Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: jkbTHB31fSkBG+neYrKpedr21iwinVzbffgKUIcSSYU=
Subject key identifier: 85:1A:1C:BA:D4:6B:0B:19:A2:8D:F7:6B:52:32:88:76:0B:96:9A:C9
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 019922553C6A1EECFA215A6352D73B47A05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 04:00:35 +0000
Manifest this update: Sun 07 Sep 2025 04:00:35 +0000
Manifest next update: Mon 08 Sep 2025 04:00:35 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: JccUKuBgz15Ekqou1EcYJJhyWJBMncoablzrxKf2dIQ=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3c:6a:1e:ec:fa:21:5a:63:52:d7:3b:47:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Sep 7 04:00:35 2025 GMT
Not After : Sep 8 04:00:35 2025 GMT
Subject: CN=851a1cbad46b0b19a28df76b523288760b969ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:78:61:99:7b:3a:63:17:80:af:28:8b:22:
17:1e:1f:c3:09:b9:7f:a9:73:97:00:f1:40:51:7d:
70:fd:55:90:67:cf:b2:cf:db:40:3d:91:c6:17:c7:
89:fd:76:fa:cc:8c:c5:9e:c6:6c:7c:2c:17:03:53:
ba:37:06:31:f5:9d:60:02:03:52:23:0b:57:d2:3a:
2f:04:cd:7d:82:56:5c:58:ce:34:f9:2d:80:1f:87:
1c:72:bf:a8:00:d7:0b:8b:0c:2f:f2:ac:4a:01:ab:
d2:a5:3b:af:3c:e1:0c:37:b0:90:6d:20:9b:e8:0b:
fd:77:15:72:cb:a0:85:12:9f:f5:96:15:f1:ed:ff:
8b:46:d5:fe:84:f8:bf:d4:94:fc:cf:46:ee:40:b2:
71:fd:e0:62:bc:dd:95:e9:85:2d:16:51:db:a3:d5:
7f:4d:9a:61:f3:59:00:34:61:a9:9a:af:09:0a:63:
80:95:52:6f:31:48:6d:f0:cc:88:9d:ff:e0:d3:e1:
4e:eb:b5:19:07:81:d7:b4:da:42:70:a9:0b:e2:09:
49:eb:d1:ce:b3:b8:d5:e5:a7:f2:d5:e7:bc:64:5d:
6c:47:65:e2:07:b3:02:fc:59:1e:05:4e:76:49:50:
2e:d1:78:33:89:75:11:ad:5c:9a:64:b2:81:6b:ca:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:1C:BA:D4:6B:0B:19:A2:8D:F7:6B:52:32:88:76:0B:96:9A:C9
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:33:18:7b:8f:aa:bc:57:7e:a3:b6:0d:37:4d:11:51:e1:
5a:a0:6f:de:e4:f5:d6:c3:17:9b:e4:57:80:2a:7e:28:5e:64:
8f:5b:97:1a:71:9b:bc:d3:c0:f8:41:2b:b1:a0:bf:7d:5b:bd:
09:5a:21:d1:b8:69:d0:89:e8:0a:eb:9c:42:45:e7:88:b8:56:
7e:39:6c:4f:9d:8f:e5:2f:8d:6b:8c:ef:ea:f7:a4:f0:cb:34:
29:d8:3d:4f:75:e1:bd:42:06:7c:bf:3a:0b:09:47:bd:50:dd:
5b:15:05:ad:0d:ce:f0:79:42:76:3f:51:16:04:d4:65:05:63:
2a:3b:3a:53:a1:8a:3b:29:7b:cb:59:1c:89:09:63:3a:e0:8d:
1f:b0:da:1e:7d:7f:00:f8:fe:67:b5:b4:09:59:93:7a:06:dc:
22:e5:4d:07:f9:94:06:d3:ac:af:05:61:54:59:e0:bb:a7:eb:
df:81:75:be:04:dc:80:c0:3f:6a:ad:49:e3:f6:56:0b:bf:51:
47:b8:8e:6d:f7:c9:1c:c6:04:f3:c2:a0:6d:83:2f:a2:d0:be:
cb:d1:bb:fa:87:c7:be:84:71:c2:1d:90:e9:e9:51:60:53:18:
fc:ce:8b:bc:45:82:e1:2c:be:44:2d:33:59:2d:26:7f:3b:0c:
58:4c:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:38 2025 by rpki-client