Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: G7Z5pGu5+Q2WsRqQSbwmuNvT5m+J0FHAC3vwxAI1lZc=
Subject key identifier: C2:0D:B5:C6:35:AB:CB:5E:55:4E:C3:5E:BC:45:EA:07:CA:FC:63:1A
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019922FA0F3BEF44B31494C88D91A752B0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 09C8
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: Xgz8BckU00J15/fftsFKV7hu2xU5CAdR3h+W/v/0DsM=)
2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0f:3b:ef:44:b3:14:94:c8:8d:91:a7:52:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=c20db5c635abcb5e554ec35ebc45ea07cafc631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:35:72:24:7f:3d:8a:3d:81:2e:9b:b7:da:
de:df:68:5b:53:e1:c6:e6:95:6f:48:b9:c5:a2:42:
58:b2:eb:98:d9:dd:eb:82:d0:72:10:ba:c2:b1:0e:
26:51:86:8e:68:9a:39:c6:a4:14:18:3e:8e:29:da:
ef:b8:60:e0:ca:88:8a:06:45:e2:ff:4c:b9:ee:53:
ac:ff:25:0b:08:99:75:a2:8e:73:5e:05:29:16:84:
04:34:12:d2:1f:ca:a2:6e:e7:04:23:95:0b:74:49:
49:b2:68:35:7e:49:d3:6f:f2:40:4c:27:8a:6f:e6:
66:5f:92:5e:f8:e8:fb:0f:44:98:c9:9a:37:dd:f4:
2f:46:dc:33:86:a6:8d:e1:c4:48:fc:ce:13:99:a0:
e6:b3:d1:bf:5b:80:48:c5:7e:53:79:ec:bf:8f:53:
8f:0e:40:e6:82:a7:c1:3f:69:a6:3c:24:25:b5:d8:
1f:6b:cc:18:39:19:df:9c:62:17:56:d1:11:77:50:
db:58:04:6a:92:24:c1:be:25:cb:49:4f:ac:81:28:
ce:81:9b:d5:c7:3b:0d:54:fb:05:6e:d2:21:2a:1f:
53:ae:59:e1:ad:82:5b:28:42:bb:17:20:44:14:3b:
02:25:e8:05:01:f9:6f:e3:ea:42:c1:63:c0:24:b4:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:B5:C6:35:AB:CB:5E:55:4E:C3:5E:BC:45:EA:07:CA:FC:63:1A
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:64:17:c8:2f:2f:43:7a:c8:1b:28:15:31:8c:ee:35:db:3a:
bc:38:07:b5:b7:91:5c:cc:35:3a:b6:d8:fc:a0:9f:98:1e:1e:
19:44:6a:d6:64:95:b0:da:d1:c2:ff:d2:3e:a6:9c:34:87:11:
13:5d:b0:63:9f:8d:9a:d5:50:87:ec:60:d6:9a:e6:cb:7a:1b:
da:c8:db:1f:4b:4a:a3:27:cf:68:25:7d:aa:d0:de:76:fd:a0:
63:74:3b:e1:e9:4e:c6:2b:a4:62:ae:50:01:e1:38:32:2e:16:
ec:d8:fa:04:b3:79:27:06:64:5a:d9:6b:f4:eb:4e:16:89:3c:
4f:ed:3b:4d:2f:aa:90:79:3a:a9:cf:d9:83:3b:92:95:c8:2a:
90:74:0d:75:a8:91:8f:15:a4:95:dd:22:6b:f5:61:fa:c4:c1:
f3:29:d6:38:7b:b2:d3:a7:52:2a:4f:4a:3e:7c:11:e7:a7:60:
a5:0b:9b:3c:7b:0b:55:f5:57:5e:fe:15:1e:81:f7:13:14:06:
a6:03:db:45:86:7c:51:c3:8a:e3:c3:a3:36:54:a2:b4:78:60:
bf:88:30:58:e8:f6:09:ba:e1:49:86:7e:8f:8a:99:b5:59:3d:
31:85:0d:82:bf:de:b2:87:50:2e:78:68:8e:a1:7d:73:1c:d9:
84:9f:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client