Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: o6iwb0vXkWRyGbBfez6ykp4wZ/dpJw1iWNc5wJ1avTQ=
Subject key identifier: 0B:32:4F:E6:42:7E:71:DC:A1:0F:FA:B1:09:9B:CD:E5:07:2B:8D:65
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019933122C88EDD3BBC701F8B4D146FD2FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0983
Signing time: Wed 10 Sep 2025 10:00:52 +0000
Manifest this update: Wed 10 Sep 2025 10:00:52 +0000
Manifest next update: Thu 11 Sep 2025 10:00:52 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: sKlk8YbBgLtZnwtsR1dQwVJzGtYe/jrlpEbfEDeGaec=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:2c:88:ed:d3:bb:c7:01:f8:b4:d1:46:fd:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Sep 10 10:00:52 2025 GMT
Not After : Sep 11 10:00:52 2025 GMT
Subject: CN=0b324fe6427e71dca10ffab1099bcde5072b8d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:77:57:63:0f:17:2c:8d:c1:18:dc:e5:e3:
83:c3:95:06:47:fc:45:cc:dc:54:b4:1a:41:90:11:
72:47:84:91:f3:06:69:ec:94:11:8c:0d:5e:9a:28:
4d:9b:41:65:91:8d:3c:d7:e3:a7:94:f5:67:3e:9e:
4d:c6:86:8a:48:03:b0:77:43:2b:3c:39:8d:73:5b:
6d:59:9b:c0:a3:2e:e1:79:f3:94:58:29:15:12:2b:
e6:20:40:1c:52:4b:b6:16:a2:5e:a9:07:93:0e:5d:
3b:e3:20:d1:78:11:21:b7:ec:23:3f:66:0c:29:83:
61:98:ce:43:a3:44:9e:78:0a:1d:41:20:98:67:f3:
26:1c:2b:1d:89:af:91:db:92:82:55:76:08:1f:a0:
c8:22:e3:9d:04:7e:63:9b:dd:6c:7b:c4:37:2d:d3:
06:67:fb:57:dc:de:c8:c2:37:fb:8c:71:a7:c4:09:
8d:91:63:4e:a8:a2:7f:1a:f7:36:96:88:b6:92:d1:
1b:7e:ee:4e:71:ed:88:4a:f3:47:a3:83:8f:be:c4:
f9:b8:4b:da:d5:a3:94:15:31:49:4c:e0:b3:e7:67:
4d:f7:0e:08:1a:ef:dc:5d:5d:cc:d6:3d:48:8e:1b:
4c:58:ea:dc:ee:aa:ce:b0:67:a3:ed:cc:38:64:01:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:4F:E6:42:7E:71:DC:A1:0F:FA:B1:09:9B:CD:E5:07:2B:8D:65
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fd:d4:c7:71:2a:36:1e:5e:cd:0b:94:4e:6a:c2:ea:e9:80:
47:e1:e5:70:6d:6c:27:8e:17:1f:ab:ea:9a:36:69:dc:90:34:
a7:a3:58:6b:20:22:de:0b:72:43:84:3a:fe:9c:90:09:c3:af:
00:a7:93:94:63:78:22:ee:71:27:7e:95:ca:c9:94:17:e7:6e:
26:3f:29:a8:19:77:00:bc:79:ad:21:5e:62:c9:49:df:ea:08:
1a:5d:9f:48:49:c3:03:f3:73:43:78:57:70:b7:cb:91:08:f5:
96:a7:77:cc:5e:ed:cc:a5:c5:31:aa:5a:7a:e3:b0:46:47:86:
37:7b:ad:4b:83:fd:79:7e:85:8d:28:31:d4:a9:48:46:48:13:
ab:8a:1b:f3:81:52:5e:44:91:39:a6:3c:2b:58:1a:2b:68:35:
d4:c9:5d:61:ba:39:3b:47:d1:16:8a:a5:9b:9a:2d:40:f0:8a:
dd:bc:b4:bd:8b:1d:12:dc:b6:1e:3f:6c:36:b8:b8:15:4c:dc:
d1:23:f9:60:6d:a9:b9:90:11:12:38:d0:d6:61:61:8a:a7:cb:
fd:84:79:ed:ad:63:8d:08:2c:71:c9:f7:42:35:b9:04:3a:99:
19:64:8e:d6:61:a5:a5:7b:32:28:a5:87:10:97:4e:f2:b2:bb:
95:ea:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:11:04 2025 by rpki-client