Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: 8pcgS/4S9M04LXCx+MzhaQGXY1McwlL8Spi5829OMoM=
Subject key identifier: DF:79:58:D5:E3:7C:6A:67:C0:95:52:0C:94:AC:0D:ED:EE:3B:D5:88
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019923A0B1A897F796880B6E1200BE82B383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0D45
Signing time: Sun 07 Sep 2025 10:02:37 +0000
Manifest this update: Sun 07 Sep 2025 10:02:37 +0000
Manifest next update: Mon 08 Sep 2025 10:02:37 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: Hsmzmq9NIsHV+MxaecQBXMxBuUAIhNUHi0xnsNHevQc=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b1:a8:97:f7:96:88:0b:6e:12:00:be:82:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Sep 7 10:02:37 2025 GMT
Not After : Sep 8 10:02:37 2025 GMT
Subject: CN=df7958d5e37c6a67c095520c94ac0dedee3bd588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:3d:6a:0e:b0:09:0d:65:fd:03:da:ae:22:
b4:ad:0a:c3:b6:d3:61:8b:67:91:c5:c0:a0:30:11:
05:cf:e6:b8:74:7e:f5:9f:5f:34:47:b3:ac:d4:d0:
f9:d8:47:59:69:9a:8d:50:5f:f4:6f:3c:8a:41:b9:
aa:10:c8:3f:79:58:1b:73:fa:ce:0a:c5:32:f5:0b:
d3:79:c7:b3:74:b2:b4:06:8a:9e:8a:42:22:ba:e0:
0c:ee:a8:d5:39:5b:22:c6:25:e6:70:cc:e1:f5:d5:
13:a1:17:c3:37:df:88:70:3e:80:7b:c5:ec:fa:c1:
41:98:a9:90:a3:3c:36:29:02:9f:1f:57:c2:77:74:
91:78:49:74:e3:64:19:4c:39:31:9c:2c:31:93:81:
de:30:1b:37:fb:33:d4:b5:41:19:12:8c:29:19:35:
a7:6f:bf:bc:c5:e1:64:ab:fd:cc:1b:aa:bb:c0:d8:
03:9a:5a:33:19:62:76:3c:be:4e:8e:7b:27:a0:15:
59:9e:65:d1:ad:51:ab:22:06:7a:b3:5a:69:65:a8:
8c:c4:c4:f0:1e:1f:dd:45:cf:c9:43:80:79:2d:bd:
7c:0a:e0:8c:11:cf:18:64:56:b5:de:38:01:ae:a4:
aa:f3:f9:c8:38:3f:f7:83:b5:cb:e1:3e:0d:9a:a8:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:58:D5:E3:7C:6A:67:C0:95:52:0C:94:AC:0D:ED:EE:3B:D5:88
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f3:04:85:c0:7c:37:d4:24:b3:6f:a6:5d:e9:b2:b8:f3:67:
5f:29:17:6c:a8:e5:22:0a:e7:b9:8b:65:a7:b8:f9:15:67:32:
43:03:03:b9:34:38:3e:ab:ee:38:43:94:67:09:1c:71:71:cf:
d5:eb:26:ab:b1:65:7d:0b:be:ec:d6:6c:58:ea:c4:33:7c:1d:
e2:b2:81:1e:73:f8:30:52:e3:0b:52:78:d3:11:2d:ec:a8:0f:
a8:7f:c9:3e:59:e1:a0:c2:6d:c7:52:b4:9c:f2:e7:f3:62:7a:
92:ee:75:c4:61:76:35:b9:65:63:06:62:8b:34:f0:d1:c4:69:
6c:3e:d0:24:17:0b:61:ea:70:10:d6:4f:0b:4c:85:65:fe:98:
59:b6:8f:5e:9e:aa:28:f3:73:90:27:d6:4d:a3:13:0c:7f:4c:
93:e6:a7:79:9f:d8:4c:fb:ec:71:04:2c:62:b5:8a:90:3c:b3:
21:b1:94:26:58:4b:dc:7c:63:c2:28:5a:ff:5d:5f:49:a5:3d:
e0:69:21:cc:2d:e5:04:e5:3f:55:dd:fc:30:85:3a:c1:0d:66:
a7:82:cc:b3:2d:0f:7d:0d:97:18:21:94:d4:42:1e:e2:aa:9f:
99:88:1d:e2:72:ed:22:f9:a4:62:8f:59:29:d4:51:9d:02:fc:
37:68:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:48 2025 by rpki-client