Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: 0iV4Lri8K7I2nCA9Lw3oLtFkn+Ws7C79mQ6gTdrrwEA=
Subject key identifier: 41:07:61:1B:74:35:E5:C8:9B:71:B1:26:DE:89:4C:31:EC:95:C2:7B
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 019921B10D639F7B800F36D7E54E6DFCA833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 09C6
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: AxwDShPC+QCXMANfDE3zaB9riajhUJtVm/bC0zozrZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0d:63:9f:7b:80:0f:36:d7:e5:4e:6d:fc:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=4107611b7435e5c89b71b126de894c31ec95c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:9b:5e:ac:04:a0:e6:b6:a3:ca:62:b7:25:
2c:4c:9b:8b:02:ba:d8:ea:d5:83:4f:45:c6:64:76:
1f:7b:30:a0:4a:91:8d:40:04:35:5e:67:07:72:f4:
6b:a5:08:da:51:96:ef:c1:dc:63:c4:e4:23:ba:c4:
bf:96:c8:a6:f4:4a:b6:18:24:1b:03:05:36:79:cc:
93:62:97:c9:e5:ce:0c:de:aa:38:d9:66:d7:3e:37:
d9:f0:d8:0e:36:e4:bc:69:c1:64:94:ff:36:08:58:
a7:21:ab:93:a4:88:53:06:bf:c5:2f:0f:f6:4e:36:
7e:5e:0c:87:9d:05:83:1f:df:dd:42:e9:59:69:54:
93:2b:4a:6f:45:8b:8b:14:3b:ca:bb:86:9a:1c:3e:
c6:63:91:89:80:3f:b8:5a:fd:d1:ec:aa:ed:3f:8c:
30:6e:b2:4f:f1:ce:dc:f0:fa:fb:0f:5f:e9:72:58:
d9:f2:ac:f0:1d:03:09:cd:04:41:e7:d4:26:d2:09:
5d:1f:d7:59:4e:ab:e5:af:5a:60:e6:6d:16:1d:cd:
83:5e:25:07:a6:ad:5a:9f:42:7c:17:78:36:c4:ba:
79:d5:8d:7b:87:f0:5c:72:b5:a7:c2:1c:65:0b:4a:
0b:23:ca:24:4e:31:f7:74:18:b3:3d:98:6d:b5:6a:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:61:1B:74:35:E5:C8:9B:71:B1:26:DE:89:4C:31:EC:95:C2:7B
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:3d:b2:af:35:73:98:8f:d0:73:58:b1:2c:a1:55:9d:2c:
f9:7e:f3:2b:b6:84:ea:56:e4:b8:50:bf:08:c8:83:82:fa:03:
4c:b9:ec:e0:28:ea:76:61:cd:99:14:4e:60:a3:5b:c1:ed:07:
9a:ed:24:f6:e5:2a:67:d6:5f:8c:e6:24:fb:57:2b:8a:b3:52:
e8:10:4f:8d:78:98:98:74:66:ed:09:13:4a:d6:19:99:a9:2c:
5c:9a:02:e4:6e:2b:41:1d:c3:7c:56:f8:c1:ab:13:42:72:b9:
85:2f:69:98:cc:d2:fe:b5:18:e0:71:ef:14:4c:91:fd:2e:a6:
ba:65:4c:b2:38:54:1d:1f:da:4a:f1:c8:9d:b5:5e:4f:49:f9:
fc:b2:9b:a5:f0:40:d4:e4:50:bb:9b:10:91:6e:6b:3e:0f:18:
09:5e:03:6c:2a:7f:31:f2:54:15:c9:48:66:82:29:cb:11:a2:
11:85:25:93:a5:ee:96:47:e7:77:61:cd:89:b6:6e:c5:31:59:
d0:f5:4d:9b:33:fd:b8:c9:83:6a:64:48:56:33:80:46:95:0a:
fd:78:85:bd:3c:2b:a4:8e:16:84:02:93:7c:ce:b3:9b:38:16:
c4:77:3d:83:93:30:96:bd:a5:9e:10:9a:78:6a:8e:81:79:5d:
6b:ba:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:59 2025 by rpki-client