Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: POuVpcomFLGmDbixxrMEyYjddsjnNlZrae9h6hXpaHw=
Subject key identifier: 99:A8:1F:BD:E2:4D:57:D5:A6:9F:99:DA:9A:80:A5:73:AA:A6:B1:83
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019933B6B3FB45214B314047C717113AFCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 13:00:35 +0000
Manifest this update: Wed 10 Sep 2025 13:00:35 +0000
Manifest next update: Thu 11 Sep 2025 13:00:35 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: viBM8/Chi0DId1OnENw+x1YPN9gABnrrdNafoZuFkbM=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:b3:fb:45:21:4b:31:40:47:c7:17:11:3a:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Sep 10 13:00:35 2025 GMT
Not After : Sep 11 13:00:35 2025 GMT
Subject: CN=99a81fbde24d57d5a69f99da9a80a573aaa6b183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:a0:35:93:48:2e:2d:d8:ed:bd:16:4f:43:
d0:2c:26:5c:27:31:30:18:90:ba:27:34:92:da:23:
d9:e8:db:0e:01:7a:2b:e8:c6:a3:6f:ae:3b:5e:5f:
b6:b3:1f:4d:ea:a8:05:36:72:54:ab:ae:28:82:6d:
0a:5c:28:d6:8b:38:c1:b7:6b:4d:44:8a:07:5a:c2:
e8:7b:8c:1c:ff:05:ec:de:e3:0b:41:7d:77:e2:ad:
20:c1:f2:9c:7a:97:ae:e8:e8:d1:12:5d:6e:78:82:
fb:b5:55:3e:6d:d3:57:7a:96:a3:35:6d:e9:ad:b7:
88:8d:e7:25:f5:53:5b:5f:ae:b5:8c:49:1b:be:8f:
73:69:3b:c6:d7:7f:19:66:fd:6d:0a:2a:4d:1a:57:
56:31:a0:67:a6:1a:52:e0:2f:1f:12:ab:dc:00:45:
6d:48:50:04:c5:b2:b9:6c:41:56:e9:3e:ce:de:f0:
03:13:41:64:c3:d2:63:76:5f:1b:0a:f1:89:0e:0a:
69:8a:d9:f1:47:b4:5c:57:e9:3d:ec:09:7d:ac:a6:
15:6a:bd:78:28:39:59:b7:d4:cf:43:40:23:cb:e9:
8c:cb:20:5f:2a:3d:97:ef:1c:55:e7:75:66:5e:2c:
71:ee:47:b7:53:e9:9a:e8:6e:c3:d5:df:7d:6a:50:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:1F:BD:E2:4D:57:D5:A6:9F:99:DA:9A:80:A5:73:AA:A6:B1:83
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c4:68:8b:f0:2c:ce:e9:0d:12:30:74:a9:54:ab:63:d0:16:
e4:43:50:28:09:8b:aa:0f:4c:55:ba:fb:b3:97:9c:0d:95:d0:
8c:0f:69:ef:e9:e2:07:20:56:c7:3d:04:31:f6:02:91:28:94:
c8:d6:3e:c0:88:da:c3:c5:5e:8f:df:50:a3:d2:93:99:6b:5d:
a4:0d:c3:75:a5:51:22:b4:a9:ed:a9:3d:95:fb:d1:1a:5d:9d:
fe:2a:74:17:00:77:01:1e:7d:b5:55:76:01:91:fc:ee:33:3e:
9a:22:84:bd:87:a4:f4:90:8c:84:04:65:30:17:85:75:f8:94:
b6:5e:29:83:ee:23:35:6f:51:b0:03:89:33:4a:32:58:e9:76:
8b:c8:66:cc:59:66:b3:4c:fd:59:a3:f5:e8:d4:73:f1:7d:58:
86:e1:b5:96:bb:33:8d:dc:79:17:27:39:03:87:90:c9:c9:2d:
b0:17:d8:50:d3:f8:09:72:61:1a:49:b1:30:a5:71:cb:24:5b:
2a:1d:a1:10:b6:9e:44:e7:46:01:a5:38:f9:9f:37:44:ff:13:
a8:a0:4b:6e:aa:33:af:34:d5:40:2a:61:00:2e:9c:f7:cb:42:
97:38:55:bf:a7:c3:7e:56:57:61:c4:0f:77:ea:3d:20:79:63:
27:89:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:52:24 2025 by rpki-client