Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: WgXiLdunVA3VxSmw1eYguOiW8gkmi9nzcm6qGlFp5HM=
Subject key identifier: E5:12:CB:B1:4A:74:9B:B9:20:A8:32:0B:14:41:0B:8E:37:E2:25:68
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 0199345BE81F4045CD1C584AC9F0B8115E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 16:01:02 +0000
Manifest this update: Wed 10 Sep 2025 16:01:02 +0000
Manifest next update: Thu 11 Sep 2025 16:01:02 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: dCMz8J7sctZCDk/S2YASVXio9uUealwDwquEhidP3VM=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:e8:1f:40:45:cd:1c:58:4a:c9:f0:b8:11:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Sep 10 16:01:02 2025 GMT
Not After : Sep 11 16:01:02 2025 GMT
Subject: CN=e512cbb14a749bb920a8320b14410b8e37e22568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:21:96:f0:5c:5a:a6:ce:d8:17:4c:6a:ff:5c:
21:66:fc:bf:68:86:d9:d8:57:c7:40:7f:59:9b:1e:
f1:76:d4:6f:cc:87:0d:95:7b:ac:95:20:2c:ec:d0:
6b:3e:51:58:bf:da:10:32:85:4d:54:6e:7d:b4:df:
bc:ff:c6:06:49:5c:5e:0f:86:64:48:8e:d1:d5:e7:
da:dc:c4:06:b0:89:e9:de:2b:81:2a:59:4b:79:04:
6a:22:95:30:db:ed:c7:77:92:d2:11:23:97:60:52:
9b:0f:3f:61:8c:6e:24:6b:68:65:e7:11:af:c7:d1:
16:d0:c9:fd:9c:35:d8:31:0b:12:7a:9e:28:d7:76:
f3:be:32:36:f4:dc:54:5a:fc:c7:e7:3f:f4:2c:57:
36:42:70:89:79:c7:67:ed:a0:f5:ae:9b:51:cc:d3:
b8:30:bf:e0:eb:98:b0:a7:97:82:da:c5:b0:81:f1:
68:f3:50:a5:e8:55:cd:12:7e:e6:3c:3d:ec:07:c6:
0a:af:97:5f:86:64:2e:8b:06:11:d0:a9:41:d8:3e:
a8:90:88:50:93:a4:de:51:65:ef:6f:6d:20:41:57:
a6:a3:67:e1:a6:e2:bc:94:7c:de:18:85:e5:4b:b5:
11:a0:8d:a8:2c:d7:8b:37:ae:98:a4:e0:7d:d8:e5:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:CB:B1:4A:74:9B:B9:20:A8:32:0B:14:41:0B:8E:37:E2:25:68
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:64:a7:ae:2c:41:8e:e7:6b:5e:71:19:ab:76:2a:df:d6:
7e:c5:6b:9d:99:1b:74:8d:be:28:11:8c:5f:42:29:29:8d:09:
9b:37:e8:fc:b0:6d:a8:25:c5:74:3c:98:fd:28:ab:54:8d:dd:
a5:b8:72:4c:2e:bf:be:dd:2c:22:0a:42:2e:dd:27:73:da:89:
2d:0a:a0:8a:57:45:57:aa:ff:0f:11:fb:89:0a:bd:01:1e:fa:
ea:66:76:b2:dd:8a:c9:09:24:be:23:22:17:7d:ab:66:f0:fc:
08:35:99:64:3b:94:d5:f6:c3:ec:32:1f:7b:92:fb:a0:13:25:
d1:eb:09:cc:26:28:27:da:20:de:bb:9c:88:68:1e:98:78:38:
65:2f:46:ac:b8:43:7c:2a:e8:0b:39:be:f8:33:52:fd:b3:6f:
e5:7c:3c:46:4b:83:5a:d2:74:b2:08:81:d1:98:9c:6e:03:7c:
28:24:c1:24:98:7e:c3:e5:f9:27:38:67:26:39:5c:c9:33:ed:
64:76:7a:e6:e2:e4:21:7b:04:fc:6c:15:d9:1e:70:3a:54:8a:
e7:b8:d9:f2:62:cd:ce:1d:fc:9b:e0:a5:7f:4b:61:a0:a7:24:
ef:42:7a:d5:38:64:27:4e:60:2a:65:96:b8:25:87:85:a9:48:
b0:08:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:55:54 2025 by rpki-client