Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: qIWKUZgHF14v59qXZ3jRT5NjZynMbER0GlSEjNsNhIo=
Subject key identifier: 7C:0D:FF:B2:67:F6:35:23:A9:BC:F2:9E:EE:4C:4B:78:ED:C2:5E:D9
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 01993424D359B036616544B630A32611F50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 06A1
Signing time: Wed 10 Sep 2025 15:00:52 +0000
Manifest this update: Wed 10 Sep 2025 15:00:52 +0000
Manifest next update: Thu 11 Sep 2025 15:00:52 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: h7owyqGgTBquYY4bfY35NNhAncXsYAYQhYGCasg2VkM=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:d3:59:b0:36:61:65:44:b6:30:a3:26:11:f5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Sep 10 15:00:52 2025 GMT
Not After : Sep 11 15:00:52 2025 GMT
Subject: CN=7c0dffb267f63523a9bcf29eee4c4b78edc25ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:e2:eb:7e:b9:98:4a:77:62:02:5b:3b:96:
08:f3:06:66:a7:07:bc:f1:eb:7f:88:96:4e:ca:dc:
3d:63:05:fe:fc:7f:50:1d:fb:7e:07:c0:bb:81:6f:
4a:42:10:35:4f:55:3f:59:06:b3:72:65:2f:2c:34:
bd:d5:86:e1:c2:27:f1:61:7a:fd:ea:1f:c4:64:cb:
df:59:b5:01:43:ac:a3:9f:7a:27:0a:66:0c:42:9d:
6b:70:0d:39:41:e0:bf:e5:7a:c1:f1:64:ca:c7:e6:
cd:c1:22:b8:f4:a7:01:5f:30:35:aa:06:06:64:e6:
52:4d:cb:6a:e0:5b:25:d8:fd:7e:36:7d:7f:60:e5:
04:be:b8:8f:b8:83:ab:69:0e:a8:7f:b1:e9:da:dc:
60:68:6d:81:ec:61:86:75:75:b6:1e:32:eb:86:58:
19:89:fe:25:b3:39:87:be:67:07:de:22:36:45:f5:
7d:10:f1:23:ed:a6:3a:6c:1b:b8:24:0b:31:83:3b:
a5:8d:69:df:47:68:ba:d5:0a:39:bf:36:56:24:9c:
16:96:8b:95:9f:2e:8c:82:c8:1a:f7:e0:68:14:2b:
d6:e0:b2:27:a4:3b:e4:30:16:0f:7d:56:2c:24:ff:
c0:10:2e:7c:09:17:a2:95:90:26:ad:29:aa:c6:5b:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:FF:B2:67:F6:35:23:A9:BC:F2:9E:EE:4C:4B:78:ED:C2:5E:D9
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:2b:84:95:82:74:a1:ec:f3:a7:1a:b7:7f:e9:9a:3c:5f:
8c:3a:51:bd:f7:15:40:63:21:8f:2a:53:fc:e7:73:27:21:4e:
0e:1a:11:d8:14:20:f6:4e:b7:d3:82:bd:4c:4d:8f:96:46:01:
f3:78:6f:14:8d:a5:1e:44:f8:cc:0e:54:90:e9:01:ca:8c:9c:
0a:88:fe:ed:09:fe:07:83:82:4f:86:c4:db:4b:17:76:17:50:
4f:88:74:9e:bc:1a:bf:c7:11:e0:3e:96:a4:1d:5d:73:f5:70:
ae:25:72:23:97:68:29:bd:58:e6:b8:4f:14:2e:aa:d6:c1:92:
ad:9c:7c:3f:99:63:09:54:5f:fc:70:6a:43:be:39:f9:cc:6d:
ad:08:f3:73:33:cd:05:42:df:9c:dd:6c:d2:c3:e6:27:77:92:
dc:f3:7a:20:74:c9:f0:3d:a6:46:d7:31:b5:15:74:1e:94:73:
e2:f5:18:19:15:9e:6f:f2:88:49:be:ac:e3:e7:d0:b8:85:64:
c5:2f:62:c9:1a:ca:75:e9:f8:95:d6:f6:98:e7:75:34:41:36:
e7:bc:dc:3c:ca:35:97:64:57:c3:8c:de:61:40:1e:21:e4:9f:
8a:f8:1e:13:f9:65:73:e6:f1:52:08:7e:9c:00:56:76:7d:96:
e2:b9:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:14:54 2025 by rpki-client