Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: W2UXjrDaq/rn6RE0QQxsRPvRcbOHYUeawmOsbv/4wac=
Subject key identifier: 38:13:34:76:92:5B:A7:13:66:FF:27:FA:9F:AF:D0:75:43:80:9D:C9
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019923315EFA613F1583C4106E05C021C33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:01:01 +0000
Manifest this update: Sun 07 Sep 2025 08:01:01 +0000
Manifest next update: Mon 08 Sep 2025 08:01:01 +0000
Files and hashes: 1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: ncpFHBDvpmafqrE/2mEuyyoGgaIFghMfJKFQlSs4X0A=)
2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5e:fa:61:3f:15:83:c4:10:6e:05:c0:21:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Sep 7 08:01:01 2025 GMT
Not After : Sep 8 08:01:01 2025 GMT
Subject: CN=38133476925ba71366ff27fa9fafd07543809dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e7:bb:a2:29:ab:42:cd:04:ca:72:a9:9c:af:
1d:ef:a0:38:10:e6:95:5a:9d:86:a4:73:d6:2f:9b:
26:d4:68:15:e2:49:70:43:21:01:7d:fb:2c:58:bd:
fc:4a:4d:06:ac:be:10:12:ea:75:a6:aa:30:c3:da:
1e:c6:9c:33:45:ff:a3:5b:56:98:a7:bc:2e:dd:fa:
eb:00:ed:fc:75:d2:8d:84:5b:43:32:4b:ba:86:28:
f3:4d:42:b0:44:d8:1b:e4:f4:82:cd:91:e3:22:cf:
97:31:af:59:dd:8d:2f:b5:27:12:96:3f:0b:b5:8a:
f0:9b:1d:a3:99:db:9f:d6:8e:9e:7d:67:9d:be:fa:
14:aa:5e:62:3a:14:16:3c:d9:37:78:24:5a:37:9b:
3e:64:50:20:48:5a:b3:11:ba:30:83:55:b1:26:3b:
0d:34:2a:8b:14:07:22:17:38:b8:88:a2:e7:eb:85:
76:ce:7c:05:c2:4f:9e:33:c1:6f:c5:1b:7c:b8:11:
a4:fa:ad:a3:59:09:8e:87:ab:0e:a2:68:1a:5d:51:
ca:9b:b5:28:09:6b:d8:1a:6e:68:2a:bd:59:d3:d8:
fa:ca:e8:ed:f9:19:8a:a3:cc:91:31:23:29:a3:21:
2f:41:00:e8:d2:f5:a7:3a:75:9a:4a:e9:4b:e6:01:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:34:76:92:5B:A7:13:66:FF:27:FA:9F:AF:D0:75:43:80:9D:C9
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3f:fd:c3:1c:51:c8:d5:1f:0b:66:83:5d:63:d6:16:41:38:
e4:57:92:c4:39:bf:1d:51:39:1a:5a:76:e1:b8:28:79:d7:c3:
13:0d:78:3c:60:a4:a8:10:b1:4e:d5:2c:a9:4e:60:5e:26:ee:
42:78:8d:28:57:49:b3:df:ab:32:ef:00:1b:7c:15:c5:68:4a:
ce:27:53:3c:15:1e:2f:34:89:76:d9:90:78:ba:45:e9:df:d3:
be:ea:a2:9f:8d:1e:eb:84:3d:bb:38:b6:91:7d:6d:1f:b1:59:
7b:eb:87:b5:13:79:c0:cb:ea:55:22:ec:9f:61:4f:b3:ae:e6:
1f:0e:73:74:5c:3b:e8:da:52:96:0d:39:0b:62:00:0c:6c:60:
50:1d:ac:95:f7:e1:a7:48:4f:f5:15:6e:80:51:e3:17:f1:02:
e5:72:48:64:52:10:45:94:58:52:79:31:ae:57:ea:52:00:67:
d2:6b:dc:a4:4c:13:69:48:df:e9:e5:41:51:a6:a3:d0:91:5b:
fe:51:d6:41:c6:36:a7:b9:5b:54:ed:b4:21:50:9d:25:b1:2c:
a7:d5:a3:bd:18:cf:34:08:e0:8b:53:a5:38:58:13:59:25:b1:
67:50:c7:22:ad:46:fe:d6:b4:1f:c7:1f:8d:31:07:c7:f1:99:
1d:b9:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:32:59 2025 by rpki-client