Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: vnRR4FEfRPkKxj/ts+o9uAhYo9t88jFgq2UMjj5OXBg=
Subject key identifier: 9D:75:DC:6E:AA:F7:4A:DB:EE:BA:61:23:F8:9B:53:A0:DA:C4:70:1B
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 0198D6608A6B486D5B96FD73726704B07C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0747
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: DWBLjiTsdmd5lULCxHwSlfFjYh58PaDLL0eyRSacE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8a:6b:48:6d:5b:96:fd:73:72:67:04:b0:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=9d75dc6eaaf74adbeeba6123f89b53a0dac4701b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:53:75:00:a6:0c:a5:21:a7:ab:e5:af:fd:
f7:59:50:b8:90:3e:b8:c6:ca:d6:b4:ec:f5:d2:42:
08:b7:fb:45:34:ad:26:62:3c:fc:5b:af:16:99:9a:
48:fd:85:eb:28:39:12:d2:bd:d4:9a:75:ef:17:4e:
49:d7:91:7e:40:b3:b7:2f:2e:6f:3b:8c:1c:3a:d7:
17:57:55:5e:5e:ef:10:97:c6:4c:1d:fe:c6:a4:7e:
bf:ee:3e:3e:25:0d:49:d2:a8:49:15:86:5c:10:b3:
04:03:fb:65:8e:47:56:c6:24:f8:5b:b8:45:cc:14:
9c:3d:cf:b4:1a:c6:bf:1d:c8:d4:f9:40:dd:62:ed:
ad:c4:1f:56:6b:50:d9:19:9f:7c:09:1d:a2:97:7a:
9e:4d:09:98:64:3e:b6:0b:aa:e6:56:db:0b:e7:08:
a6:82:12:dd:f8:ef:27:e3:29:98:62:c1:61:1f:e2:
14:2f:fa:57:5e:dc:83:3f:16:71:6c:b6:2c:2c:62:
dc:46:2d:29:64:08:a4:3d:cd:57:99:b5:c3:e0:12:
87:fc:6e:79:ee:40:cd:f2:17:fa:9f:6d:25:2e:23:
c3:3d:8c:75:6b:da:d8:9c:26:7b:d3:bb:b3:c4:2e:
85:75:f6:fe:c5:f4:09:9e:85:ee:f7:ba:21:bf:54:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:DC:6E:AA:F7:4A:DB:EE:BA:61:23:F8:9B:53:A0:DA:C4:70:1B
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:14:8f:dd:86:d8:d9:d4:74:04:0c:42:19:f7:d5:f2:88:d5:
09:43:22:f8:fa:de:e2:f4:07:7e:4a:bd:41:4a:72:3d:66:1d:
a5:9b:6e:18:74:b1:a8:f9:5d:de:44:c8:24:d8:2b:95:35:b9:
b0:93:0e:7c:cf:6e:49:b9:c6:73:3c:61:6a:37:ad:53:24:8c:
e0:be:d4:c6:e2:dc:df:cd:08:ad:f1:03:f6:de:1a:cd:8d:dc:
69:ce:e5:7a:f0:7c:54:3b:d0:48:c5:2f:0c:16:ac:2c:01:af:
b1:4e:d0:53:bd:69:a1:a9:2c:aa:98:f5:b3:c8:fe:9e:bc:db:
37:18:6b:b7:88:30:d3:73:88:3b:f0:e6:e0:69:99:2c:02:f1:
72:b2:59:67:d8:c1:bf:69:5a:a4:99:ca:39:d8:01:5f:87:fe:
d8:c3:10:80:ef:89:c7:3f:83:8f:96:67:b1:78:9a:e4:b1:f4:
46:72:d7:a7:15:d1:4f:a5:4f:67:dd:96:5e:a6:7e:db:3b:0c:
b6:31:d3:b7:99:6b:d9:90:0b:a6:ca:13:41:0d:e9:b6:3f:86:
e9:6d:28:b4:e0:de:52:bf:83:a0:b3:a6:b0:51:b2:16:d0:cc:
f7:dd:38:09:3f:16:0b:63:3a:ad:bd:82:60:87:99:64:b3:96:
1c:01:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:18 2025 by rpki-client