Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: 8vKO6l3+iBVrClxaIIYfKi3xEVY7AwsWsk2CIHhGxr4=
Subject key identifier: 2A:18:E3:EF:64:84:24:48:E5:04:0B:43:F5:CF:3E:46:50:7A:80:66
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019923A002B481CA9199428C8CA92FD45A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:52 +0000
Manifest this update: Sun 07 Sep 2025 10:01:52 +0000
Manifest next update: Mon 08 Sep 2025 10:01:52 +0000
Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=)
2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: 8IvMv4UxwcpjhW/SihiHUPGwPr603VGeAl89EAV2etA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:02:b4:81:ca:91:99:42:8c:8c:a9:2f:d4:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Sep 7 10:01:52 2025 GMT
Not After : Sep 8 10:01:52 2025 GMT
Subject: CN=2a18e3ef64842448e5040b43f5cf3e46507a8066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:6f:56:17:71:65:10:99:50:5c:21:bb:1c:
e3:69:9e:db:4e:c4:85:5b:02:91:55:ea:c1:03:0e:
7d:30:c0:c9:d7:b4:af:0a:71:c4:0f:4f:3a:3b:b8:
4f:b7:fb:43:40:32:81:c1:2a:07:39:07:7b:ca:55:
10:f7:d6:60:68:e5:b5:97:d0:a9:8c:57:9d:50:6e:
f7:e1:fd:df:63:a3:bc:14:e7:c2:35:72:3e:d3:b2:
44:d9:4c:c3:93:c3:db:ad:0b:18:f0:13:36:6c:61:
f8:24:b7:41:6f:df:84:c5:c1:7e:7b:e9:2c:ca:18:
4d:a1:8d:6d:c8:78:eb:53:67:ee:dc:58:41:a8:78:
c9:25:3e:e3:3f:e9:e5:23:87:2b:51:60:ce:2d:25:
2f:66:9a:4a:15:27:89:bf:d5:50:6b:d0:ad:f1:0c:
6a:96:33:bf:fa:c5:f0:b2:d6:00:e3:a3:52:de:aa:
5f:a7:3d:94:f0:cf:b8:48:5d:c2:b9:c1:86:da:25:
4e:a1:cf:c6:d4:64:05:4a:92:a1:9f:d1:eb:fd:0f:
db:5e:fa:98:3e:08:95:44:4b:d6:e5:53:64:2b:a2:
f9:d6:57:d9:cd:84:92:c3:90:f6:d6:a9:64:c5:e4:
b8:38:3b:79:c4:fc:5f:e6:53:d7:9f:9d:33:91:79:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:E3:EF:64:84:24:48:E5:04:0B:43:F5:CF:3E:46:50:7A:80:66
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:6e:28:a7:38:26:d9:5b:24:48:48:88:b5:e8:e6:ef:91:
50:41:1e:82:6d:13:23:d5:01:04:14:e1:36:fe:d2:9d:82:e2:
77:21:f0:ea:62:ea:85:c8:9b:09:8e:7e:bf:42:7d:d4:ca:f3:
24:6a:68:1f:36:8b:c3:40:68:09:c8:ca:df:63:24:83:73:33:
c4:db:49:94:1e:13:36:03:c1:f4:96:f0:47:a6:f6:e0:aa:68:
25:64:a7:83:de:56:48:e3:d4:e6:f7:b9:39:9a:6f:05:71:a3:
0f:2c:7c:58:c9:88:65:ca:45:1f:89:e7:cc:55:55:f4:0b:59:
01:12:62:ff:04:13:45:31:2d:09:f7:44:aa:6d:54:9d:7b:66:
ac:75:23:43:fd:87:82:c9:0c:e3:29:d0:cb:86:d6:12:ad:85:
2e:8c:e0:10:7a:04:fc:e3:5d:46:2f:c1:f6:61:34:bb:8e:f1:
24:01:0a:2d:56:43:d0:f7:7b:42:d2:84:3d:be:a1:83:12:de:
b2:f2:2f:2c:56:94:a6:12:b5:81:ad:81:c2:7f:5c:87:a2:4e:
5b:49:4e:86:b2:35:2c:db:4a:3e:fc:ed:06:03:3d:55:c8:0f:
7c:bc:e4:c9:0d:65:a8:a7:b1:38:c1:d8:2d:6c:72:db:9a:6c:
14:a9:e9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:03 2025 by rpki-client