Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: p7ya29p8cxVkSZcMY7hi7LdIy5+5S663jr/vBnU39Yg=
Subject key identifier: 1C:D2:C8:22:8E:85:A6:E1:04:6B:EC:D1:F7:76:7A:77:49:00:7F:75
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 019923316934155945AA31A226AF161E1D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: F0
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: LX74i89KsAvKNBe+U8vIrB+6CgYU/05vbk/xScFOxxQ=)
3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:69:34:15:59:45:aa:31:a2:26:af:16:1e:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=1cd2c8228e85a6e1046becd1f7767a7749007f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:af:1f:92:f0:ca:50:d8:52:af:a2:f5:c5:
cd:41:14:3e:76:71:87:a8:be:45:5f:c0:7c:35:d7:
7a:c6:a9:5f:46:d9:d1:43:6a:40:f6:13:ea:43:3c:
ac:5a:37:f2:39:2b:b1:35:bf:94:09:3a:17:d2:bf:
19:a1:89:b6:ec:4b:29:8d:b0:ef:58:43:95:0c:f3:
7d:35:d8:28:7a:dd:bc:e4:0f:93:bd:2f:d6:46:a8:
8f:2f:1f:ad:5b:38:80:e0:93:48:d9:5f:4b:a1:a8:
a6:71:74:1f:75:4e:67:f9:ee:48:6a:c0:ce:1d:da:
eb:83:ae:a1:5d:91:df:75:5e:96:f1:d3:f3:5a:16:
c4:99:e8:a7:9f:49:70:1f:02:c5:07:2b:1f:8e:6e:
e9:07:5b:26:3c:80:cc:4c:b9:c1:57:8c:bf:46:64:
5e:c7:f5:9a:30:f5:7b:77:6e:b9:b2:fa:4e:70:11:
44:84:40:4a:b8:c1:3f:a4:3b:72:b6:38:f9:eb:6c:
46:91:ba:f2:04:02:29:80:ea:79:d8:87:1c:d8:7f:
e5:9b:3b:10:1e:db:27:7a:ca:ef:78:79:66:47:2e:
64:a4:c0:43:16:1e:1c:5b:21:48:ff:37:ef:cf:2c:
e8:cf:7e:c6:62:e1:dc:50:a3:a5:91:ed:87:da:00:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:C8:22:8E:85:A6:E1:04:6B:EC:D1:F7:76:7A:77:49:00:7F:75
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:4e:22:97:6d:36:3a:45:21:d5:e1:de:af:3c:45:7c:a4:
24:c2:fc:a2:a5:66:dd:13:20:ae:b4:9b:5c:b5:6e:2e:47:5a:
9f:fa:5c:68:4b:0e:3a:4c:92:8c:70:6a:38:5d:cc:3d:dc:11:
3f:99:76:4c:32:66:f2:44:33:2b:54:76:ee:88:3b:b8:e5:74:
da:54:6b:df:90:7e:e7:fa:43:92:cc:2b:d8:7d:f8:d3:b0:9e:
fb:47:ef:78:8e:bf:19:72:59:3e:53:69:e8:0b:11:65:bb:10:
81:59:90:54:b2:95:21:7a:7a:fd:e9:aa:ce:2b:63:bb:53:5d:
2a:56:ae:eb:97:57:03:bc:1c:0c:2d:6b:fb:f9:96:a4:5b:b1:
41:d6:df:9d:08:53:8f:e1:68:94:8d:e1:df:10:a1:4d:5e:ce:
4c:a3:9c:bc:84:42:aa:e3:20:fc:cc:31:33:02:9c:c5:5b:84:
b1:12:ea:4f:d6:f8:45:94:f6:fc:0a:fc:b6:d2:73:cd:15:6a:
4f:01:64:a9:fd:97:f3:e6:a6:bb:29:13:7e:dc:b8:4b:5c:93:
fc:75:19:0a:6b:b2:a7:2d:36:62:ad:42:76:f2:93:0a:17:88:
0a:be:3a:fb:a4:d1:40:fa:38:f9:44:c3:83:42:4a:3e:f8:af:
c6:33:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:23 2025 by rpki-client