Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: 4fNQbmN1tPA9A+5Q85A/EG8+9SKY+xB3yKQlHEpMZ6Q=
Subject key identifier: 90:BC:9E:F6:41:33:46:09:0D:F4:FA:43:A8:EF:63:8A:BF:90:F4:C3
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 0199221E29E66F14EB24AA65182CF4C06115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0CE2
Signing time: Sun 07 Sep 2025 03:00:26 +0000
Manifest this update: Sun 07 Sep 2025 03:00:26 +0000
Manifest next update: Mon 08 Sep 2025 03:00:26 +0000
Files and hashes: 1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: 6RUSEvIr17HlzJI5GyBmJYjD15qHbaQoEpDyHcI4QAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:29:e6:6f:14:eb:24:aa:65:18:2c:f4:c0:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Sep 7 03:00:26 2025 GMT
Not After : Sep 8 03:00:26 2025 GMT
Subject: CN=90bc9ef6413346090df4fa43a8ef638abf90f4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:2b:eb:10:d9:f9:fe:c6:9b:4e:ec:ba:c9:
db:8e:a5:f1:6a:62:90:2e:fb:82:00:fc:f0:9d:39:
4d:f4:55:2f:83:de:51:94:98:9e:fb:e6:04:5f:8f:
43:36:7c:eb:2c:ba:4e:d3:c7:9a:61:2b:0a:5f:1e:
a4:45:df:48:0e:8d:a0:ad:0c:16:28:3e:1a:3c:32:
81:45:1e:70:d4:c2:f5:00:2f:16:1d:20:da:c5:2b:
47:42:15:ee:c7:8e:0a:7d:eb:6c:97:d7:82:69:4d:
11:9f:72:38:7a:28:b5:10:ad:85:13:2a:7c:1d:38:
2e:0a:b8:ba:dc:8a:20:92:9a:e7:80:c7:f4:67:f3:
3d:a5:2c:73:5d:ab:10:d7:a8:4e:9b:37:a3:67:93:
c8:e6:c6:b5:b1:81:3e:b3:f6:9a:eb:eb:16:2f:2e:
2b:56:f3:1e:98:b9:64:ee:14:a5:18:c9:50:6b:0c:
0b:d0:f5:67:53:83:1b:b5:c0:e8:d7:95:31:d3:f7:
14:57:4d:65:26:f0:07:e4:f7:47:96:dc:c2:74:82:
d2:fe:a7:be:3a:df:9c:86:e0:6d:f1:3a:71:ea:7e:
f9:12:e5:24:43:88:cb:a7:a1:de:c7:38:26:19:91:
1f:ac:ef:7a:db:32:fb:f3:78:59:ce:ce:69:7c:cd:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:9E:F6:41:33:46:09:0D:F4:FA:43:A8:EF:63:8A:BF:90:F4:C3
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:6e:e9:58:d1:5c:ac:a1:df:03:dc:5c:f2:bb:9f:9d:e1:
ec:72:e9:db:c1:16:05:00:34:f8:9d:52:aa:87:23:57:42:c1:
c5:95:97:96:df:ce:a0:76:3e:33:db:57:95:ac:ca:d4:27:fc:
a3:13:d5:6b:1f:86:e6:40:79:02:95:38:14:43:8a:c4:1d:d1:
1e:33:3f:be:21:22:07:29:6b:3c:c5:54:73:9c:33:cf:cb:66:
56:1b:8c:cd:b2:2f:b8:9b:0d:2c:e1:8d:ef:3a:02:57:79:4d:
36:ec:f3:9b:bf:d3:60:08:30:07:8a:9d:52:da:97:6c:46:70:
0b:24:ad:2e:ec:82:25:cc:be:a1:8a:d3:60:53:e2:90:a6:19:
f0:6e:74:ee:b9:32:b2:8b:4f:fe:00:76:43:ed:b8:6c:2d:72:
12:0d:6a:75:dd:36:2f:d4:3a:f7:ea:c5:74:65:f9:b2:cb:b5:
07:81:73:ea:02:0a:47:30:d9:12:29:f4:5a:64:83:51:76:18:
5a:bf:03:46:ac:6f:d7:db:14:d5:20:4a:73:77:3a:45:27:1b:
4e:10:cd:eb:c6:df:5a:6c:f4:8e:1a:e6:3f:e0:3d:5b:80:54:
d1:56:95:12:e2:b1:fd:25:bc:b7:b2:02:2f:57:e9:ce:d0:26:
3c:be:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client