Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: hZwbIKCINgeCxhrETVmvKEXEYxOmmEccKvix21sYzHg=
Subject key identifier: 6C:01:47:E3:68:EE:CE:65:EC:EF:E0:47:55:47:33:BD:9A:69:53:0A
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0198C724BF2490D91A9E31DD99214E3802C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0593
Signing time: Wed 20 Aug 2025 11:02:10 +0000
Manifest this update: Wed 20 Aug 2025 11:02:10 +0000
Manifest next update: Thu 21 Aug 2025 11:02:10 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: HjKqJtSYweFxmmGly3QvQvvKStIWXYFaLPaLw1q8VUs=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 11:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:bf:24:90:d9:1a:9e:31:dd:99:21:4e:38:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Aug 20 11:02:10 2025 GMT
Not After : Aug 21 11:02:10 2025 GMT
Subject: CN=6c0147e368eece65ecefe047554733bd9a69530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:6f:0b:d2:1a:b0:2f:d3:41:4a:cb:07:8c:
77:d8:ce:0b:f2:ff:5f:c0:70:17:ec:e1:0a:a3:0d:
70:0a:7d:4e:e7:41:89:6c:d8:71:8e:9d:7d:ca:80:
45:b1:0c:e2:dc:6f:b4:11:e5:ac:31:bf:51:8a:f5:
18:eb:5e:34:b1:87:16:18:88:bb:ae:b1:78:47:36:
13:d0:d1:24:f9:b6:89:be:ce:bd:e3:2b:4f:38:d7:
86:6b:eb:9c:94:45:3f:0d:ba:52:3b:8a:d7:43:38:
01:99:e5:2f:38:d2:54:3a:56:38:73:17:31:e2:3b:
e8:46:b5:c3:31:f4:0f:54:0e:10:35:14:5a:bc:68:
96:b2:bf:ef:7c:aa:ff:f7:db:4b:3e:26:68:da:dd:
65:05:c3:ab:bb:75:75:2b:38:74:62:dd:2d:87:0b:
30:cc:fe:58:f1:f7:fe:51:d6:60:99:7a:4e:dd:33:
3c:01:b9:6f:03:e3:b8:f2:32:53:b4:d5:73:c5:65:
55:a9:d9:a4:3d:14:05:d3:12:4e:31:0c:c0:08:fd:
56:93:1b:73:5c:5e:8f:63:98:6a:c0:86:11:88:45:
ee:32:5c:28:05:ed:3c:af:2a:1c:62:f6:41:f1:db:
d0:f6:35:e1:e7:bb:7f:29:75:7b:35:50:50:8f:99:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:47:E3:68:EE:CE:65:EC:EF:E0:47:55:47:33:BD:9A:69:53:0A
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:4b:d1:af:1d:2a:48:85:4c:5d:eb:56:b1:c7:00:8d:b4:
5a:1c:97:4d:77:cf:77:b2:eb:ef:ac:31:19:e4:05:3c:30:ee:
3a:39:1c:c6:87:71:48:b3:fc:3a:81:88:c9:9b:b0:76:ac:be:
c0:b1:69:58:b1:85:7b:2b:4c:db:0b:d4:34:35:ae:dd:50:cd:
15:30:99:cd:05:c4:c5:ba:55:1d:8c:81:d9:1a:ec:1a:91:68:
94:5b:99:45:0e:46:4f:f8:ca:31:76:14:90:6a:27:65:10:aa:
3f:7a:5d:be:c6:d9:57:0e:bd:80:bd:14:76:71:bb:99:fc:32:
3f:b4:ee:0e:f5:f0:6e:46:37:8b:73:a6:83:4b:2d:6d:24:37:
6c:6f:19:6e:a8:41:43:c5:45:eb:6c:d5:aa:af:d1:84:ea:dc:
47:d5:b1:19:c5:fb:db:b6:a8:f1:6c:4e:eb:06:0c:a6:23:91:
2c:e2:05:c2:49:b4:05:dc:d0:e5:b8:71:2c:c2:d6:42:8a:c4:
48:4b:00:6c:ee:bc:45:87:da:05:cf:07:33:05:6b:ce:6b:09:
8e:75:21:2c:55:9e:75:df:1c:65:57:c0:d8:91:20:d5:16:48:
c7:f0:19:38:f5:71:f0:93:91:a8:66:43:19:bf:cb:25:81:1c:
01:f7:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:09 2025 by rpki-client