Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: XYN74Fvl1W85gRwBjF7PbT2uO8L5PUDA1V1T5sH6f+4=
Subject key identifier: CA:A2:F6:E7:C2:8E:9A:42:C5:E9:3C:B1:FC:89:6E:FA:93:DF:61:A6
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 019924444869F625BF9CFF412BF941E3511C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: 02F8
Signing time: Sun 07 Sep 2025 13:01:18 +0000
Manifest this update: Sun 07 Sep 2025 13:01:18 +0000
Manifest next update: Mon 08 Sep 2025 13:01:18 +0000
Files and hashes: 1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: jWXy+u4hg4MDOMY/A8t2ZGCyLlZ1NInNLhvZ+Y0PUEg=)
2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:48:69:f6:25:bf:9c:ff:41:2b:f9:41:e3:51:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Sep 7 13:01:18 2025 GMT
Not After : Sep 8 13:01:18 2025 GMT
Subject: CN=caa2f6e7c28e9a42c5e93cb1fc896efa93df61a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:98:e9:7e:f0:12:fc:3a:11:1a:13:81:8d:
09:cc:54:99:00:14:9b:07:c0:ac:5c:39:c5:74:2d:
b4:eb:6f:c4:b9:09:cd:1b:8c:a6:9e:31:6d:8a:b0:
98:63:96:39:08:2f:ae:ac:f2:42:67:d5:52:02:b7:
d6:91:f3:0a:6f:b4:d5:12:4b:48:16:2b:fe:0c:84:
38:c2:2c:67:1b:95:61:a7:34:77:43:8f:75:0a:31:
0c:9d:b0:fd:87:84:57:88:7f:19:f6:2f:94:70:46:
79:60:9a:81:ab:1a:4e:80:5c:17:08:da:29:2d:e2:
f6:8b:c4:74:b3:ab:56:f0:77:1e:f1:83:6f:42:95:
6a:cd:81:29:04:ed:83:69:6b:4b:8f:da:ae:20:6f:
2c:88:80:41:f5:b5:d2:d9:2c:da:03:ce:12:8f:e9:
b1:dd:80:e9:0a:09:ae:83:c7:b9:a3:0d:7e:fa:42:
0a:03:5c:94:6f:23:5f:43:b1:bd:98:a7:25:f7:48:
1c:26:fa:ad:dc:59:61:35:1f:49:01:75:bd:7d:03:
d3:b7:95:f6:3e:88:7e:b8:2a:1d:7c:19:7d:4e:85:
7e:99:ea:97:df:75:e0:ca:19:d6:f0:c9:26:7c:0b:
b4:0a:45:4e:c9:40:76:a0:cb:ad:00:66:f5:8a:59:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:F6:E7:C2:8E:9A:42:C5:E9:3C:B1:FC:89:6E:FA:93:DF:61:A6
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:55:23:35:93:50:7f:21:69:04:43:71:f4:fe:39:ee:40:76:
bc:c0:47:a6:9a:5a:58:59:dd:10:a2:9f:17:2d:ba:ac:12:57:
6d:2a:cc:0a:b2:15:d1:59:ae:2e:0d:99:1e:d0:12:c2:d4:f9:
c8:55:07:e4:e1:e4:59:c0:ef:37:77:2f:61:fb:b6:87:bc:71:
e2:22:95:0d:88:9c:57:bf:bf:30:93:56:35:86:b6:27:1a:31:
5d:01:cc:cd:b1:bd:f7:8d:fd:bc:fe:e6:2c:46:12:9e:ee:a5:
fb:99:70:fc:db:b5:5c:3e:b9:a2:a2:8d:85:8e:3c:03:7d:2f:
f2:ca:a5:1d:2e:b1:f7:21:87:0f:04:78:bb:ff:aa:06:4d:c4:
5f:64:62:c7:89:7c:ba:01:6e:85:4a:5f:14:e3:22:bc:03:6a:
14:ec:aa:28:77:df:77:8a:98:7a:1f:65:f2:d3:19:97:d9:a1:
a7:15:3d:2a:dc:bd:f4:0f:92:1a:2a:b6:c2:99:77:f4:31:77:
81:d4:bc:f8:0e:d8:4d:b5:94:58:ad:b8:67:98:f6:88:68:5c:
9e:18:f1:0b:b3:85:a2:f2:0e:fb:9e:09:83:06:63:3e:d1:1d:
f9:a0:80:0f:12:66:0e:bc:00:f0:c1:68:1b:a3:e1:10:2e:b9:
52:c3:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:41 2025 by rpki-client