Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: iPCJXE8p5zloiRv2SJnbJm3tF9I7uPkOlyI+tq14MtQ=
Subject key identifier: 09:52:4D:1D:6B:DC:71:5E:89:28:52:C3:2E:3A:C3:75:19:E2:E0:24
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 019930B5FAB1080DE520BFAB1CBA4B34D6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 0D5F
Signing time: Tue 09 Sep 2025 23:00:56 +0000
Manifest this update: Tue 09 Sep 2025 23:00:56 +0000
Manifest next update: Wed 10 Sep 2025 23:00:56 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: /x5u36Qv/QytkK4981e2iKFPtBsWqlbt0ZyOjzPFwFk=)
2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:fa:b1:08:0d:e5:20:bf:ab:1c:ba:4b:34:d6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Sep 9 23:00:56 2025 GMT
Not After : Sep 10 23:00:56 2025 GMT
Subject: CN=09524d1d6bdc715e892852c32e3ac37519e2e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:2d:a6:0a:2a:ce:72:74:0a:12:c2:7d:e9:
e5:6c:57:69:ff:36:04:c7:81:01:8b:47:38:dd:3a:
2f:61:76:2b:a9:7a:6d:93:45:b0:1f:4e:bf:3d:54:
c7:d8:6e:a8:d1:23:ea:66:02:d8:fb:c1:64:58:c9:
cc:5f:34:2e:ed:e6:47:21:de:7e:1b:4c:c8:f2:6c:
ea:1a:ff:70:f9:39:c2:05:3a:3f:4a:a8:f5:79:25:
6d:0b:81:8c:84:ce:2d:ac:b8:d3:ec:85:67:80:1a:
50:2c:f6:fb:3f:c5:f2:d0:b9:37:22:c6:6e:52:b7:
10:57:2c:e3:d0:db:1b:23:d2:0e:e7:13:24:ea:8e:
71:1d:80:01:a4:d2:65:b4:be:4f:c5:a9:c0:d8:f7:
4b:49:b1:ba:1b:fe:aa:41:24:11:ac:5c:64:f5:10:
0a:9f:58:6b:9c:0c:3d:52:b4:06:62:c4:d5:07:bb:
ba:fd:c9:1c:51:03:7c:9d:bf:3e:b3:c8:1c:4b:7a:
dd:69:62:1c:b3:59:8e:55:77:c1:29:6a:71:48:13:
b3:5e:9f:61:62:3b:da:e7:79:41:c2:50:42:f2:b2:
69:82:9f:94:a5:df:d5:2d:e4:27:18:37:b6:10:35:
21:82:99:74:14:84:34:71:4e:e0:66:04:c7:29:1f:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:4D:1D:6B:DC:71:5E:89:28:52:C3:2E:3A:C3:75:19:E2:E0:24
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:80:de:a1:40:2c:63:c1:88:64:3b:cb:aa:76:c3:7b:2f:33:
04:1c:50:51:5b:44:ad:04:c7:9c:99:b1:a8:b9:90:99:c5:81:
d2:a5:03:d3:52:2a:a4:43:5d:78:db:fe:16:34:24:34:32:19:
71:85:65:e5:b0:c5:01:18:f6:c4:9d:aa:61:b9:dc:a8:65:45:
82:c3:5d:77:46:b3:f7:76:7d:f3:f7:6c:21:fd:f2:5f:4c:e7:
e4:a0:57:75:c4:73:41:f1:4e:87:9c:0b:31:7e:4e:7c:3a:dd:
2f:fd:2e:e0:4d:ac:9b:54:bd:04:43:cc:13:8e:c5:3b:00:14:
00:c4:4a:0d:fd:d3:04:e8:20:23:fe:ee:ee:8c:b5:45:70:c7:
b2:d1:20:fa:f7:eb:5b:c6:1a:92:74:81:0a:aa:8d:35:ab:d7:
a1:39:14:c8:af:eb:4e:44:43:e9:f5:09:b4:82:da:65:e1:91:
74:89:a7:5c:a6:82:c7:13:27:82:f4:9f:a0:b0:f0:27:70:11:
c7:7b:11:42:0f:9d:4b:8d:6c:7b:f4:b4:fe:a9:1e:84:5c:6d:
c4:1c:76:47:cc:2d:a5:5c:7b:7f:58:aa:84:44:78:27:3e:c1:
00:13:23:c2:cc:20:1d:0d:18:07:89:48:6f:f3:ae:f9:a0:b4:
c4:92:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:52:19 2025 by rpki-client