Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: LlPdN2BDALbh68OQvfmOTqXLJZrUd2JQ1mRvt7m+Li0=
Subject key identifier: D4:73:BD:EA:0E:B4:E9:36:4A:5B:A1:34:83:82:A7:EB:3D:DF:BE:06
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 0198D697EE1AB1A72AF679A2EB10BFFD56BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 07C4
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=)
2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: gYhHcm3pvqvKDsd/YPOa2VSabkFUhN9BZ0UklNh04XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ee:1a:b1:a7:2a:f6:79:a2:eb:10:bf:fd:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=d473bdea0eb4e9364a5ba1348382a7eb3ddfbe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:72:0b:b5:f7:b5:dd:d5:44:3c:84:29:01:
47:48:fb:7f:d3:a8:df:7e:67:3e:5e:80:aa:4e:82:
61:b4:ac:66:55:10:24:a1:55:81:2c:ec:c9:77:e7:
29:60:8f:45:4f:ef:3e:be:8a:69:de:b5:d2:2f:9a:
20:9e:e4:4b:20:9d:f8:24:94:2b:e4:59:78:92:03:
1c:a4:dd:e1:b4:07:b1:3d:6a:21:4a:d9:aa:f8:0c:
bf:69:eb:38:65:c1:11:55:a2:a9:26:96:87:d6:cc:
45:19:d8:6a:15:22:77:dd:36:c3:45:9c:06:18:ba:
65:60:80:d9:f9:77:db:79:8e:49:d7:0e:4d:14:78:
30:ca:55:2a:a5:d8:a2:03:b1:5a:d2:5d:72:ee:21:
e9:0c:4f:4d:5a:a3:30:cc:df:f4:99:ba:1e:f7:ed:
29:26:7a:b9:db:5a:2a:1b:6f:63:b1:e1:6a:84:ba:
a3:f2:e9:b4:5c:24:8c:87:71:6d:4b:7f:7c:75:8a:
09:ab:2c:8b:a1:93:22:e7:87:ca:f7:d4:ae:4c:c1:
be:76:16:e9:9a:0c:fd:97:25:c6:69:b2:ce:31:45:
56:e6:03:f5:32:f1:ff:d5:80:19:84:a5:03:b3:4a:
d1:20:5c:d4:4a:2a:68:06:33:4a:73:e5:4e:7e:f7:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:BD:EA:0E:B4:E9:36:4A:5B:A1:34:83:82:A7:EB:3D:DF:BE:06
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:be:6c:b7:0b:bc:f0:5f:16:eb:12:09:0e:5a:88:7c:b4:
d7:f0:f6:6f:7c:c7:20:78:1b:37:2e:54:26:e3:2b:b4:6f:21:
b4:61:7a:34:6e:ca:3f:7d:96:3a:a9:a4:b7:84:c2:c9:8a:4c:
05:50:72:90:4c:9c:06:40:1b:f7:45:d3:9d:7a:48:01:36:e3:
0a:38:6a:9a:fc:d0:fb:7e:3f:a8:65:17:92:40:4a:43:cb:5d:
d7:7d:ca:ac:26:d1:34:e3:73:32:7a:8e:e3:bb:45:69:2d:e2:
1b:94:aa:6e:26:a8:d5:6b:8b:83:6e:65:c3:4e:96:bf:fe:f9:
ca:60:0f:96:ad:29:11:85:3d:67:ff:a2:4e:80:f9:76:7c:4a:
84:db:93:3f:e2:58:9a:99:d0:2a:43:e2:ac:93:0c:2a:f5:7a:
98:c1:79:f6:8b:a5:ac:87:f6:96:7c:aa:25:74:9d:4c:cc:9c:
4a:75:68:4e:ef:ab:97:6e:01:38:d4:59:74:77:83:1f:5e:39:
b2:54:52:0d:cd:2f:af:d9:ba:13:8d:10:fd:6e:35:eb:f1:80:
11:43:5b:c4:39:11:cf:fb:ca:ae:62:7a:a4:30:11:1d:fe:fe:
4e:22:f7:8a:d3:7f:24:b1:80:d7:99:cd:3d:f9:cf:05:4c:44:
7f:bf:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:33 2025 by rpki-client