Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier: g3JNojxSP9//Rux0kL+kFifzjgbGTtKB0TUktZbpVSY=
Subject key identifier: A0:A8:42:38:9A:1D:D8:03:68:0A:15:35:FB:91:E0:D0:2A:F8:76:E4
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial: 019923A0415063F56D9731A1BDA1C68F9DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number: 1376
Signing time: Sun 07 Sep 2025 10:02:08 +0000
Manifest this update: Sun 07 Sep 2025 10:02:08 +0000
Manifest next update: Mon 08 Sep 2025 10:02:08 +0000
Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=)
2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: tAOPVC10ELm6qdk0jykvWzq5RmTKfIyvQmkZ2oF8zGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:41:50:63:f5:6d:97:31:a1:bd:a1:c6:8f:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Validity
Not Before: Sep 7 10:02:08 2025 GMT
Not After : Sep 8 10:02:08 2025 GMT
Subject: CN=a0a842389a1dd803680a1535fb91e0d02af876e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:be:ed:96:b4:e6:9a:68:f7:1d:8c:44:58:
21:86:6c:94:1c:fc:2f:6e:23:64:1b:ed:79:83:b2:
fa:ba:ec:09:11:0e:f8:17:59:db:49:6f:e2:4a:a7:
01:b9:3d:c3:37:49:0f:34:48:b5:53:a5:26:f7:db:
69:bd:c6:25:f6:ea:01:05:93:ca:60:ce:fa:f1:db:
74:9a:95:84:61:d2:2f:a2:c6:7c:a1:79:8d:33:61:
8e:28:30:c4:b7:b7:ec:d5:6a:66:8d:ff:d7:3a:1f:
b8:d6:95:31:a8:4d:af:a1:8e:b7:b7:e4:03:8d:13:
29:19:b9:10:70:7d:2e:c4:b4:81:5e:48:88:a5:60:
a8:64:99:45:28:b9:4a:8c:16:a9:60:c8:10:ec:4e:
d8:89:5a:64:e8:73:f2:2d:35:be:f7:42:1c:0e:c8:
de:0a:ba:e4:17:b9:e3:01:c1:41:56:a4:b1:b6:9a:
32:0b:a8:7b:06:9f:1f:47:88:52:61:ec:30:73:61:
e2:74:6e:fd:d7:67:54:5a:58:54:de:90:2e:6f:f3:
9e:8e:9c:89:ff:6b:87:73:e3:cc:37:69:4f:ec:f1:
df:99:e9:60:b5:33:2d:e6:f3:d5:3a:6e:97:f9:5b:
3f:3a:e9:5c:4c:1d:0d:88:a8:3f:b3:6b:25:71:ef:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:42:38:9A:1D:D8:03:68:0A:15:35:FB:91:E0:D0:2A:F8:76:E4
X509v3 Authority Key Identifier:
keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2c:25:de:e1:0c:da:56:8a:78:0d:44:65:b9:d1:7a:97:9d:
6a:02:ba:99:16:44:81:8e:65:9e:10:64:99:5b:84:60:88:2b:
e6:2e:9f:7c:5a:5f:7f:a2:a0:9c:66:23:16:5d:e9:7d:a8:4f:
84:cf:e4:df:51:10:11:d6:6e:72:18:71:21:95:c7:f8:01:1b:
ee:7d:b3:70:20:32:5c:1a:f9:ff:f3:13:47:81:c5:26:22:81:
45:b7:81:d7:9b:7c:be:81:ac:af:ed:4f:a7:bb:46:03:46:3d:
e0:4f:95:56:43:9f:4e:72:d8:bb:1e:64:97:77:6d:3a:c3:a3:
9f:4d:e3:66:0b:e1:dd:6b:b4:f8:88:0a:3c:aa:3f:0e:a8:84:
b3:36:08:f8:71:d1:7a:f6:ce:e6:17:2a:40:6f:05:b1:1e:1f:
28:9e:5c:be:ff:54:1b:7c:eb:ce:07:9e:b4:a6:7a:fc:56:c8:
8e:95:28:3b:ee:dc:4c:06:ca:ef:d7:93:cf:d1:0c:75:a7:3c:
16:7b:0d:e3:db:34:cb:09:35:e1:8c:dd:50:38:0b:07:c2:ad:
8d:ec:87:2d:fe:78:1c:6c:ae:d7:fc:a4:42:77:cd:c0:fd:29:
c1:9e:34:69:07:5f:34:ae:30:39:e3:2a:a0:05:02:95:96:39:
b8:e6:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:53 2025 by rpki-client