Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: ozZoTn3XLbm/3n24KlcrS1fNyLPNzZ3KSQI5uGxfiWw=
Subject key identifier: D9:3C:1F:20:82:BC:19:B1:E5:4D:57:D6:DB:AF:88:92:BC:60:E9:E2
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 01984B8A4E1C61ABFEDBF2ACC3CA7EF65235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: 028D
Signing time: Sun 27 Jul 2025 11:00:11 +0000
Manifest this update: Sun 27 Jul 2025 11:00:11 +0000
Manifest next update: Mon 28 Jul 2025 11:00:11 +0000
Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: jz+PA8Qj/Md8VfWAzoXcL8kDgT9F41BLNNSvgN/m4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:4e:1c:61:ab:fe:db:f2:ac:c3:ca:7e:f6:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Jul 27 11:00:11 2025 GMT
Not After : Jul 28 11:00:11 2025 GMT
Subject: CN=d93c1f2082bc19b1e54d57d6dbaf8892bc60e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:b4:ee:25:c3:13:92:c9:5d:b1:29:77:80:
4d:36:71:da:68:c7:48:dd:60:fb:77:1e:9d:7e:a0:
89:95:cc:75:85:6d:cc:64:93:8f:b5:8d:74:5f:0d:
85:cb:d8:9e:4a:6a:21:e4:f8:1c:b9:c5:d7:11:09:
6c:79:94:07:3f:6e:c7:fd:bf:63:b1:9e:a5:e0:cf:
00:d7:ec:ea:9e:a2:c4:3a:4c:d4:f8:26:4d:ec:b0:
72:73:3c:7c:d6:f2:ab:53:2c:40:11:08:a0:c6:a2:
88:c2:8b:7d:3a:79:af:86:a5:a2:40:0c:51:17:2b:
3e:e4:c5:3a:fa:88:69:1e:92:57:f3:59:9c:3d:81:
a0:f7:7e:a5:87:77:e9:d8:ea:45:14:1a:b7:97:3d:
9b:94:b6:e0:d2:c0:3c:5d:fc:d9:0a:e6:e2:67:d4:
ba:13:d9:99:ec:93:71:39:4e:00:26:9b:66:76:4a:
6b:85:c1:72:25:9f:3f:5f:fc:77:60:17:e6:e1:46:
e4:70:6f:29:49:92:b3:47:59:c4:1f:5d:63:ab:c3:
44:6c:93:b2:2a:62:bb:fe:27:03:9f:c9:ca:5c:9a:
e4:21:3a:07:1b:17:ad:e9:06:9b:ee:80:e8:95:59:
01:1d:af:be:1b:c6:7a:9d:a1:38:41:96:26:29:9b:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:1F:20:82:BC:19:B1:E5:4D:57:D6:DB:AF:88:92:BC:60:E9:E2
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:ff:42:51:77:3d:f9:b0:03:ea:49:39:54:8c:68:fb:bf:
37:a4:83:ed:b0:95:a1:19:23:34:ce:95:6f:70:44:03:b3:4c:
b2:6e:c2:91:fa:f2:cc:b3:41:cb:d4:46:00:8f:22:1c:d6:ca:
bf:b4:68:d6:99:ad:52:35:f1:a9:6e:b4:72:25:79:b8:c0:b7:
ac:05:19:55:66:4d:01:9e:2b:fa:d1:fc:f4:a8:2f:0f:02:d1:
fe:1b:d1:02:81:49:4e:dd:f1:d4:27:45:f1:c8:dd:a8:9d:b6:
b0:af:4e:47:92:1c:b8:91:b6:15:c2:63:86:71:a3:65:43:07:
72:7c:5e:ae:60:9d:20:24:78:3e:70:73:8d:34:7a:8b:7e:c0:
dd:76:2e:e6:1a:34:18:f4:fa:f1:39:03:53:e6:83:de:d9:9c:
05:f9:ba:c1:61:65:63:e3:e8:bb:03:30:40:73:34:3d:1a:a4:
cb:a1:d6:bc:3c:c2:60:4d:4b:f4:9f:d8:8b:6c:5c:4d:64:5a:
72:13:5f:a0:56:38:cc:70:44:4f:c9:4b:02:90:28:74:89:85:
e0:ee:f0:1c:74:c3:7d:e8:0e:ea:96:a6:40:72:7d:11:08:3d:
9b:4f:00:a3:e6:4d:98:4c:ca:7e:50:01:87:60:2d:e1:32:dc:
47:7e:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:04 2025 by rpki-client