Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
File: 6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json)
Hash identifier: ZXvXXFrIyi0oOlJ37Fxpz2AjzEd9/37JtGIcVU0mRRA=
Subject key identifier: FF:CF:F5:81:89:16:B8:EE:E2:C7:AA:C9:6D:D3:27:89:9D:3B:36:48
Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
Certificate issuer: /CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Certificate serial: 01986694A156C01088FFDD80DE588DDAD498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
Manifest number: 03C3
Signing time: Fri 01 Aug 2025 17:01:13 +0000
Manifest this update: Fri 01 Aug 2025 17:01:13 +0000
Manifest next update: Sat 02 Aug 2025 17:01:13 +0000
Files and hashes: 1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: Jkk6aqShc94fguZicQda+9UjqCJyhRn9aBkJuTU91zM=)
2: gULVBnS6_qNHU7cQ0dkYMIuUayU.roa (hash: g1yDTdtovs95F32kLsCVnbkwBNkiMceKZcm5mTyCkJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:94:a1:56:c0:10:88:ff:dd:80:de:58:8d:da:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Validity
Not Before: Aug 1 17:01:13 2025 GMT
Not After : Aug 2 17:01:13 2025 GMT
Subject: CN=ffcff5818916b8eee2c7aac96dd327899d3b3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7f:c1:0b:6e:67:76:ae:ab:16:c5:26:f4:01:
0e:77:64:b1:69:09:07:8f:db:3a:7b:73:ef:d7:43:
f2:cd:e8:f1:b0:e1:c0:7f:cb:ee:ab:5d:27:f0:0a:
3b:dc:86:97:45:9f:c1:e7:a4:b8:18:6d:bc:e4:7f:
53:83:fb:46:ad:b8:f3:c7:a5:28:04:1d:ae:0e:d4:
d4:19:58:e2:20:fd:ab:4b:4f:cc:c3:17:5d:d0:09:
fd:0f:82:0f:87:ba:15:5d:81:21:58:ab:c2:c7:83:
97:a5:23:da:a1:36:99:20:2d:23:4b:58:f3:73:10:
43:c8:ad:1e:3a:6b:f8:c6:ee:02:23:b8:98:09:4c:
cd:83:36:d7:cf:d5:dd:8a:a9:97:a1:45:2a:87:06:
56:d9:97:14:c4:58:ee:14:ad:69:d6:3a:88:59:93:
9f:ef:d2:05:87:1c:0b:f6:10:83:ff:68:9a:d0:1d:
44:b5:de:4e:d3:32:3f:ea:73:d3:04:7c:78:9e:18:
55:31:0b:5f:9c:4d:3a:87:f4:f1:2b:b9:e3:39:4b:
d5:db:81:d0:0a:7b:22:06:c1:4e:64:33:c7:1a:ec:
6a:ef:44:6a:01:bd:68:d4:fa:6f:b7:07:ae:98:09:
8c:70:c9:ab:19:e9:ed:49:b9:eb:28:0c:30:21:e7:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:F5:81:89:16:B8:EE:E2:C7:AA:C9:6D:D3:27:89:9D:3B:36:48
X509v3 Authority Key Identifier:
keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c2:36:3e:8b:35:4b:f0:79:16:cb:95:51:4a:5e:82:06:ae:
59:6c:6f:5c:5f:2e:b8:84:dd:86:47:24:e6:77:02:18:78:99:
e9:77:c5:f0:24:5e:c0:5f:7a:ce:d3:11:c0:d9:62:14:b7:88:
ba:47:3e:f7:50:dd:fa:b0:8e:20:8c:b7:1f:8b:b8:3d:bc:2c:
67:9b:c5:23:5e:91:d9:ac:4b:04:e1:fb:31:94:c6:d0:92:80:
b2:2a:8a:bf:dc:bb:8c:36:72:68:58:d8:f0:e2:d4:09:71:7a:
fc:3b:dc:d5:46:a9:6a:92:ba:20:17:dd:2b:0b:52:28:db:4c:
ca:34:e3:e2:07:0f:b4:3c:83:bd:f0:17:47:fd:5f:4a:62:4b:
da:87:6b:ce:88:d4:66:69:ba:24:b2:bc:ba:2c:4e:37:48:49:
ac:b1:f6:8d:cb:98:aa:f7:86:15:a2:0a:4f:d5:52:0c:5c:9e:
8e:67:fe:3b:e1:1e:bf:93:c5:23:cb:ff:ee:73:39:b8:9a:d0:
eb:ab:28:94:5b:b1:a2:b5:47:e5:a6:f6:a0:67:e0:57:9f:65:
49:1c:79:5a:31:d9:1e:3e:a8:40:65:42:ff:30:2d:51:64:41:
47:43:d8:15:76:04:1c:22:11:df:d1:5a:08:e7:83:7a:ad:b1:
e5:01:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 23:51:20 2025 by rpki-client