Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: +TjwemT2gFYipzrBKPb86nuBcOO6W/F/Fg1rgHUTFkE=
Subject key identifier: 52:4E:82:5D:53:10:FA:1E:85:37:71:BC:1F:2D:DE:3C:A1:B1:9C:62
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019848F73B41F6F5A17F2896B23D7AA41F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 038C
Signing time: Sat 26 Jul 2025 23:00:18 +0000
Manifest this update: Sat 26 Jul 2025 23:00:18 +0000
Manifest next update: Sun 27 Jul 2025 23:00:18 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: NEuDdv34LFGQ6xl+FpQKDNL31njYqsHTUefhhEfhkMs=)
2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:3b:41:f6:f5:a1:7f:28:96:b2:3d:7a:a4:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Jul 26 23:00:18 2025 GMT
Not After : Jul 27 23:00:18 2025 GMT
Subject: CN=524e825d5310fa1e853771bc1f2dde3ca1b19c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:23:71:7b:41:12:2d:33:52:47:42:26:4f:
b7:9a:d8:b0:de:46:87:78:fb:e5:4a:94:54:10:d9:
b0:45:6c:2c:d8:cb:56:80:97:83:c9:49:58:6c:de:
0d:80:b9:9f:fd:d8:4a:19:e1:8b:44:91:be:ac:e0:
b7:6d:98:f2:46:0b:e7:3a:e7:04:ca:a9:08:ab:fc:
1b:77:c7:07:54:7a:bb:de:62:ef:c8:05:6c:3b:1d:
66:41:d4:ea:2c:dd:ec:3e:84:af:ae:2f:30:05:ea:
42:92:d2:40:89:ec:39:14:f5:09:d7:2b:b4:a3:ba:
05:3c:4d:c3:db:c7:bb:60:ef:a9:3b:a9:5d:46:c7:
0c:64:9c:85:47:8b:3d:32:ba:71:50:fa:7d:5e:4e:
0f:fd:89:32:8a:a4:05:4e:73:0e:99:6f:de:82:ee:
ee:e3:ee:52:df:99:79:3d:df:80:0c:c1:bd:2d:bf:
f4:bb:dc:38:d6:5a:5f:e7:de:ec:3c:2a:d6:b6:b9:
d8:1c:20:48:f3:ac:49:f0:c7:78:61:df:30:f1:f9:
bf:11:dc:db:c6:9c:3c:2c:6a:8d:b2:8c:b3:34:f0:
7d:45:4c:4c:37:38:3d:07:5d:06:23:07:0c:3e:71:
62:fa:b8:6c:d6:dc:98:30:73:22:13:8b:4a:55:bf:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:82:5D:53:10:FA:1E:85:37:71:BC:1F:2D:DE:3C:A1:B1:9C:62
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:52:3c:1f:70:bd:01:e7:84:99:51:31:20:38:f0:d9:a4:
52:de:1e:13:f6:23:ec:42:03:dc:6a:dc:65:26:b3:fd:2b:ba:
82:3b:04:9b:9b:7f:ad:d6:66:29:f4:a5:07:c1:a7:bb:70:3d:
46:05:64:43:f3:fa:2e:0a:8f:93:bb:a5:5c:67:2d:92:c9:14:
ac:41:c9:07:6a:d1:36:12:77:72:39:c3:e4:2e:b9:bc:17:3e:
df:4f:83:c7:34:0d:45:2f:95:41:10:d2:ff:32:de:e6:42:34:
6c:5c:0a:1c:67:4f:e1:8e:2f:60:48:e9:23:73:65:4b:31:9d:
c6:b0:f1:20:76:84:56:2c:26:31:08:02:ae:4a:05:01:3d:0a:
cf:86:6b:b3:66:a7:c9:e3:68:ed:92:26:92:cd:1f:ab:31:88:
c9:ca:69:72:a1:3a:6f:9c:08:ab:22:65:26:3f:fe:be:21:37:
d7:dc:c9:98:e9:ec:d0:91:bd:5c:36:cc:ff:92:da:f5:4a:5c:
bb:4d:13:05:5b:fc:a5:16:d8:b8:67:bb:4e:43:ed:c6:f6:22:
a8:17:16:7b:b2:80:e8:6f:e7:3b:71:c5:ed:b0:90:ab:b6:f9:
71:6a:a3:08:1a:a0:39:57:0b:c0:81:95:be:1c:8a:54:9c:29:
8b:b6:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:21 2025 by rpki-client