Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: QzyUuk61wk+3j5oemdvm35C9Uo0l/n0iZXVrEjqkHo4=
Subject key identifier: 40:14:F4:52:1A:C6:A5:57:45:B1:5F:55:6A:E5:81:AE:43:E0:E4:99
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0199353755907DF39C9AA15B33FE5FA0744F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 14BF
Signing time: Wed 10 Sep 2025 20:00:42 +0000
Manifest this update: Wed 10 Sep 2025 20:00:42 +0000
Manifest next update: Thu 11 Sep 2025 20:00:42 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: opUEjvrmQqjAyHjMvpztY+Fe9KiJV5a6a1JCkD5kf2Q=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:55:90:7d:f3:9c:9a:a1:5b:33:fe:5f:a0:74:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Sep 10 20:00:42 2025 GMT
Not After : Sep 11 20:00:42 2025 GMT
Subject: CN=4014f4521ac6a55745b15f556ae581ae43e0e499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:ec:79:82:08:d1:11:38:d8:80:7f:c4:d8:
32:71:4a:aa:f1:b1:6e:22:34:d7:0f:78:54:c9:d2:
a5:76:46:58:ff:5d:0c:0c:4b:a3:c9:7e:28:66:22:
be:39:bf:2a:c1:28:16:ed:ae:cf:fc:12:94:e0:91:
dc:c4:0e:4e:9d:5a:bf:48:40:5c:23:55:9a:ff:17:
7c:49:d1:9e:a3:55:1e:30:fe:40:f5:5b:cf:d4:ee:
1d:4d:68:c0:ed:ee:5e:74:2e:71:46:ee:c2:dd:00:
30:59:79:e1:bd:21:c7:52:1a:9b:e5:a7:d4:1e:85:
d4:40:0c:13:5a:52:f1:a5:6b:a1:7e:3b:18:cf:1e:
61:0f:eb:87:a3:ed:6f:e4:75:3f:00:49:f2:9c:fb:
5e:60:11:8f:e8:b5:d8:6b:74:85:72:d1:8d:7f:48:
29:33:ad:b9:0b:d7:9e:0c:d3:c8:ca:2e:fc:ed:3c:
ae:d8:ef:d7:39:54:96:63:36:fa:a4:4c:54:9b:01:
45:c7:db:50:2c:30:b1:be:6e:f5:f1:32:fa:5c:cb:
37:41:e7:39:e6:d1:6a:05:21:30:c0:c3:c3:fd:0c:
d0:64:a4:e5:04:2f:c8:9c:b8:49:95:24:e4:dc:85:
49:8a:a7:75:47:50:d0:d9:1e:f7:7c:4e:31:04:18:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:F4:52:1A:C6:A5:57:45:B1:5F:55:6A:E5:81:AE:43:E0:E4:99
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:72:62:cf:5f:ab:c5:f6:85:67:97:47:b0:3e:1c:55:11:
eb:53:fb:a2:8c:d3:e6:aa:72:c4:ee:2d:d1:3c:74:bc:9c:33:
4e:42:9d:d4:db:9f:b9:3c:cd:ae:aa:9b:0d:6f:29:1a:e0:9d:
77:0a:12:df:23:d0:26:40:fe:ec:ab:f1:cc:f8:c8:15:bf:12:
8c:17:44:55:bd:e0:55:fc:56:40:15:cc:05:7e:a9:07:c3:f3:
13:73:ee:1b:ef:27:82:03:fd:00:61:1a:cb:61:55:cb:5d:f3:
87:43:90:c4:74:9e:e0:ac:5d:5b:88:66:1e:5b:f3:ca:bc:15:
64:f8:51:93:e1:20:b6:cd:71:87:12:3f:fc:48:e6:1c:6c:cd:
3e:02:6a:38:9d:ec:46:38:31:2d:1c:b3:ee:37:9b:e3:e5:50:
09:ec:98:50:64:fb:0a:2c:a4:51:10:3a:02:7f:b9:98:2f:59:
fa:79:29:44:db:4b:59:92:60:ea:fd:3c:cd:1e:1f:a4:e7:82:
1d:78:c9:c3:92:39:67:d4:c9:54:dd:52:2d:63:f4:ad:e7:79:
4e:a4:29:0d:1b:38:de:41:3d:f4:76:ce:19:f8:aa:a9:b5:41:
ed:5a:a5:49:e3:7b:48:4a:f8:43:99:b5:0b:66:ec:00:0f:18:
1c:76:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:29:27 2025 by rpki-client