Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier: x1KOqIwPz/c08DPy8/dRk8kS407DAYRIMR9U1omyoJc=
Subject key identifier: 13:C6:28:FA:A3:E6:07:6D:F7:C5:5B:B7:D0:3F:96:07:20:E4:9D:10
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 019923315924BEAF9D32573494111B0F4AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:01:00 +0000
Manifest this update: Sun 07 Sep 2025 08:01:00 +0000
Manifest next update: Mon 08 Sep 2025 08:01:00 +0000
Files and hashes: 1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: 3c4dkWg7UuoRlBdQMXxzoeWiD350n6ByW1ia8caRXgU=)
2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:59:24:be:af:9d:32:57:34:94:11:1b:0f:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Sep 7 08:01:00 2025 GMT
Not After : Sep 8 08:01:00 2025 GMT
Subject: CN=13c628faa3e6076df7c55bb7d03f960720e49d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:92:b8:84:fb:18:60:72:d7:ac:18:33:06:
fd:04:0d:56:65:46:f2:f6:36:a8:85:77:b7:07:fa:
3c:06:48:60:f6:f3:c3:dd:86:e3:83:f4:50:26:db:
ff:3c:77:24:d6:d1:1b:c2:2c:aa:27:37:0f:73:1a:
85:9f:9a:a3:3e:8e:c3:6b:57:df:17:be:a7:79:e0:
7b:1b:1c:1b:c9:d4:e9:5e:04:41:f8:c6:4f:29:8e:
94:7e:d2:53:2f:a1:49:26:23:02:f4:b5:47:39:50:
51:3f:31:1f:fe:ec:1c:c5:b1:7e:63:eb:6d:45:c3:
c3:eb:f2:d7:41:dc:59:47:7f:7f:9f:0f:9f:1e:eb:
0d:46:09:85:cb:62:9e:36:33:97:cd:14:69:2d:f4:
ba:61:d4:b0:d6:81:7e:6f:16:e1:e2:f1:96:be:23:
da:4d:cd:a6:38:19:ae:5d:d3:2b:82:4c:b2:41:11:
c0:f0:ca:4b:40:d7:df:1c:3d:8c:7a:c9:f8:4e:52:
45:e0:20:1a:17:bd:14:40:c8:65:53:7c:ee:67:5d:
10:87:c3:97:15:10:a9:37:c2:59:00:76:a4:b7:f3:
d1:5f:fd:48:4c:6c:49:35:15:98:0d:d3:01:c4:c9:
53:8a:11:84:93:d1:bd:b4:16:2e:73:54:83:ad:10:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C6:28:FA:A3:E6:07:6D:F7:C5:5B:B7:D0:3F:96:07:20:E4:9D:10
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:d6:91:55:22:ab:da:23:92:da:a7:7a:98:57:e5:79:ae:
31:2b:65:eb:61:a1:47:98:53:be:e1:f8:f7:f1:7a:3e:8b:cb:
4d:e3:72:88:fc:a2:1b:a7:90:e4:bb:50:04:54:20:1d:e9:95:
90:32:bc:b0:aa:7b:56:f2:c6:03:16:ad:1c:08:69:18:4d:d3:
23:ed:9e:43:1a:25:e3:a0:41:5b:e4:12:f0:03:fc:50:b4:84:
cc:89:be:85:a6:51:80:5f:7d:cd:a2:dc:dd:26:b9:d5:74:ab:
18:d4:66:14:bb:75:f7:28:af:a8:84:11:12:d0:05:79:32:13:
d7:72:82:2e:53:a1:73:5b:65:8f:d6:08:79:24:c4:50:2f:4b:
a2:87:f9:59:dd:96:74:15:58:95:26:b3:47:d4:68:ed:f1:8d:
ea:c0:78:3d:f8:e9:2f:68:66:68:df:54:85:b0:1e:83:fd:02:
d1:91:8c:48:4d:8c:e5:a0:05:69:53:d1:3f:9e:5e:4b:60:f3:
0c:49:90:de:91:a4:da:df:18:4c:25:8f:55:bc:96:b4:f0:55:
0e:7f:ef:1f:fe:d5:48:d0:00:35:a1:0e:f6:62:5b:46:70:28:
16:c5:4b:ae:5d:21:1a:41:3b:f8:01:a4:d6:75:d3:ea:49:03:
f0:7c:72:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:44:59 2025 by rpki-client