Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: FmtMlDbJa7hvOANsWy2TBulGZgU9cNNTZ+9ZQKXW4jY=
Subject key identifier: E1:1D:17:5C:3A:89:4B:B6:C2:00:D2:8C:FD:17:6F:A8:B7:D6:BF:65
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 0198E60AC49610C3C612A3D4D997D8D6D111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 164F
Signing time: Tue 26 Aug 2025 11:02:01 +0000
Manifest this update: Tue 26 Aug 2025 11:02:01 +0000
Manifest next update: Wed 27 Aug 2025 11:02:01 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: YWR8G7IChLnZ/UKJmwSba/cuRlreB9k4sYHn5ie2ubE=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:0a:c4:96:10:c3:c6:12:a3:d4:d9:97:d8:d6:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Aug 26 11:02:01 2025 GMT
Not After : Aug 27 11:02:01 2025 GMT
Subject: CN=e11d175c3a894bb6c200d28cfd176fa8b7d6bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:5b:56:0f:7d:d8:b2:87:1a:a9:ee:29:31:
ef:61:a6:4b:54:e7:66:1c:6f:a5:cf:d2:c5:9b:d2:
08:ad:92:d5:3c:33:50:8e:57:76:f1:d5:64:d5:64:
bc:04:1e:ae:4f:49:d9:43:95:b7:47:91:17:a3:43:
cd:d0:b8:db:c9:c8:f2:72:f6:37:b4:bf:1e:68:a8:
f1:ed:90:00:f6:ca:24:78:c2:ad:50:41:ea:06:c4:
49:23:ca:a0:01:3f:8c:ca:75:70:05:6c:f0:04:5f:
c6:6d:00:1a:ce:44:39:22:5b:27:e1:e3:7b:da:1d:
a0:cb:39:81:87:6d:4c:97:3f:f6:0f:26:b8:f9:a8:
c1:1c:4d:83:b0:49:6a:cd:5c:14:ff:d6:a0:74:32:
39:bc:74:ac:84:84:26:b0:8d:0b:fb:a8:48:00:a3:
aa:e4:f7:f2:2d:f1:36:95:b6:21:61:d1:ab:6d:96:
5e:65:2f:f0:0c:8b:a9:9e:2d:05:87:85:21:b7:31:
7b:9a:eb:a2:12:24:c2:eb:eb:3c:58:5d:78:1f:11:
47:5c:9c:67:fc:1e:bf:8d:b9:36:b8:36:98:ec:53:
7d:db:cf:6c:27:ad:42:22:03:54:43:18:d3:03:b2:
18:2f:c5:b8:57:9d:7f:69:c2:b6:fc:ec:62:51:1e:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:17:5C:3A:89:4B:B6:C2:00:D2:8C:FD:17:6F:A8:B7:D6:BF:65
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:77:89:d4:8b:3d:b9:c2:ab:21:77:7b:52:8b:6d:8b:09:
b2:96:d8:e0:ea:dc:d4:f7:61:81:40:fc:31:10:23:cd:fd:6d:
b3:19:eb:af:38:7f:da:f5:e4:52:b5:1a:bc:5e:4c:16:88:5e:
d6:64:da:bd:33:66:89:db:b8:62:e3:67:4b:39:2c:0d:ba:d0:
28:ec:4a:90:92:1e:cd:a0:d2:dc:96:a8:19:48:3b:50:d5:51:
eb:e8:63:bc:21:1b:23:28:be:71:9b:fb:3b:6d:70:33:eb:49:
36:ad:85:e1:6d:3a:82:71:26:e0:90:95:7a:54:5a:3d:77:64:
b3:2c:8e:46:59:73:17:a6:bc:9e:13:8a:bd:3f:19:07:29:85:
9d:e8:ca:8b:68:10:97:eb:0b:42:7f:c7:b8:09:d8:82:ff:57:
54:07:5e:6c:b7:9a:69:d3:bd:ab:68:76:9d:ee:c7:90:75:94:
78:b5:59:ef:87:c8:f5:87:68:c4:37:08:ba:0d:88:d4:cc:b0:
a3:18:9c:b7:a6:8e:4a:9c:ae:ce:fc:97:96:44:f5:57:95:40:
86:db:a9:8e:d1:47:3a:80:cb:0e:22:f1:f2:ac:29:b8:8a:79:
e4:23:3d:1f:0a:65:f5:30:f1:50:df:e6:67:97:08:56:f6:23:
09:89:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 15:22:56 2025 by rpki-client