Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: z9hiqn69VUC8+iJpPdj5+OM2Axy9ZlLsUNCqyKHHwpU=
Subject key identifier: 55:40:6F:5C:ED:8F:42:82:46:E2:F1:BD:E7:35:60:57:12:BC:47:D7
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019922FAEA3564602D92F36A18B000AA4CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 08D7
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=)
2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: rjhUV8tSz3zMRhWJqwjXTMTT3ApYjuY4DbiY3680Zak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ea:35:64:60:2d:92:f3:6a:18:b0:00:aa:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=55406f5ced8f428246e2f1bde735605712bc47d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:68:98:e2:c1:9b:28:bf:51:63:ca:81:79:
12:9b:c2:d2:eb:d6:dd:1e:f9:73:16:0c:41:34:3e:
19:58:3f:b4:77:16:52:f4:31:6a:a5:c8:60:d7:30:
52:0e:0b:ca:d5:a7:b9:a9:54:f0:8f:9b:65:4f:e2:
42:1e:bb:16:1e:92:38:dc:8b:6e:90:73:09:67:39:
72:4d:fc:d7:9c:6e:33:6e:e2:78:dc:04:81:80:a4:
55:98:33:54:b9:f6:52:d4:3a:33:5e:04:0a:0c:44:
a6:75:5f:d2:91:95:67:7a:45:6d:c1:78:b5:79:48:
08:33:6d:ab:c5:b7:8c:fe:69:99:83:3d:a7:3e:65:
cd:d3:cc:d6:17:2d:fc:86:40:9a:55:ac:46:3a:ea:
c1:ae:74:75:49:f4:d5:29:f3:ab:b3:70:63:48:72:
44:c2:b7:ce:aa:50:10:32:b0:b5:ec:70:79:81:f2:
ae:90:5b:ff:f1:b9:6d:61:30:1e:7f:7b:07:42:bc:
31:49:71:bf:41:6d:fb:e1:bd:42:de:fe:f7:f7:33:
1f:b8:7c:25:57:da:e9:c7:aa:d8:18:57:e4:39:34:
3c:41:3f:73:7e:83:6f:1c:77:6b:22:85:7d:64:81:
ab:93:db:5b:b1:a9:be:0a:d4:84:86:3f:e0:f5:6d:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:6F:5C:ED:8F:42:82:46:E2:F1:BD:E7:35:60:57:12:BC:47:D7
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b6:e2:42:b2:74:e8:6a:77:98:e9:5a:a0:00:96:d0:a5:93:
38:3f:a1:ed:1f:91:d9:a7:b0:a1:09:76:d3:21:a3:22:89:13:
71:37:f6:9a:e1:f5:cf:4f:9a:1b:05:ce:cf:8e:b8:72:ef:f5:
21:8f:9c:e2:43:fc:ae:80:7a:51:7d:cf:a1:e3:10:40:83:da:
7a:5e:4d:89:6c:b2:f9:fb:e5:86:f7:6a:2a:40:92:3f:a1:8c:
ff:88:5c:ca:6b:a9:1f:9b:d5:5d:10:98:0a:19:b3:69:52:2e:
10:f6:18:6a:ad:70:74:e3:51:8e:b5:38:b2:90:7c:1f:4f:00:
0b:62:dd:0c:c3:7f:a5:4a:66:a5:e7:4b:46:be:bd:3b:fe:d9:
ae:af:10:82:f3:bd:63:d6:4c:32:3b:c4:29:c8:73:6f:6b:2d:
29:0e:62:d7:d5:97:40:ac:04:b7:7d:80:9b:b3:27:0d:d1:ec:
a7:bb:00:7b:78:a0:80:cb:b0:91:fe:10:85:69:3a:cd:6e:61:
13:14:0b:2a:be:b3:a5:33:ff:fe:a0:76:3e:d1:70:6a:db:6a:
b1:12:67:ed:4f:db:12:31:ce:1f:31:f8:68:d1:b6:e9:28:12:
39:30:b0:5a:3f:80:a0:4d:84:ed:c2:9f:d7:11:c0:b4:25:11:
5b:9f:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:08 2025 by rpki-client