Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier: j+Y/g8onf0ziXxYlydzklda3U/Fxt19c1iDmQuH8UgY=
Subject key identifier: 27:F5:6C:DB:85:15:A0:F8:77:E3:02:C7:FA:0E:4B:68:13:37:6D:3E
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial: 01992D48D18AB5AFC2008E2A50879F953133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number: 1033
Signing time: Tue 09 Sep 2025 07:02:50 +0000
Manifest this update: Tue 09 Sep 2025 07:02:50 +0000
Manifest next update: Wed 10 Sep 2025 07:02:50 +0000
Files and hashes: 1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=)
2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: hSEpfFnYyQCbIL/T7X7nqbzjT1U80CNXLflppR5DnMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:d1:8a:b5:af:c2:00:8e:2a:50:87:9f:95:31:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Validity
Not Before: Sep 9 07:02:50 2025 GMT
Not After : Sep 10 07:02:50 2025 GMT
Subject: CN=27f56cdb8515a0f877e302c7fa0e4b6813376d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:16:08:d4:e6:29:34:a5:a4:a7:9a:f8:71:
a1:c9:fd:87:50:06:36:90:76:30:08:db:ad:08:43:
9d:d4:0b:aa:74:d5:11:ea:ac:a0:16:52:62:0c:d7:
fa:c6:ef:72:ef:93:14:2c:6e:5c:d4:df:03:d1:0d:
89:eb:6a:0e:29:25:e9:9a:e2:ed:8a:da:c7:c8:a7:
92:83:a6:7c:c1:b6:88:fd:43:56:5a:eb:6a:a5:b3:
fc:47:14:23:30:e4:a2:d4:7e:e5:09:c8:6d:70:2d:
f7:53:29:f5:af:e7:69:08:cd:37:9f:f2:d7:a2:0b:
fd:9e:fc:ab:45:b8:e2:4b:45:17:07:6e:2a:30:e2:
e4:32:68:a5:d6:95:e3:fb:32:f4:ee:d5:4c:7b:19:
64:3d:ff:9b:9e:29:d3:64:a8:b9:32:7d:25:ac:28:
2f:1a:aa:bb:11:37:33:08:01:e1:9b:19:b2:05:1b:
95:0f:6c:c6:8d:4c:42:7f:a4:11:1f:26:40:81:3b:
9c:8f:17:e4:24:9d:94:ef:b7:70:89:b4:90:bd:44:
c3:78:9b:e1:43:ed:dc:a5:3c:e0:27:0b:67:8f:a6:
03:e5:31:7c:27:32:37:97:c0:fe:44:3c:46:a5:b3:
4a:e2:b5:9b:bf:13:59:b7:26:65:52:50:d4:11:c8:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F5:6C:DB:85:15:A0:F8:77:E3:02:C7:FA:0E:4B:68:13:37:6D:3E
X509v3 Authority Key Identifier:
keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:75:70:90:88:e3:f0:9a:aa:1f:7a:29:90:5a:ca:98:96:
72:9f:c8:11:c6:06:5d:fc:92:06:d4:ec:cf:05:c8:b0:4d:00:
88:a4:88:57:4f:f2:a6:67:ba:d8:02:a4:61:78:f7:0d:ad:8f:
b1:33:b9:d5:df:37:a4:55:8e:69:e8:3f:4f:97:14:d0:9b:f0:
70:b8:8d:ef:47:82:30:62:d2:0c:90:60:91:5b:eb:98:19:71:
8a:b4:75:19:fb:06:88:c3:5c:d8:20:40:da:5e:3f:09:f2:11:
45:79:69:e2:71:f8:ed:80:44:1c:37:7e:79:ce:d8:53:7d:56:
7a:43:27:4c:f6:2f:f1:6c:48:98:83:cb:73:a4:98:2d:d4:7a:
31:d8:04:fb:6d:b3:a2:1c:31:1b:60:f0:b1:b0:63:0e:7a:b8:
4a:47:92:98:13:ce:49:91:ad:6d:ce:84:7b:08:d1:04:a3:1e:
68:e7:84:84:ca:f4:c3:69:32:ca:47:21:7e:36:1a:96:a9:b6:
96:0b:dc:89:4c:ec:f3:41:62:d0:37:4b:33:4d:4a:37:72:25:
fd:46:67:7d:77:0e:d6:fe:87:1d:16:bb:45:aa:dc:d4:5f:13:
2c:6f:0d:b7:00:d5:da:af:37:60:b2:dd:79:44:86:ce:22:01:
b9:34:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:46:23 2025 by rpki-client