20:44:76:d3:56:c9:ea:0e:e6:1e:45:26:b7:b5:11:7f:
2f:54:29:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLijYBjq8SbHYG0Nw1SEDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli
M2FmZWYwHhcNMjUwNzI3MTEwMDA1WhcNMjUwNzI4MTEwMDA1WjAzMTEwLwYDVQQD
EygyNjQyZWE3YzA0NDRjYTQyMDQ5ODIxMTEzYWMxMTBmMDJhZDk2OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7yQER0pFavKoV6uDta41B2CikTM
TDsX/FnHUBVfxLSmXqxP5pnLo8+CqNBBs980/7n+KpVkH9EuRE/uIErm8dNSoT39
6qt5ZqBH3LWz/NXOJ56TeKMcHq04xs+ZFUPCslVzuPXnIqQFYnBLHVdp8i3VV7I5
YG3oPStopC7f97Z/rwDUzto+Cqrc1iGIkt18TDA5rpeZJUEkEOqXMiCpbF2auGDM
gt347uVYZGPgzDZFNXwTGXsRy1nx0Uv7aDMVznEL+v0guA5B/Ol2bcYMvJwFxZ/q
+hEXbcRtX8e3BsaOfPgcsBt9XoiJJUqEe9znT3zJWv4X7e/92kOj/0bo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZC6nwERMpCBJghETrBEPAq2WjWMB8GA1UdIwQY
MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt
MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0
LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn05WbSg2
TfzSEOvvbCJCEUCUvdBU2tOQTZfGPS9ZPu07MGjCWmcEIR1WI4DiZOzQOkznvZGP
XWtvU0Vj8WbSsCMuklag/rF+fHc8Bq8u6rXvBch9EerhLEXBmDKCNgy6Wmcshfp3
FawKxqBBQ9Hy1dAjJQItVnAVjU2fL2gfmvSkYkLItIYqgbPq2Fq+t4+GM41qiJqL
MMPRUIt8f//q8dkIAm3N+HvZEjmbv694hWqMWb0StXT8hgJQ+vegLrcE9CUD/swu
cE2DwoenARQrG7E6+bdFeXhUID3zXu81phnOqGBmNj3peAfx1PsgRHbTVsnqDuYe
RSa3tRF/L1Qp4A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:35:53 2025 by rpki-client