Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: AokQDphxefwDOy6ckHM26rpEZlsOn0tzSmFpZqFXbLE=
Subject key identifier: A3:B7:0E:89:6C:4D:48:5D:85:7F:D6:4A:E9:61:A1:94:63:5F:02:99
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 01993680C4309D342E5A5B7F7B08F8551F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 0407
Signing time: Thu 11 Sep 2025 02:00:32 +0000
Manifest this update: Thu 11 Sep 2025 02:00:32 +0000
Manifest next update: Fri 12 Sep 2025 02:00:32 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: 8tjZbTtQQ/v2kkxeZkdM+BrSmhnWazPdvmjSmF5N0dA=)
2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:c4:30:9d:34:2e:5a:5b:7f:7b:08:f8:55:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Sep 11 02:00:32 2025 GMT
Not After : Sep 12 02:00:32 2025 GMT
Subject: CN=a3b70e896c4d485d857fd64ae961a194635f0299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:69:18:bc:61:f5:2c:1c:70:4a:b3:dc:55:
ff:d5:44:be:41:67:8d:86:34:7e:ee:69:e2:6a:53:
61:85:8e:ce:ad:b2:06:8b:c2:d3:c1:d9:d8:a4:8b:
ef:df:ed:db:22:30:e5:79:30:36:79:0b:3a:f9:86:
f6:d9:83:ae:7e:c1:bd:a0:42:27:46:95:3f:18:6d:
8f:16:3b:5c:1e:2b:ac:cb:3f:d8:2b:33:a7:91:86:
ad:54:7f:81:b8:d2:1b:83:bb:ce:8b:9b:40:cf:c9:
cf:28:c6:7c:f4:bc:0c:a3:0d:ae:c5:f2:f6:7f:70:
4b:8d:c9:ee:54:8f:c5:3d:c7:57:46:28:26:c3:2e:
c8:b9:ba:70:fe:7a:17:b8:bb:99:9e:86:c1:e0:e7:
83:48:39:94:32:51:d9:23:fd:d8:3c:5b:8e:95:f1:
5c:76:11:f3:cc:2a:71:ee:71:09:cc:9e:cd:85:3d:
b3:24:76:6c:f4:41:db:51:94:27:5d:64:69:e5:57:
c7:6c:f8:4c:44:ed:2c:6a:a1:c2:3e:e1:87:a1:19:
6b:54:e0:e8:f4:38:a1:bc:91:6a:6e:fa:95:64:44:
75:b2:7e:89:f2:28:ba:50:d3:5f:ac:f5:97:f6:c7:
33:61:e5:be:d1:9f:87:12:1b:72:49:90:7f:eb:f1:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B7:0E:89:6C:4D:48:5D:85:7F:D6:4A:E9:61:A1:94:63:5F:02:99
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:1a:de:44:1e:04:67:fe:d3:78:a1:c2:f8:b1:0f:7a:c1:
ea:5a:48:73:89:00:77:b5:7b:55:30:6f:b9:d6:9e:d6:52:b4:
0a:4d:69:3a:73:1b:cc:84:55:ee:fe:ac:81:04:53:3c:21:2c:
5c:a1:e1:8f:3e:e3:18:02:97:cc:e5:07:d9:b9:df:66:47:ba:
3a:ef:6e:ec:57:39:d9:a9:d1:88:c8:36:07:97:d3:5c:a9:1a:
56:0c:df:17:3d:97:b9:38:8f:32:5c:0a:2f:b7:30:7c:3f:91:
3c:6d:43:98:1c:7d:63:ae:3b:b2:2a:29:0a:fd:b8:fc:50:32:
a8:5a:24:90:bf:05:7d:18:62:7f:be:ef:72:6a:ae:48:6d:5f:
26:ff:a4:bf:65:a4:63:e3:6b:c0:68:73:c2:57:a2:0b:67:e7:
70:51:4e:9c:e8:8b:1b:6e:19:c2:57:fc:96:88:a7:3b:6e:de:
77:fc:23:7d:09:5a:5f:38:21:4a:94:00:fb:33:06:ed:17:55:
c4:98:ad:af:4c:7d:f8:dc:41:d6:20:91:58:3a:f9:c0:9f:59:
fb:14:d9:7e:5b:c4:04:21:37:38:82:a4:4b:f3:0b:ce:bb:61:
62:3c:22:97:de:1a:cc:a3:d9:3b:ae:08:b2:66:fe:6b:ef:cc:
cc:e2:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:04:11 2025 by rpki-client