Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File: 6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier: jSYLshFDUQtvoN5sr82gAi7K/m9/nREwZJ5hhp6/JCY=
Subject key identifier: C2:30:64:2E:AF:7C:A9:A3:B1:8D:6F:58:D0:64:8E:C3:07:F6:C4:71
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0199315AD5E35F6AC5DB42ED31A3E51CB4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number: 145D
Signing time: Wed 10 Sep 2025 02:01:00 +0000
Manifest this update: Wed 10 Sep 2025 02:01:00 +0000
Manifest next update: Thu 11 Sep 2025 02:01:00 +0000
Files and hashes: 1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: PPDZKI47oAQFkD1GlDEz/5zDBD87bXIqPbAM6BeISYI=)
3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:d5:e3:5f:6a:c5:db:42:ed:31:a3:e5:1c:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Sep 10 02:01:00 2025 GMT
Not After : Sep 11 02:01:00 2025 GMT
Subject: CN=c230642eaf7ca9a3b18d6f58d0648ec307f6c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:30:8b:b3:60:e3:3a:f5:44:59:c9:1a:10:
c7:fb:e4:85:34:92:19:b0:de:c5:a3:61:47:84:45:
d0:3d:69:d6:ea:aa:8e:32:d4:25:a5:87:95:42:27:
eb:2f:77:b3:36:f4:6f:86:98:09:85:6a:c3:40:f1:
58:f7:1f:97:46:e5:55:b6:78:f1:4d:d5:ef:07:df:
b8:b0:10:d2:e5:5b:89:e1:93:66:51:53:20:03:e2:
82:91:b3:9f:7a:97:66:fe:60:d4:ab:7a:b7:0d:17:
39:41:47:1a:29:00:e2:bd:61:d7:d0:64:3f:74:c8:
1b:2a:9b:2c:ef:a7:51:0d:6e:09:6d:70:01:2a:66:
13:72:23:e4:13:14:2b:31:f3:1c:79:4d:60:56:54:
03:98:57:f3:b3:5b:e3:72:97:27:eb:47:f0:1d:bd:
4a:e5:b4:50:a6:03:a1:9e:b2:ef:46:13:a0:91:91:
da:0f:a4:52:d8:99:2e:fc:dc:e2:7c:d0:c3:7a:0b:
9b:e6:bd:82:be:0f:f1:65:9a:f2:f2:19:81:35:3f:
22:2c:7f:b0:a4:f0:b2:ce:87:47:14:07:35:37:58:
43:82:85:24:3f:e5:c5:89:f2:5b:30:2b:26:72:4e:
a7:ee:7c:98:85:93:89:97:23:6f:a5:fe:e7:61:17:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:64:2E:AF:7C:A9:A3:B1:8D:6F:58:D0:64:8E:C3:07:F6:C4:71
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:d2:94:22:76:2f:dd:f5:6b:a6:71:4e:b5:33:75:e1:c4:
a7:c2:5f:7f:98:68:c7:a0:bd:52:28:c7:88:25:93:11:61:a6:
21:8a:05:99:49:07:af:55:16:54:69:20:40:df:60:43:e7:df:
5b:a7:2a:fe:76:16:bc:c5:4f:0a:bb:98:c2:83:1c:23:43:94:
e7:59:a5:aa:70:8f:96:46:a9:92:c8:e8:36:19:0c:00:84:fb:
93:6d:4a:ab:4a:47:e6:c2:66:a8:be:5a:c8:4f:c8:45:59:b5:
04:01:59:4b:2a:51:ca:fb:aa:7d:22:d8:e3:60:ee:c5:65:61:
37:d4:58:f4:c7:7f:c8:5d:24:65:be:91:50:81:bb:b0:7f:2f:
a4:c7:37:dc:71:00:ca:f8:0d:62:6e:92:9b:00:76:50:01:8e:
40:67:bf:71:8c:ec:8e:4f:4c:e9:59:87:5f:2c:3f:13:ce:9c:
19:5e:54:c1:c9:a6:f1:ed:7a:8b:cd:c6:0c:a9:c4:b3:d4:2b:
1a:0f:ac:17:24:7d:5d:0e:41:d8:73:5a:ca:1e:7e:02:29:f3:
a1:d7:00:32:2f:27:a8:b5:ff:79:0e:04:25:f5:18:0d:bc:1b:
81:06:93:9f:95:97:42:5e:ef:ee:bf:23:7d:e1:d5:ea:e2:3a:
82:02:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:23:21 2025 by rpki-client