Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: mFxv6Ie6OP9qtB1tmBmN2mMpjsPVol4mPSB6rXINB0s=
Subject key identifier: DD:74:6A:30:D0:B2:A6:32:EB:3D:97:52:39:9B:8E:8F:E7:CB:23:8B
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019936131FBEB1800FBE0778325BC0309E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0DB4
Signing time: Thu 11 Sep 2025 00:00:46 +0000
Manifest this update: Thu 11 Sep 2025 00:00:46 +0000
Manifest next update: Fri 12 Sep 2025 00:00:46 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: 8MjETu87+P0PKvKnymhbDs/po/J75Ge7FzXaaoP13SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:1f:be:b1:80:0f:be:07:78:32:5b:c0:30:9e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Sep 11 00:00:46 2025 GMT
Not After : Sep 12 00:00:46 2025 GMT
Subject: CN=dd746a30d0b2a632eb3d9752399b8e8fe7cb238b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:6c:08:57:dd:6e:8a:78:6e:06:91:3c:e7:
2a:d4:d2:ad:77:bc:ad:07:c7:58:6a:b6:a7:3c:52:
51:69:6e:7e:07:81:aa:65:bb:f6:9b:a9:5c:e9:61:
65:eb:6a:73:ee:59:db:22:47:f2:1e:84:66:2f:ac:
40:bd:a2:c9:d2:ed:76:fe:b6:22:aa:60:de:5d:dc:
b1:a5:52:f5:ca:58:e9:fc:cd:ea:e0:a5:94:ee:8f:
6b:93:8c:30:08:8d:42:05:b6:bb:69:79:34:8e:43:
c9:c4:b2:89:f7:33:03:57:21:5d:ba:51:ce:a0:01:
48:7f:d8:96:e0:95:53:b1:22:18:26:86:78:c1:f5:
72:ff:e4:50:cf:ba:5d:18:f7:27:f0:07:0e:fd:ea:
c2:7f:45:32:a2:b8:ad:e8:11:ad:4f:82:66:ee:40:
19:09:28:56:74:17:b4:a9:1c:c6:69:a6:ef:dd:d1:
b8:e5:38:f6:8e:29:b5:47:08:07:10:eb:63:2c:54:
e5:f4:87:7c:23:bb:a4:5d:bb:b2:84:26:aa:a5:75:
a1:0b:d1:f4:7e:ca:b9:b8:9f:9d:50:3a:3f:93:5b:
12:86:80:8e:9f:20:8c:24:70:e8:21:8c:91:67:57:
7e:e9:9f:27:a9:f5:1c:13:59:4a:fe:af:1d:83:9c:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:6A:30:D0:B2:A6:32:EB:3D:97:52:39:9B:8E:8F:E7:CB:23:8B
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:d0:b7:11:8e:23:d9:83:0f:3e:13:83:9c:38:90:f0:ed:
ff:d4:b0:a3:b5:62:6a:bc:07:e3:c5:27:9a:e0:dd:1d:46:c9:
50:48:15:a4:27:78:43:0e:12:81:35:1e:5c:44:74:e6:99:9d:
7d:35:fc:fb:81:9e:0c:df:46:cd:68:f3:37:45:87:77:60:1d:
ed:c6:3e:21:94:16:9e:a4:cc:42:49:18:ff:86:cc:98:8a:11:
f3:9c:97:aa:80:82:f2:d9:58:3a:8f:09:90:c4:53:4e:a3:98:
2b:00:1f:e2:6a:78:72:a9:12:0e:0b:9e:9e:8e:d4:78:94:20:
7e:cc:10:c3:7e:6f:d7:30:fe:86:2f:e9:9e:65:e0:2b:bf:f0:
ef:60:eb:e9:6d:f5:40:a3:22:56:8f:98:99:cb:d8:65:93:9a:
cb:18:a6:20:f6:06:8c:d9:a5:82:d4:f9:60:5b:e7:b1:c6:d6:
03:b1:4c:80:a2:ef:3c:bc:d0:bc:b6:6d:86:71:d7:ba:39:db:
cf:15:c9:82:cf:e1:22:4e:7d:03:ab:3c:9c:6f:c0:ee:35:e4:
78:f7:95:70:ee:25:84:ad:99:c9:b5:60:a5:3c:d7:06:3b:6c:
d9:eb:a6:ce:8a:8a:b9:19:1b:06:f6:4d:30:82:8a:42:2a:f9:
72:bb:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:59:14 2025 by rpki-client