Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: Fg517dLHmYc603YuLQCG4nZ3mePz/t4Cw8RNUzrKLn8=
Subject key identifier: 60:9A:F3:52:95:83:DF:F0:64:27:D0:C1:66:79:29:4A:0E:DA:0C:E3
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019922FA0D9DFF3567CEC2D3AC6C460B2A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 13DD
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: 3N2b7elqxtBhLMnxWdWEEDJwsh3cI/+qFfR8UUQQZ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0d:9d:ff:35:67:ce:c2:d3:ac:6c:46:0b:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=609af3529583dff06427d0c16679294a0eda0ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:f5:d0:97:80:19:16:7b:49:ae:d3:fb:3e:
dd:f6:aa:f3:88:5f:17:8c:94:93:9a:76:e2:58:75:
b8:52:09:04:ac:a8:8c:ec:80:7f:5d:96:ff:48:0e:
8f:0e:7b:c1:e3:a3:fe:db:68:74:8c:c1:9e:b3:e8:
43:90:7f:69:dd:95:41:91:33:bc:71:be:18:e8:71:
3b:d9:2e:cd:eb:67:5e:da:2e:7d:3b:98:c0:8a:25:
d1:d6:9f:61:cf:86:a1:74:94:3c:ff:c3:0a:0e:30:
20:fa:dd:2f:b0:cc:9f:25:af:b3:03:3e:d1:90:b0:
ef:2c:5b:68:99:32:ad:90:ff:e9:eb:7f:e4:a0:eb:
34:9b:b7:7e:ff:84:d1:1e:44:5d:65:c6:bd:70:25:
78:9d:12:e3:aa:69:5c:db:a5:9d:f1:4d:2d:ff:21:
21:44:55:37:3c:8f:30:9f:9f:76:f6:1b:ed:e5:f3:
d5:70:57:5f:82:f7:1e:d5:b4:bd:9d:be:ae:10:c9:
8c:26:6c:bf:6c:e5:93:98:e8:fe:02:5b:6e:c6:aa:
38:ec:a8:a4:33:07:d1:a5:d8:91:4e:26:5b:15:6b:
02:23:1a:b8:9f:78:1b:51:6e:5a:4c:cb:00:55:c6:
e6:d0:83:b4:a4:4a:e0:65:27:02:71:34:42:30:ed:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:F3:52:95:83:DF:F0:64:27:D0:C1:66:79:29:4A:0E:DA:0C:E3
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:e5:6b:85:08:d7:1b:c1:21:ab:70:ea:8d:ec:51:d4:d7:
9a:6c:fe:97:a8:57:9a:47:90:54:a7:a4:7d:77:d3:3b:74:83:
52:af:6e:28:99:50:f7:18:f9:21:81:d7:bc:2e:45:a6:db:d8:
4f:93:b9:aa:a5:31:fe:66:97:50:3f:f5:eb:b2:15:f3:75:8a:
f5:ad:aa:df:8a:f4:d6:7d:2b:3c:c8:ec:b2:72:7f:f1:af:43:
77:e3:02:6e:09:0b:2f:83:6d:fd:68:9e:b7:bb:d5:e0:9e:3c:
70:09:b2:9d:86:ab:10:a8:5f:ee:0b:22:51:a0:1d:2e:00:cf:
49:7c:fb:8d:12:0d:0e:82:04:25:67:0d:17:bc:f7:06:8d:68:
69:2c:96:0c:9b:ec:f3:71:fa:61:d9:d8:88:b2:95:78:2c:c3:
00:82:36:45:d5:90:31:05:e2:95:c6:78:33:1c:c4:83:de:1d:
87:fe:5b:ef:43:d2:62:ac:5c:34:cc:00:70:03:41:a6:54:c5:
95:f8:f0:ea:1d:3a:7a:f7:f5:86:9c:22:ea:85:af:db:f2:65:
32:e9:8a:a5:db:bd:8d:d3:8a:3d:6c:61:0e:da:08:36:52:d7:
69:3a:d1:cc:a2:bc:3e:41:9f:00:a7:64:5c:31:6f:10:9d:4c:
3e:fa:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:36 2025 by rpki-client