Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: 8SSayErukRSaoVipSyQ72MoerAdH6nCgtnusdnuxeA0=
Subject key identifier: BC:D2:6E:90:D0:E4:C4:3D:14:18:27:FE:95:A9:54:CF:D8:9C:B9:65
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 0199361374514778D19827D393A0441875D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 069E
Signing time: Thu 11 Sep 2025 00:01:08 +0000
Manifest this update: Thu 11 Sep 2025 00:01:08 +0000
Manifest next update: Fri 12 Sep 2025 00:01:08 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: QBMKgiK8Fb+iQJDJjXscVNBt8pXlgUUNBuvbUXZ3xdg=)
2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:74:51:47:78:d1:98:27:d3:93:a0:44:18:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Sep 11 00:01:08 2025 GMT
Not After : Sep 12 00:01:08 2025 GMT
Subject: CN=bcd26e90d0e4c43d141827fe95a954cfd89cb965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:8c:f7:20:af:f1:a5:24:51:e7:39:cb:a3:
9c:ea:d6:74:b9:7f:5a:64:8a:68:ae:c2:79:df:4a:
35:0d:eb:56:c0:f1:ec:c0:ca:a7:03:29:24:ba:05:
e6:a2:c8:c4:3c:c2:9a:3c:0c:28:17:d8:fe:c3:8f:
13:b9:30:45:3a:22:ed:e3:9e:a9:1d:33:fc:8d:02:
2a:7d:ed:12:e2:4b:fe:e6:fb:b3:ca:3b:f3:aa:1f:
58:a3:d1:c4:79:50:d3:9f:ea:d0:b3:ae:3e:dd:df:
47:00:22:78:77:e0:ab:a3:16:d9:19:b4:a1:2a:03:
2f:75:b9:79:a1:10:31:ed:84:4f:14:cc:7f:26:f1:
4a:a3:c6:d8:45:7a:94:87:3d:e7:75:0c:b1:48:12:
56:a4:b6:35:ba:2f:f2:ac:36:59:ea:b2:80:22:2d:
80:f7:ec:f0:9a:39:19:d4:41:f8:d9:55:9d:95:c1:
6d:db:c9:88:6c:83:9f:0a:7a:f8:80:8f:c4:20:e8:
32:9e:7a:11:5c:49:8e:cf:d7:4b:2f:89:a7:1f:4a:
9e:f7:7d:08:7a:d2:56:bf:38:16:05:72:e7:b3:80:
fd:3f:ac:b9:b6:63:da:07:d0:b7:75:39:fb:65:5f:
fd:09:1d:24:8e:1d:44:52:fb:a5:0e:b5:09:17:a5:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:6E:90:D0:E4:C4:3D:14:18:27:FE:95:A9:54:CF:D8:9C:B9:65
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:6e:3a:20:78:e6:a7:5a:78:11:f3:9d:76:b7:c3:57:58:
0c:ee:bd:fb:db:49:f0:c0:9e:1b:e2:c6:1b:91:bf:5d:af:50:
80:f7:17:25:46:84:4d:be:c7:17:76:8e:f6:29:67:75:ea:cd:
e6:2b:95:ed:d0:85:b0:d0:2e:e7:ff:a9:29:1d:9f:cd:3b:36:
30:f9:23:1a:6e:a0:be:1c:b5:e9:34:ff:9d:6d:f9:b9:cf:fb:
26:29:61:41:d8:6b:6c:d2:75:a9:c9:bf:7d:49:2d:19:2d:83:
3e:c3:d7:8c:e5:36:21:9b:c4:90:6e:b8:7f:7a:1c:b9:b6:c7:
31:0f:f7:63:bd:0f:1d:4b:61:54:ed:89:a2:92:40:18:f2:52:
15:41:55:e6:10:94:61:c6:6d:25:eb:fd:e1:2a:bd:34:12:23:
d5:ad:b3:59:f0:f3:61:66:0f:e1:d5:e7:ce:6f:66:d7:fe:de:
7b:7e:25:b9:f7:17:76:d4:d4:5c:bb:3d:f2:0f:34:70:d8:39:
12:9f:20:b0:42:4d:64:11:ca:00:5f:2c:65:08:c7:60:1f:18:
c2:d1:5c:30:bf:0c:03:b2:08:fb:15:74:91:94:50:07:3d:15:
27:9e:ce:23:4e:32:37:ae:b8:90:85:a8:97:1e:c6:1b:1f:a5:
a2:84:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:19:06 2025 by rpki-client