Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: VZLLML+7F6G0WAWY2jsMatx+LpidsyDZd7dcxX2Htas=
Subject key identifier: 21:7D:77:00:C4:C5:06:F4:53:0B:8E:29:38:64:C7:28:3F:F1:14:B7
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 0198D5F1D8E3E99813D345FA45F8AD6A49BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0B02
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: YEzgvM5uWlrFY3i01gZ9al7q6sOuzFoPGqcMMLLX7BU=)
2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d8:e3:e9:98:13:d3:45:fa:45:f8:ad:6a:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=217d7700c4c506f4530b8e293864c7283ff114b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:d1:38:f8:80:02:f1:1c:f5:1e:68:3a:9f:
c2:28:1d:e3:1b:fe:b1:a6:12:da:54:88:a0:4f:9c:
17:ce:ca:07:b6:8f:2d:d9:bf:b1:9a:c6:5b:ab:7d:
5b:e0:2c:5a:23:f9:c5:77:34:a0:80:84:23:c0:0e:
a8:e3:90:51:ff:52:28:e3:7a:84:96:df:a9:1d:0a:
f5:f8:bc:62:24:a6:b0:e7:87:52:5b:ae:fe:80:69:
52:fb:ae:20:b3:f3:db:49:52:19:a5:84:5a:fa:4e:
46:4b:db:05:c9:7a:31:ee:ef:4e:1b:36:7c:4e:f2:
17:07:cb:bb:92:60:27:86:96:e0:39:50:0b:44:78:
ed:7a:84:0d:50:27:1c:ca:3a:fc:98:f1:87:42:f1:
7e:90:09:df:e9:b0:7c:a2:3b:84:11:c7:a9:c8:d7:
9c:7a:d2:ad:cf:e5:7b:58:46:49:ab:8f:9e:7f:13:
81:03:55:52:fd:2e:c8:b3:36:3e:99:fe:9a:0c:f6:
86:71:1c:6f:53:21:24:02:57:34:0a:88:bb:92:4f:
6a:d5:21:9f:96:6f:3f:c8:eb:8d:af:c5:d3:74:26:
a5:63:12:2a:83:87:de:60:bd:1f:ca:80:74:b4:55:
64:5c:95:45:a9:c1:42:a6:25:49:54:15:4e:d4:89:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:77:00:C4:C5:06:F4:53:0B:8E:29:38:64:C7:28:3F:F1:14:B7
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:be:86:29:59:b4:81:a3:ec:0f:93:5a:c5:86:23:e4:e6:
86:f1:20:12:35:12:78:e2:74:21:b2:4b:7c:e7:f8:a8:1a:4e:
9e:a4:03:a7:c2:02:9b:a4:1e:66:c7:1c:44:59:c5:fd:60:6d:
a6:37:f2:b5:de:54:e6:5a:6c:b7:ca:5b:d9:39:fa:77:f6:fd:
16:df:9d:e7:a2:2d:f6:18:04:ad:78:ea:00:12:eb:76:2a:7d:
f5:d5:c0:62:62:e3:92:d8:36:17:13:71:87:d7:07:36:94:f6:
a9:d5:a0:de:18:06:8e:62:f6:af:e0:6c:9c:6b:7b:74:9b:cd:
e5:04:2c:7a:8e:9d:fb:8a:b6:17:b7:35:ca:d8:5b:63:81:70:
27:0b:0f:53:77:54:55:b2:aa:92:d8:d4:df:dc:ad:25:47:49:
19:31:28:8a:92:0b:a0:e8:1e:5f:16:cd:3b:89:be:42:1f:67:
f5:6d:eb:aa:63:47:55:1e:ad:3e:07:ff:1d:bf:7e:c5:c9:b9:
77:93:ac:be:0a:9d:c8:dd:c3:e5:b4:31:d0:3c:95:d1:07:f6:
2c:ab:cd:d6:d2:2f:1b:0c:87:df:75:9d:28:af:30:ae:06:5b:
ef:8f:bf:98:5a:11:13:63:44:32:c5:79:a8:41:c4:ff:1a:1b:
db:52:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:42 2025 by rpki-client