Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: srgUDAtx2N1fALdDRFNLHQsGTaOvHFYVkLAw8elER5w=
Subject key identifier: 23:E6:B6:FC:18:AA:55:EE:F7:FA:A4:E4:67:09:D0:CA:E5:2A:F6:53
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 01994F6528B5A7E6889D49B5AD70CA10B8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0EF9
Signing time: Mon 15 Sep 2025 22:00:53 +0000
Manifest this update: Mon 15 Sep 2025 22:00:53 +0000
Manifest next update: Tue 16 Sep 2025 22:00:53 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: /I1o7W56ycvgSZAlIKjIe+Plrj/mHkVKq49QsSPUChw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:65:28:b5:a7:e6:88:9d:49:b5:ad:70:ca:10:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Sep 15 22:00:53 2025 GMT
Not After : Sep 16 22:00:53 2025 GMT
Subject: CN=23e6b6fc18aa55eef7faa4e46709d0cae52af653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:85:ba:d2:03:d1:1a:00:90:9b:8c:b3:7e:
00:1f:59:50:00:e0:ee:c9:74:20:cf:59:33:31:97:
24:75:78:bd:97:69:a5:2d:06:03:97:80:76:8f:03:
87:3d:2f:58:ce:b6:b9:74:2e:5b:99:e1:2a:3e:f5:
49:11:c8:40:c5:9a:49:98:45:8b:59:17:4d:99:a8:
8d:65:b8:70:2f:2a:03:d3:62:3c:3e:95:c9:d7:96:
3a:73:20:b2:e2:8c:11:f1:87:a2:e4:f1:ae:7d:7e:
7f:cd:64:82:88:19:73:19:04:33:fb:9a:a5:bb:c3:
25:2c:8a:53:84:9f:55:17:97:a4:da:a4:dc:54:9b:
75:36:f0:d4:b5:34:d1:70:91:3e:a7:c3:49:ce:0d:
4f:b7:63:6d:59:cc:1c:65:1b:7c:1e:a5:85:9f:63:
9a:fc:e7:ae:4c:a2:14:d7:b5:a2:a8:bb:7a:b2:c5:
01:9c:a1:43:3d:ca:e9:a6:a2:77:a7:84:54:38:9a:
84:ed:5b:1e:55:de:96:a9:ca:b2:e7:61:7a:81:df:
e8:13:bd:06:b0:9c:18:57:5d:10:72:b4:b8:98:32:
e5:08:c2:cc:20:3b:48:88:c1:56:02:4c:1e:94:d3:
db:ee:d7:e6:62:d2:ce:d2:20:56:75:43:55:08:d6:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:B6:FC:18:AA:55:EE:F7:FA:A4:E4:67:09:D0:CA:E5:2A:F6:53
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:4e:6f:4d:b2:d3:f5:af:c0:88:6d:45:11:09:04:f3:9b:
2b:4a:1e:c5:8a:f2:69:ae:4a:3a:7b:41:f2:41:a1:cd:20:fd:
07:a4:06:2e:92:61:49:0d:3c:cb:f5:36:9e:b8:05:72:3e:df:
07:14:e0:56:10:eb:6d:32:16:86:4a:96:1b:b6:66:39:a2:22:
ca:a3:e2:93:12:d4:96:50:b1:7e:63:43:26:3c:95:5b:fe:0f:
a3:41:30:82:76:0f:7f:54:a3:2c:ce:d2:75:67:0a:f3:99:6d:
43:1a:25:87:fa:e7:e1:a5:d6:08:93:c9:9c:ce:26:eb:14:51:
9f:26:46:9e:00:7f:4d:f8:b4:bf:c2:29:94:1b:51:77:0f:df:
9f:35:c1:fc:9a:c8:e1:3e:de:43:2d:b1:88:70:69:73:91:c0:
f5:04:39:9a:71:ba:eb:1e:57:2e:a4:5d:fc:45:52:de:47:1e:
dc:e5:1a:38:37:d8:0b:fd:81:9b:e0:e1:06:c6:6d:8b:b1:5c:
34:88:13:db:60:15:b6:c3:ff:a8:e5:7b:2e:c5:1f:0c:5e:d9:
07:ee:31:ce:9a:6f:19:66:ae:d7:e2:5d:9e:68:42:48:0d:31:
f2:a1:94:d4:81:f1:7c:fb:1d:fd:9d:1e:e8:bc:af:d9:77:b0:
86:ef:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:23:09 2025 by rpki-client