Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: wqN2T9i471Tyzl0PjfrFurCZWifAu1i4IIBA4bTRDwY=
Subject key identifier: F3:50:6E:A8:2C:6E:25:71:1A:A2:E8:6A:1B:21:C1:52:D7:D4:D8:D0
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019848F70B1CE292A66481F9C25C15B71E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 05AC
Signing time: Sat 26 Jul 2025 23:00:06 +0000
Manifest this update: Sat 26 Jul 2025 23:00:06 +0000
Manifest next update: Sun 27 Jul 2025 23:00:06 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: CpuGDgl2h+5RQ6E1DYrPikNKhAz2n3IoFpGcRzl4uD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:0b:1c:e2:92:a6:64:81:f9:c2:5c:15:b7:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jul 26 23:00:06 2025 GMT
Not After : Jul 27 23:00:06 2025 GMT
Subject: CN=f3506ea82c6e25711aa2e86a1b21c152d7d4d8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:1e:0b:c7:26:5a:09:e9:96:e3:29:13:24:
d5:8f:5e:d7:f9:9f:99:3a:aa:a9:50:fd:5f:6f:8e:
e8:db:57:02:23:cf:fc:4c:54:e0:c4:a9:ee:e4:d9:
1a:85:f8:b4:f3:a2:40:7e:0e:26:ec:98:65:66:1c:
3d:72:a7:03:d6:47:9d:a9:5d:e1:dd:da:2c:35:76:
dd:93:1a:b5:b2:6b:9f:ca:29:99:85:dc:65:71:ba:
60:37:35:69:35:cb:76:cb:64:66:9d:53:98:41:b9:
f4:df:7e:0b:af:c9:fc:ba:ef:61:9f:b1:31:46:7b:
24:83:18:81:da:b1:09:3c:61:b3:6f:0c:46:7d:06:
43:b0:9b:8e:7b:cc:10:89:1a:cf:59:e9:ea:4b:a8:
58:b4:c5:f9:b4:ee:95:ba:e1:0c:73:dc:ae:50:2a:
32:c4:08:eb:61:65:d8:89:fe:d3:78:11:ca:17:5a:
eb:9a:7a:45:a0:7a:d1:c9:95:41:9f:d7:78:d7:74:
9f:ab:e1:d1:06:b6:c0:ad:86:80:2d:50:ab:b2:a8:
74:a7:39:8e:26:9d:e0:12:44:bb:18:8b:43:e9:5d:
3c:ed:b9:82:45:95:63:3a:d8:c9:d0:b2:06:6c:d1:
e1:c3:1d:89:7c:5c:07:2d:f7:a4:4d:1e:f3:dd:55:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:6E:A8:2C:6E:25:71:1A:A2:E8:6A:1B:21:C1:52:D7:D4:D8:D0
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ba:08:00:01:81:6c:13:dd:de:d4:67:43:2b:0f:58:41:56:
fa:19:dd:e3:e4:56:86:00:ee:d8:f7:ea:ef:c2:6a:37:4d:b1:
fe:16:96:a6:33:78:8f:80:5b:28:e8:78:89:4c:1b:d0:53:3f:
a7:6f:e2:c1:3e:f5:4b:c5:75:16:b4:9c:19:5b:b8:2b:52:58:
fc:ed:47:96:bd:6c:79:15:ed:b7:10:a9:6c:a0:83:74:97:ad:
a1:33:ae:d2:f3:de:77:69:6a:d0:bc:32:5d:fc:be:94:d5:f6:
14:f1:b5:5b:c2:93:c0:8f:f1:83:28:c8:c7:fb:91:b9:71:a3:
68:c9:db:85:3a:57:c9:96:f7:8a:17:d1:c7:ef:c2:f9:5a:ce:
74:86:8c:8e:80:2d:75:fd:fa:e0:51:8a:a3:24:6c:46:df:69:
87:ed:15:0a:e8:d8:ee:c2:c0:fd:f6:20:64:b1:f6:b8:cb:38:
21:02:9e:89:e6:11:3c:9d:20:2a:32:8b:e6:52:21:a5:23:4e:
75:c6:53:1f:f5:b8:62:e3:8f:67:02:96:51:2f:4b:c9:52:b3:
31:94:7a:40:be:e2:29:b6:63:c8:23:f5:8f:69:97:26:3c:1e:
84:7a:d6:4f:71:b2:e4:51:56:1f:4a:5d:df:9b:81:9d:c8:d8:
09:33:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:27:28 2025 by rpki-client