Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File: 6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier: 7WUVrxcYH25wlnIPPDbwscF2q5+MQuTD/5Mp+Tr3pU4=
Subject key identifier: 95:C1:1A:8D:5B:07:41:C0:FA:F9:3D:E9:D1:05:25:54:26:55:FD:06
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer: /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial: 0198D65FE64ED8FB66878787B2818B60FCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number: 0299
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: QmjDnKa77zM3+V3EJTPryRtma6UmeDrB8mPAPBR31W0=)
2: GxL8fwk7MmwPNTtCp-ZrLwDGehU.roa (hash: lyYJo+TOxOK6xLDSZatPtZ0yRjTCazkuCS6AXT1948U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e6:4e:d8:fb:66:87:87:87:b2:81:8b:60:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=95c11a8d5b0741c0faf93de9d10525542655fd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:8e:62:0a:4f:90:c3:6b:a6:c9:ac:d1:98:
bb:12:c7:e5:69:54:58:fa:25:f1:b9:4b:8f:5d:02:
b4:33:af:ce:2b:af:b2:e1:e5:d6:88:a6:ba:f2:f1:
48:37:ad:3d:96:11:59:0d:e9:af:ee:a4:af:e6:92:
f9:93:eb:8a:a2:1b:15:eb:58:54:5d:83:22:38:03:
09:8f:71:9d:fc:f7:12:27:34:67:26:22:5f:7e:36:
c5:8a:26:a3:ca:8f:66:ce:d7:99:32:d4:60:d0:68:
40:bd:de:2e:bd:c0:b6:74:a9:b8:09:98:c2:6d:2f:
67:89:16:07:e6:4e:17:b4:97:c0:ea:dd:d2:8a:60:
d0:09:8d:1a:01:7f:9f:6e:2b:80:67:90:94:9a:12:
4c:3f:74:0f:2f:73:97:8b:b2:3c:6d:2e:4d:d4:0c:
eb:82:c6:5d:35:38:7c:7b:aa:ad:5b:d2:d9:b6:b2:
13:f6:3f:26:06:9e:88:9d:b4:e5:57:20:74:bb:01:
95:d0:aa:00:63:a1:01:91:20:68:2f:75:59:7f:fc:
15:ec:5f:df:11:93:8c:57:bc:8e:97:e5:73:3b:5a:
9a:1f:49:80:18:f5:f7:d5:9b:54:30:c6:fb:f9:7c:
5f:b8:dc:fe:82:08:a0:40:cb:4f:a8:81:59:61:a5:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:1A:8D:5B:07:41:C0:FA:F9:3D:E9:D1:05:25:54:26:55:FD:06
X509v3 Authority Key Identifier:
keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:bd:9e:15:c1:23:cc:6a:fd:77:90:29:45:e6:94:35:df:
22:a6:e7:75:92:b1:22:cb:e3:a5:b8:04:ea:cc:ef:80:40:5c:
4d:26:b3:ec:66:0d:b2:02:79:b0:0b:99:5b:bc:3b:52:e7:b1:
d7:8d:8c:be:5a:4a:af:96:1c:c9:eb:e9:77:ae:d0:ec:03:53:
cb:5d:c4:78:e1:48:4c:e4:9f:f9:44:c5:a6:cd:6a:01:98:4a:
f2:fc:dc:ee:3c:9c:55:db:0e:1f:60:be:87:f2:1d:00:89:e4:
ab:2d:26:c1:8a:72:c8:50:c3:ba:a3:6f:2a:60:14:62:82:a6:
fe:9f:d7:a8:3c:19:4a:05:b1:3b:15:ef:68:6a:3b:38:44:9f:
00:8f:36:71:23:41:bd:30:7a:44:95:bb:4f:e3:25:2b:80:3b:
71:4b:0e:b9:a9:90:3a:a3:59:5a:5f:b7:79:cf:57:b4:59:5b:
e9:b2:e4:6f:98:d4:bc:50:cc:97:9d:e6:64:f8:fd:35:f8:02:
b8:eb:aa:ec:b5:2c:4e:8b:f8:08:09:0b:d2:bd:09:2b:f7:3b:
04:82:0a:84:eb:a0:2c:a7:12:d3:02:bd:33:19:13:6b:7f:5a:
57:dd:be:d2:de:55:2f:e1:12:84:67:12:cc:cf:f5:e8:a1:4f:
8e:0f:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:50 2025 by rpki-client