Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: Dcxy80RLRPi0rVDxvqTJbmdMpFD/CTKY24BA0gnQyIE=
Subject key identifier: F2:48:4E:B9:6F:8E:05:1F:BB:49:AA:A6:CA:13:D5:AA:9F:68:65:46
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0198D66084BFEA619C40D5837AF247C79589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: BOb8cxZgQvvmumeGnnWvpdL8fC8h5gUJ8PA8HWwXYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:84:bf:ea:61:9c:40:d5:83:7a:f2:47:c7:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=f2484eb96f8e051fbb49aaa6ca13d5aa9f686546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:34:ac:47:f4:30:b0:13:13:58:e5:df:1d:
71:19:2e:0d:37:6f:a5:e0:0c:81:23:21:a4:f0:71:
60:98:7a:d6:2e:d7:ad:a1:9d:26:05:11:92:19:bc:
25:67:eb:b2:04:39:6d:70:28:8a:77:93:35:e7:e1:
72:f8:2b:aa:fc:00:c5:46:de:a2:54:d1:b0:53:cc:
da:84:c8:c4:80:40:44:4b:75:72:5f:0e:3a:9c:1e:
b1:e6:7b:49:c7:31:72:41:9e:93:57:df:d9:0b:fa:
2b:79:e8:d7:1e:80:64:11:79:8f:3a:51:47:20:e7:
d1:2b:fc:b7:dc:9d:e3:83:c8:96:10:5f:2a:c3:dc:
b5:30:7a:fc:8f:38:31:bc:1c:33:9c:9c:a4:60:12:
83:cc:a8:dc:35:48:1d:7b:09:97:61:65:50:94:4b:
29:bc:3b:50:28:b0:aa:7a:b5:61:85:c7:ff:db:1f:
54:59:1b:ba:49:88:5e:50:66:bd:f7:9d:6c:21:ff:
f9:46:04:50:0e:3c:9a:a3:36:3c:d3:ff:06:ed:8c:
ac:19:f0:9f:a8:88:64:8a:64:15:34:a5:46:87:5c:
77:a9:d1:8a:53:bd:d4:2c:8a:2a:59:d0:88:5e:c6:
07:28:b7:b5:22:12:d2:fe:07:a3:45:cb:00:57:b3:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:48:4E:B9:6F:8E:05:1F:BB:49:AA:A6:CA:13:D5:AA:9F:68:65:46
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:3b:73:1a:0c:ea:b4:ca:2a:31:ab:ad:74:ef:e5:be:f9:
6e:c0:99:37:59:73:b8:6c:e0:91:c5:98:96:21:42:49:ae:fe:
bd:61:e1:1a:69:c7:a9:5d:13:fa:9c:b1:34:28:d2:7c:dd:4d:
86:34:e7:89:de:6e:cd:45:59:b6:89:c3:85:7c:1c:3e:b9:5d:
f9:5f:e5:3f:12:1e:98:5f:3c:ad:e8:6e:b9:58:a7:4a:81:c1:
c3:5e:0e:22:dc:17:40:af:cf:4a:a3:47:71:c1:cb:01:64:d1:
1c:fd:0a:da:af:49:17:b2:3a:b3:0f:00:0c:a0:c2:9f:98:bd:
32:fd:7f:6f:b3:67:c7:d0:d1:f4:28:58:73:c0:3c:f4:30:74:
0e:15:da:07:a9:44:d0:a9:6b:96:f6:6c:74:ca:61:a3:e0:9f:
41:62:5c:92:76:88:ea:06:e2:20:7b:e0:cd:18:ca:36:fe:dd:
ed:38:70:54:6a:f7:f4:cd:6a:63:33:1e:5a:57:f9:f7:84:c8:
57:bb:67:5b:d7:4f:75:ec:fa:c1:8b:97:69:b9:fe:de:e8:00:
0f:00:2d:82:89:e2:98:98:0d:0b:a4:cc:e1:89:68:ce:4a:e6:
8f:02:82:ca:dd:30:aa:50:48:fc:fb:a0:03:53:5a:71:70:e0:
2c:bf:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:19 2025 by rpki-client