Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier: LjdLnQbhJaSVSQ3AEtpuKnLbBfPM3gi2jtIHG4sqLBw=
Subject key identifier: 90:03:03:BB:07:2B:D6:D2:25:20:69:31:57:06:BD:B6:E2:D9:9C:55
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 01993124CDD6558202487FD96DF0372B1BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number: 1024
Signing time: Wed 10 Sep 2025 01:01:59 +0000
Manifest this update: Wed 10 Sep 2025 01:01:59 +0000
Manifest next update: Thu 11 Sep 2025 01:01:59 +0000
Files and hashes: 1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: yiqmlhYOXOa7DL4/mS6rOnzaLFCeLkOAqqLfju5ztzQ=)
3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:cd:d6:55:82:02:48:7f:d9:6d:f0:37:2b:1b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Sep 10 01:01:59 2025 GMT
Not After : Sep 11 01:01:59 2025 GMT
Subject: CN=900303bb072bd6d2252069315706bdb6e2d99c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:a5:c0:60:43:34:2b:9d:03:5f:75:f5:d7:
46:51:96:66:52:3c:43:e3:89:d8:04:0f:2d:9c:24:
ef:54:17:c7:84:05:d7:51:8f:34:83:ad:51:7a:f9:
43:73:d7:21:ea:c0:8c:db:3a:68:13:d8:c2:92:8b:
e4:b7:f8:58:f8:d6:ad:0a:c0:a9:66:b3:19:f6:98:
3f:ea:6d:9c:41:af:84:17:f3:56:6a:b8:53:d3:a6:
98:a4:e7:dd:ab:42:87:43:50:b9:43:ff:9a:13:f1:
69:06:93:10:f8:9d:6e:8e:25:b6:57:8a:51:82:76:
f3:4b:7a:fa:ed:4e:31:70:80:32:ea:a1:3f:6f:77:
38:f0:9c:27:a6:ee:cc:c3:5c:54:0a:cf:c2:4f:55:
5d:d3:18:04:bf:c8:96:31:2d:c4:a5:4d:91:71:7e:
d8:f3:85:85:0e:ef:7b:db:b3:0e:a9:a2:55:52:80:
29:85:74:6a:ab:a4:43:d3:40:8b:7a:0c:b4:99:59:
ee:58:be:48:ce:15:f3:27:fb:d9:ae:19:3d:e4:9e:
6c:47:16:df:1d:47:64:cd:18:69:19:62:06:8f:c6:
c2:b7:bb:c6:72:49:fd:96:87:e8:8e:62:4a:1c:dc:
d4:23:f0:1f:ae:0a:49:e0:4e:bb:f6:84:9f:00:c8:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:03:BB:07:2B:D6:D2:25:20:69:31:57:06:BD:B6:E2:D9:9C:55
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9e:ff:c6:b3:34:59:a7:77:e2:fc:f1:fc:c2:df:bb:82:2b:
06:cd:4c:10:12:7d:28:92:3c:be:b8:1d:da:0d:5d:f0:2e:eb:
a5:c9:3e:c1:c3:02:d6:ed:0d:b2:0b:1a:4e:b3:18:b8:2a:d5:
0a:73:86:f7:f2:2c:dc:c0:25:6c:66:71:18:fc:25:22:5b:db:
8b:23:a4:74:c8:aa:cd:82:e8:dc:6c:72:f3:64:dd:25:5d:55:
71:17:3d:1a:13:8d:ae:8a:b8:5d:30:e1:8d:ce:4c:cf:5b:c2:
e6:b6:dc:b6:db:a8:af:e2:e5:45:75:15:32:0b:51:fb:a9:20:
6e:58:b1:0a:5e:f3:fe:d6:16:e8:8b:b6:5c:04:20:45:07:2d:
ac:12:43:ff:ef:ff:4f:7f:8b:f7:6a:0d:88:e1:17:f6:ba:c8:
18:d3:dc:ba:2a:2e:e8:95:c4:25:77:bc:85:e5:75:e6:72:a8:
e8:f3:77:9d:3b:ff:82:30:1a:4a:0e:b9:45:2d:40:83:19:2d:
e9:a0:7d:41:46:d9:e7:02:26:b2:b5:da:5b:de:40:bf:43:33:
ee:1b:de:b5:bc:2c:e2:c2:05:3c:c3:94:38:5d:6b:5b:77:67:
df:3a:4d:2d:47:fa:1c:45:c5:0f:e2:aa:e3:60:92:75:b0:61:
76:86:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:15:07 2025 by rpki-client