Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
File: K4GVFfOZ60LIAx876kqYyOKJ4e0.mft (raw, json)
Hash identifier: cJSbO1Fhq/lIlpWl7R2R6o1laWBKUHpM9rBLKIfghT0=
Subject key identifier: D0:C8:D8:3F:6A:08:DD:19:FD:EA:69:48:60:31:C9:58:E9:B2:A3:49
Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
Certificate issuer: /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Certificate serial: 019922C3677782EB5181B14792EDF6C98BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
Manifest number: A6
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: K4GVFfOZ60LIAx876kqYyOKJ4e0.crl (hash: dtGXlQ0rigdac5O+9KnhyzUpt3dyUpmfPx0/6LG1x4I=)
2: MRY6fM9QiSsubyguz4kspQmishA.roa (hash: /78lcK4sMBWDJAqkZAAF4XGGhpfWKl2tLUozc3wFeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:67:77:82:eb:51:81:b1:47:92:ed:f6:c9:8b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=d0c8d83f6a08dd19fdea69486031c958e9b2a349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:03:a6:a4:9c:44:c8:97:cd:89:ce:aa:b5:
2f:5f:ef:a4:a4:8f:75:f6:d7:25:98:e0:fc:cf:8e:
57:8d:4e:9b:75:2f:59:ff:4a:c8:cd:28:63:04:d8:
05:5d:84:09:09:9b:51:32:49:92:fa:1e:f8:e2:a1:
16:29:05:f7:42:7f:d2:99:08:c3:d7:c6:e0:87:c3:
34:9b:65:6e:2f:ed:54:1c:06:16:59:c4:3b:d1:d6:
2e:e0:ee:3d:d9:c2:e7:cd:84:8e:a9:f9:f7:3c:ea:
9a:2a:86:ee:da:fa:97:6f:20:71:e6:3d:e1:38:58:
8b:ed:44:cd:26:f2:36:30:88:65:5e:12:58:4d:89:
e0:d1:e2:df:d4:b9:0a:5b:e5:b3:d8:69:1b:62:3f:
d7:0b:b3:f0:0f:c2:05:f7:49:e3:53:e7:4a:01:74:
02:22:db:5a:d9:7b:ed:aa:1e:13:41:a4:9a:15:38:
99:49:99:4e:67:04:83:6a:f0:a6:6a:fa:22:6c:42:
34:b2:b9:dc:f1:94:5c:0b:7c:1c:4f:36:bb:e3:e6:
3f:2a:12:b8:8b:2c:8d:88:41:94:7c:17:00:c3:74:
00:fb:bd:63:bf:b8:4d:d9:6c:67:74:65:17:88:07:
6a:b3:58:12:3c:45:a9:b2:f6:99:3f:63:4a:e2:89:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:D8:3F:6A:08:DD:19:FD:EA:69:48:60:31:C9:58:E9:B2:A3:49
X509v3 Authority Key Identifier:
keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:b2:55:f2:9a:a3:fe:99:9b:77:19:9a:3b:a5:f2:a7:e2:
32:ba:23:9f:aa:1f:b8:94:d0:32:72:94:48:f4:46:06:d7:66:
f5:8a:e4:20:91:2f:9b:e7:30:9e:a0:95:db:27:28:89:1f:81:
e1:93:ef:7d:24:c0:2c:62:a8:7b:bb:6d:9f:15:3c:c2:15:4b:
8d:50:3c:9e:59:5e:0a:1d:96:a2:2a:5a:a6:85:6e:6e:06:73:
a3:1a:6d:a4:70:b2:57:a8:5b:83:bb:8e:a3:d2:75:77:c4:0e:
5e:88:0e:53:c2:83:7a:14:7f:2d:43:e1:83:59:32:d5:5d:82:
ba:5e:5f:b2:d0:cb:1f:83:d8:2e:b4:58:28:67:43:da:8c:7b:
b6:ca:33:5d:ed:f9:37:c9:06:77:7d:19:79:e8:2c:ae:c4:bd:
2d:1e:1d:6f:a1:5f:b7:11:ac:f3:83:2c:1f:33:39:e7:c1:77:
78:ec:7e:0e:da:16:86:47:76:49:f8:f7:5c:5f:61:7f:59:ad:
1a:40:96:7e:df:48:55:6e:56:1a:a8:2f:12:24:71:f8:90:7d:
6e:f6:fd:41:05:ab:68:07:c5:58:1f:75:a9:b4:11:35:4c:2b:
36:f1:29:63:d3:22:22:9e:c9:0e:92:de:bc:4d:fd:2c:aa:e9:
a0:be:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:04 2025 by rpki-client