Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: DEfqz+2kuceV9LrskoOXJwUXA/KfKVj2yh+9xuNy6o8=
Subject key identifier: 74:A6:73:97:E0:30:97:12:3C:22:6D:D5:F5:68:BE:F1:0D:AC:FA:DB
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019845F6F4E3062AA326AF6253FBFD1BD116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 066A
Signing time: Sat 26 Jul 2025 09:01:09 +0000
Manifest this update: Sat 26 Jul 2025 09:01:09 +0000
Manifest next update: Sun 27 Jul 2025 09:01:09 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: slwuYI1wOyBHCJakd1YDtmt5qXazRtY+qV/Tih304Jg=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:f4:e3:06:2a:a3:26:af:62:53:fb:fd:1b:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jul 26 09:01:09 2025 GMT
Not After : Jul 27 09:01:09 2025 GMT
Subject: CN=74a67397e03097123c226dd5f568bef10dacfadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:10:88:1e:0e:1b:4f:d4:d6:90:a5:c6:69:
5f:20:99:b5:bb:d1:23:f9:af:c3:cc:81:ac:56:e5:
77:d3:68:8e:bc:fd:76:a8:70:d5:9a:d9:d2:27:b8:
b4:dc:ae:98:67:7a:98:03:50:1d:d7:dd:c6:eb:0e:
01:6f:21:33:50:e7:2a:ca:09:30:18:d4:6c:63:19:
2f:3b:23:18:ff:e0:90:d2:aa:29:3a:ba:62:73:36:
45:c0:af:00:7d:7b:d7:05:27:32:3e:d6:66:93:cc:
cd:d5:d6:23:f9:89:83:9a:ce:e6:b6:94:fb:d1:28:
82:39:54:81:01:c7:88:72:33:a8:81:02:34:6e:99:
2e:e3:40:a8:e6:61:15:a2:e2:d5:cc:d5:10:3d:e5:
21:b4:7e:cc:40:50:1d:2a:33:bd:43:ac:a7:90:6a:
d2:08:08:ae:bc:a7:74:df:b0:c0:bb:72:bb:1d:b3:
32:3a:9c:f3:bf:f3:d8:5c:bd:b2:94:35:a6:a1:09:
fb:23:e2:e2:97:7a:83:70:33:7b:d6:50:7a:5d:61:
ac:97:ac:59:75:de:50:59:1a:b0:c7:0c:6b:3b:57:
00:a5:3c:ef:66:9d:69:fe:43:8b:8e:04:64:bb:ae:
b9:fa:9e:b9:0b:61:6b:5e:d1:5b:f3:86:38:2e:ff:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:73:97:E0:30:97:12:3C:22:6D:D5:F5:68:BE:F1:0D:AC:FA:DB
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1f:b4:a4:33:27:cf:c4:dc:63:c2:b3:3f:85:4f:77:e0:2f:
5b:90:66:02:c0:30:89:58:c0:e1:a2:9c:4e:9a:2b:62:f7:bf:
ad:b6:a0:19:9e:90:16:2a:1f:df:8a:19:d7:36:3e:cb:6a:92:
a8:a0:f7:72:49:13:f0:ba:92:c8:50:c0:c1:46:fc:5b:27:3e:
e0:e1:3d:6a:56:43:4e:74:5b:71:a6:58:6c:5c:de:fa:b9:d1:
df:01:0c:fb:cc:f8:7f:a9:4e:4d:fd:a2:5c:b6:bd:f3:8c:a9:
1f:d3:4f:b6:02:ff:e1:ce:c5:e4:4e:84:82:cc:f8:be:03:b7:
de:9b:78:5d:f4:cd:5b:1b:5b:f4:04:10:47:72:91:81:fa:11:
5e:2b:a4:82:b0:28:86:2c:f9:dc:70:ed:f3:9f:c0:5e:28:84:
d6:da:82:61:da:f1:6b:93:f2:3a:7d:19:d6:96:7b:50:7d:f0:
ec:4d:b0:7d:09:d1:52:14:c8:42:6e:f4:bc:66:75:1c:a4:db:
ac:73:ca:82:16:65:21:22:36:2a:54:c7:10:6c:eb:73:3b:a6:
d5:e8:91:26:c9:fc:36:79:03:c6:fa:77:e4:35:80:a2:6e:6c:
d8:73:e0:6e:2c:8a:00:88:b5:4d:5d:eb:74:e8:cf:51:69:b5:
7d:a8:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:17 2025 by rpki-client