Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: GKkilLp/S8Onm/+UCguFlZj6+KAkfi2iGYoDLXOi2xU=
Subject key identifier: 6E:3A:9E:37:32:0A:79:31:76:C9:FE:7B:B8:54:ED:10:BE:54:2D:73
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 01993381092B1FBC8A3C308E53ECDDFF1DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0373
Signing time: Wed 10 Sep 2025 12:01:58 +0000
Manifest this update: Wed 10 Sep 2025 12:01:58 +0000
Manifest next update: Thu 11 Sep 2025 12:01:58 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: xb5A7aMctiKYsFpQsX/sNTNpvsNDBPNlbQMiVM7Ac7k=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:81:09:2b:1f:bc:8a:3c:30:8e:53:ec:dd:ff:1d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Sep 10 12:01:58 2025 GMT
Not After : Sep 11 12:01:58 2025 GMT
Subject: CN=6e3a9e37320a793176c9fe7bb854ed10be542d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:61:5c:cb:86:83:d7:66:00:fd:20:07:62:
22:6c:a4:8a:87:6d:c6:13:8f:dc:3a:ff:41:b0:05:
76:13:cb:26:a6:24:19:1a:60:68:e6:9d:51:44:c0:
5a:5b:0a:35:3a:26:00:8b:21:8d:ed:d2:3f:0e:cf:
af:5f:e3:30:1b:a6:bb:b5:c5:8c:7b:c3:15:4b:b4:
6c:88:c5:72:9c:b3:5d:a3:53:ae:54:2f:6f:87:c9:
53:b7:69:b9:f9:e7:2f:cd:9d:8c:8d:a5:f9:a2:62:
71:02:1a:77:49:67:90:9e:81:12:9b:7f:9e:83:4c:
6a:f9:14:aa:04:db:b1:b1:4b:bf:73:48:53:49:5b:
5d:bc:4a:eb:df:73:3f:2a:3b:a2:d0:cb:8b:d0:ab:
7f:1b:1b:ea:7c:24:78:5e:75:c8:ca:12:79:8e:9e:
ba:26:98:d7:03:7f:c9:64:91:43:6f:0d:bb:5d:69:
87:f6:46:52:2c:90:61:d6:07:f3:84:7a:1e:83:e5:
c2:fe:aa:09:34:89:7b:8e:c6:34:3f:ab:60:fb:b8:
2e:70:df:f6:42:33:19:b8:8c:33:48:bf:c9:24:25:
a5:dc:b9:74:a8:78:50:99:96:71:65:95:eb:53:5a:
4a:11:c7:08:32:8d:ca:80:60:05:6c:b8:f3:b7:d1:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:9E:37:32:0A:79:31:76:C9:FE:7B:B8:54:ED:10:BE:54:2D:73
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:5a:2b:1c:80:3a:3d:81:92:1c:af:81:8f:12:9e:52:12:
e1:42:d6:25:93:50:fd:42:77:1e:90:12:d2:0c:c4:13:6e:9e:
7f:bc:9f:92:3e:66:8e:25:55:ae:a5:25:43:32:db:dd:2a:f8:
2a:4d:25:c1:0d:ee:a3:b3:7b:84:36:52:55:ed:6a:37:ad:08:
02:04:5c:c8:bd:ad:c3:d3:1e:a3:51:4f:4c:4e:4a:9f:0c:33:
62:e4:e0:bf:1b:41:9a:18:5a:1c:b8:73:a9:87:44:c0:bf:9d:
07:c0:cb:6e:a8:34:1a:f7:b6:62:0c:e1:6e:d1:c3:7c:89:a3:
07:80:bb:af:92:94:68:ff:7f:a7:e4:fb:08:4c:18:06:4a:27:
f0:3d:c2:68:de:41:f6:3c:18:7b:6c:37:9a:73:28:20:ea:26:
e7:3b:72:ce:7e:bb:d4:c0:c3:92:4b:ce:09:48:75:1b:e4:ca:
cf:e4:31:53:0e:2c:7b:0d:07:82:64:66:91:14:a0:39:78:ae:
39:c1:40:f2:18:c8:81:b1:6b:aa:32:c6:3e:d2:3a:d3:a2:cb:
02:5a:0c:f6:71:23:c8:e2:96:b8:e0:db:24:7a:88:58:9d:10:
3d:28:78:d2:5f:a2:b7:29:4e:f6:b3:09:25:65:05:29:f1:a8:
5c:3c:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:43:22 2025 by rpki-client