Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: FlJ+MUdvtMZirZSzYgELodUZNOk1xq111l7fOXUzJho=
Subject key identifier: 65:B1:AA:25:75:AB:07:F1:36:4F:0E:09:A7:2F:4F:C0:D4:63:86:E5
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01992E22EAE3568C05411226BD186EACAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 168D
Signing time: Tue 09 Sep 2025 11:01:04 +0000
Manifest this update: Tue 09 Sep 2025 11:01:04 +0000
Manifest next update: Wed 10 Sep 2025 11:01:04 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: TcyOxYWVsLSqGoAjhQuamAlUycAdYdd+WGgUqPy75D4=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: MM0dD-Cnl2lqyWLvCK1-oHYBFlY.roa (hash: 0xgeIhk2pLPXnWlj2EeT8c9DNkODQXdxgnvF/AKwP4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:ea:e3:56:8c:05:41:12:26:bd:18:6e:ac:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Sep 9 11:01:04 2025 GMT
Not After : Sep 10 11:01:04 2025 GMT
Subject: CN=65b1aa2575ab07f1364f0e09a72f4fc0d46386e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:f6:c3:02:b4:33:7c:eb:e5:27:c3:24:61:
94:50:6a:1e:52:1b:9c:80:d1:b7:5f:2c:ce:d3:77:
82:50:ff:cf:0b:0d:36:27:7c:95:e8:89:9e:02:45:
37:e4:ad:ef:06:ca:cd:7a:92:83:ac:f7:aa:99:4f:
5a:e7:fd:08:23:c3:2e:8b:73:dd:4a:58:54:8d:c9:
c0:c4:d1:ea:da:3d:de:12:d4:f5:81:76:2a:f0:5f:
4e:7f:fa:dd:6e:2f:c0:38:8b:eb:26:f5:d9:84:60:
db:11:17:a5:46:eb:4b:58:b4:6c:57:7f:de:ce:4c:
ec:e6:a1:9f:0f:d1:08:44:ee:4e:24:1f:34:8d:09:
e0:61:c5:80:75:e6:3a:4f:d9:dd:f8:c5:e4:7c:ca:
5f:5f:20:21:56:ec:1c:e5:83:e9:75:fb:08:ae:1c:
d7:a6:01:af:b7:15:7c:d0:d4:35:37:5f:f6:21:11:
7c:b9:d3:73:b4:b9:8f:2e:2e:b6:f9:bc:0a:a9:65:
78:2a:c4:e6:b0:46:43:6d:14:cf:00:09:3f:68:4b:
9a:ae:02:31:78:b7:ef:7d:40:94:53:ed:3e:6d:06:
f1:c4:c3:75:95:d8:5a:33:b8:06:ea:bb:2c:fc:75:
02:ba:22:10:c5:99:4a:10:4b:ff:60:bd:11:88:c0:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:AA:25:75:AB:07:F1:36:4F:0E:09:A7:2F:4F:C0:D4:63:86:E5
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:98:84:69:a1:0a:eb:20:b4:d3:64:8e:a9:3e:74:49:de:
97:cf:1a:64:fd:5b:2d:17:a6:ac:85:32:09:e3:a9:70:26:d3:
75:80:d8:32:18:de:7e:ef:bc:92:2a:5f:4b:34:a0:9a:00:b5:
0b:5b:e1:aa:18:ab:e7:c5:e3:e7:f8:b8:33:c4:8e:2c:ed:24:
83:8c:e1:eb:26:39:21:af:56:6b:c2:0f:0a:85:91:2a:4f:c5:
76:cc:1b:33:32:9f:23:4f:21:5c:ff:71:ca:ad:6a:3e:d8:7a:
0a:db:b0:c5:db:5f:20:51:b3:d2:69:8f:29:2e:c4:a0:17:fa:
b2:6a:0e:e8:58:b5:2a:ae:2f:ba:66:80:c8:85:b9:86:5b:92:
1e:86:9a:79:52:4c:b2:aa:fa:10:29:bf:5f:25:4d:9e:e2:e9:
b6:34:fa:e1:62:c0:76:01:e4:48:51:f7:c2:61:5a:9c:57:01:
36:1c:b7:82:bc:4e:d1:31:45:33:79:dd:f8:04:1a:3c:78:a5:
5b:83:76:56:68:87:74:51:15:10:97:f5:b6:4c:7f:6a:12:bb:
c5:7f:69:f8:7b:aa:da:14:30:af:39:92:4c:b2:5e:c5:6c:ae:
0e:8a:32:26:00:74:d8:ed:bc:66:a6:87:d7:75:bc:d0:60:b8:
07:b8:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:10:57 2025 by rpki-client