Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: 57gv9zCo/AYJ+GE+lUSJnf2Vn0WGfy3Kv7TEPUA3qCs=
Subject key identifier: D8:31:61:BB:E9:C2:AC:E8:21:93:BD:D5:95:33:F0:AE:FF:B1:49:12
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 0198C6B67B3498C213854849AEF6588E027F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0CA8
Signing time: Wed 20 Aug 2025 09:01:44 +0000
Manifest this update: Wed 20 Aug 2025 09:01:44 +0000
Manifest next update: Thu 21 Aug 2025 09:01:44 +0000
Files and hashes: 1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: nVdsqsrmRN0awQd5Kdl5vBfM2VKW/mqECzKusjGQllE=)
2: U9_szKR8srbhSHiXME0hISvB9zk.roa (hash: Zqb60PKOf5F6hXcN+4+/4uUqXILXd/JHdWXXHL4XlcM=)
3: UHt5Ue5EHvA2-W-Xmt-sxStGQG0.roa (hash: 2fRtxNUH3Aca8LFhSmKgwKn175stfHslO6K/ewoks+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:b6:7b:34:98:c2:13:85:48:49:ae:f6:58:8e:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Aug 20 09:01:44 2025 GMT
Not After : Aug 21 09:01:44 2025 GMT
Subject: CN=d83161bbe9c2ace82193bdd59533f0aeffb14912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:03:4f:39:80:31:7e:e2:7d:d7:2e:13:c1:
ea:00:2b:03:67:d1:fb:57:41:56:e9:d4:5e:3c:34:
8c:35:4a:6d:29:cc:b5:2a:7a:0d:d5:5b:ef:d6:0d:
49:a6:3e:34:b0:a3:a3:ec:72:a0:59:a4:63:08:c1:
fb:14:6a:ec:5b:c7:9c:b2:03:04:f1:62:aa:8b:7b:
3f:88:1a:70:f8:f9:66:f4:b9:0e:ad:02:90:1e:ca:
db:fe:1b:44:e1:1d:19:68:7f:c6:ad:e0:d0:22:fa:
f7:5c:67:9f:16:23:52:11:a7:28:4a:a0:49:63:c8:
23:6d:be:f1:8b:dd:83:90:88:45:b0:73:09:ec:f2:
80:42:74:13:ce:e0:02:ff:0c:17:f4:65:4b:b8:f5:
6f:cc:cc:05:08:9c:49:21:e4:28:ec:bf:89:98:99:
8e:16:31:30:83:81:b7:85:b1:24:c8:8b:10:ee:86:
0b:d7:25:fd:6e:e8:7b:f1:f2:e6:e4:78:f5:48:0f:
36:ae:76:dc:d0:3a:a0:7f:55:00:34:5b:f7:9d:c0:
29:ec:b4:2a:ed:5c:d7:e3:ea:be:48:be:89:68:5c:
ab:fb:b1:fd:61:94:c9:76:7f:b2:1c:71:75:28:c1:
00:de:05:7c:45:c2:d8:c3:af:5c:0a:14:23:f2:75:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:61:BB:E9:C2:AC:E8:21:93:BD:D5:95:33:F0:AE:FF:B1:49:12
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:9a:6b:c1:4a:c6:4b:1a:e6:85:c0:c0:00:f8:bb:b6:74:
36:bd:df:91:75:f6:87:49:c0:16:de:89:f2:a5:24:60:64:69:
33:66:85:5d:83:63:c4:79:d3:e3:74:4d:59:db:c9:f5:c9:08:
ab:20:52:0a:4f:59:08:a6:99:2b:16:a6:95:b3:0a:e4:99:07:
b3:f5:1e:48:db:32:1c:23:98:8c:6f:9b:3c:bb:1c:a8:03:41:
20:e6:e6:58:fc:22:30:ba:2d:5f:b0:95:e0:59:67:d7:8d:4b:
8d:17:12:b9:88:b7:f1:b5:14:a7:b7:dd:aa:85:36:93:d2:85:
65:e4:00:26:16:aa:e4:88:e5:74:cb:dc:78:00:c6:34:f3:4d:
55:5d:d1:89:56:46:70:de:39:d0:bd:97:13:10:c2:97:9c:12:
b7:c8:52:46:75:23:46:1d:21:69:b6:90:4f:7c:72:e1:e6:12:
35:37:33:76:bf:1a:7f:fd:34:ef:d1:93:9a:ce:87:b5:c0:d6:
75:03:10:d3:85:9e:78:14:91:3b:61:58:23:b4:c3:19:fe:26:
6a:e5:ff:33:6c:e4:f3:92:8e:b5:51:bb:8f:e2:f1:13:ea:ae:
e0:6d:0a:e2:76:c3:f8:7e:ea:3a:e6:ed:7e:72:e3:20:05:38:
38:66:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:31 2025 by rpki-client