Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: TXCdLMLw4vXZxxpQH+kbl894Li4kvy73f6j12I6fabU=
Subject key identifier: 5D:D6:93:21:F6:91:02:C7:16:86:76:1B:E6:8B:72:42:5C:B3:7F:21
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01993502653512BD939BD5E8C1F19DBA3007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 149B
Signing time: Wed 10 Sep 2025 19:02:53 +0000
Manifest this update: Wed 10 Sep 2025 19:02:53 +0000
Manifest next update: Thu 11 Sep 2025 19:02:53 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: eDT+IBQswiFyCTcpAV/O1HXEMpnh5Pk5kzsm7JuHvxU=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:65:35:12:bd:93:9b:d5:e8:c1:f1:9d:ba:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Sep 10 19:02:53 2025 GMT
Not After : Sep 11 19:02:53 2025 GMT
Subject: CN=5dd69321f69102c71686761be68b72425cb37f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:6d:80:09:d8:57:26:36:64:7d:0f:31:08:
26:40:9d:28:3d:3f:d7:ea:bb:51:bc:c6:98:04:29:
7e:7a:b5:a5:dc:21:18:52:a2:53:71:b3:dc:20:83:
c9:62:e5:9f:3f:78:9b:2d:62:98:fa:e6:85:66:63:
0b:72:21:a6:dc:6c:b9:47:6b:0a:f2:f2:4c:e1:cc:
c7:83:d3:c6:15:be:69:de:93:35:68:35:7f:d3:ff:
55:1f:21:dc:06:e2:b8:5e:5a:2c:6f:eb:4b:1f:28:
f9:32:44:fe:f8:26:67:5e:02:3c:9c:7c:af:7e:92:
87:fc:52:81:9b:54:a7:1d:a1:14:ea:95:fe:7c:53:
3a:fd:36:47:ce:75:04:b5:eb:b1:51:b2:b5:fc:19:
2a:41:d1:0a:24:81:4d:a0:9b:b7:0e:92:38:f3:54:
8b:67:ae:d2:28:af:96:38:e4:01:30:63:e4:6b:83:
2a:6e:f8:01:57:5c:75:ec:b5:0e:78:0e:81:f5:72:
98:e7:5c:11:24:72:03:99:1b:73:af:79:09:14:e1:
11:97:b3:ce:32:ff:dd:83:17:d5:59:6e:9e:89:14:
ef:14:80:5d:4f:ec:07:2c:15:58:87:6b:42:df:57:
7d:82:a7:c2:04:22:43:94:f4:d3:26:ac:c0:a9:3b:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:93:21:F6:91:02:C7:16:86:76:1B:E6:8B:72:42:5C:B3:7F:21
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:07:e6:ee:59:44:07:6e:a8:20:94:16:ab:ed:d6:02:3f:
7c:d7:d6:46:40:3f:9e:86:e1:5b:0f:b3:f4:19:0f:49:4e:c4:
cb:f8:5b:8c:58:10:8f:ca:f3:e9:13:cb:25:3f:7f:b6:3c:7c:
77:27:b4:be:01:3a:c2:9e:54:00:31:44:11:ae:4b:02:ad:e5:
49:1b:5d:37:6b:85:83:70:c8:a6:3d:a5:56:cd:31:d9:8d:9e:
7e:d1:af:21:16:c5:96:68:80:cf:2f:40:91:4c:f6:d7:b5:e5:
2f:07:91:f8:51:cc:9a:34:6d:36:7f:13:8c:61:e8:eb:0c:9e:
13:b1:f2:c0:d0:88:2e:43:a4:72:fd:6d:3d:97:44:7b:bd:92:
e4:05:e9:c1:c2:75:2c:19:20:6a:5d:f3:24:47:fe:e3:aa:eb:
bb:a4:43:b6:50:bb:a9:eb:17:6a:6a:75:d8:10:4f:bc:f4:91:
d1:68:6c:84:74:38:83:aa:ca:b0:24:5a:c2:e0:4d:ef:08:e1:
47:15:04:dc:69:cd:94:d1:d5:e1:4a:e3:32:2e:2d:e7:f5:fd:
a6:2f:41:1f:95:60:5d:f9:dc:ed:6d:ce:b2:62:3d:d8:8a:51:
a1:35:3c:10:35:94:fc:e0:a1:cd:40:b2:c0:68:cc:8b:b2:d2:
a5:4d:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:34 2025 by rpki-client