Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: KJqBq5wSQ4jKbSfB7ki3sjst8T6HjkxlcuPl+OG4QK4=
Subject key identifier: AF:27:B0:5C:D9:C7:64:63:D4:8C:03:F1:33:16:F8:F1:5E:22:BF:CC
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0198D4A830EBA623A33D5826B89B560302D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 059A
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: nTFm4BTzmDHZKRV5EocdRA1rMRbqJz0a2zJFchMQb84=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:30:eb:a6:23:a3:3d:58:26:b8:9b:56:03:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=af27b05cd9c76463d48c03f13316f8f15e22bfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:5c:2e:3e:ef:17:30:4a:32:3f:8d:47:84:
10:6c:49:f7:e1:ef:4f:08:db:0c:f0:22:ac:85:ce:
72:d8:72:07:59:50:d8:d4:cc:26:28:d9:90:25:db:
b2:05:78:ad:db:0e:31:5c:54:cd:b6:45:ca:be:5b:
96:82:21:d7:1b:ff:dd:fc:cb:8d:5d:78:18:eb:b0:
7b:cf:e8:ee:d3:21:82:36:e1:ac:72:69:33:de:ad:
90:18:18:7b:d2:99:ac:e8:41:b0:4a:a6:6d:ba:67:
3a:ee:b8:26:b0:4f:f9:41:64:6d:6f:0f:b5:fa:ec:
a8:14:3e:2b:ac:f1:f3:b5:2e:47:b9:eb:6f:66:d5:
5f:1f:e2:10:f6:05:19:ce:f6:11:3a:b9:41:19:8c:
7b:25:d6:67:6e:6b:e5:50:f4:27:17:8e:46:a5:37:
ef:51:26:3e:d7:d7:6d:7e:93:14:7d:ae:c2:70:c5:
3d:db:27:5c:ea:f2:46:fe:c9:d4:89:a5:26:d8:fb:
9b:d5:28:ee:3f:69:c0:d7:4f:db:b7:11:ff:19:95:
11:d5:19:0a:f9:3b:ae:72:f5:79:e1:32:98:08:38:
3e:b2:60:e9:58:69:2c:86:5a:ca:65:d0:44:eb:67:
8b:83:6f:48:79:c7:34:c1:d8:5f:b8:e0:9d:98:ee:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:B0:5C:D9:C7:64:63:D4:8C:03:F1:33:16:F8:F1:5E:22:BF:CC
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:35:0d:02:0d:a3:6f:e5:2a:ac:67:02:cd:28:c8:44:fe:1f:
5e:1d:1f:2c:aa:61:8e:1b:db:20:35:8e:37:96:ee:8e:84:aa:
9a:1c:85:ef:f0:b7:82:92:69:b8:fb:72:c0:30:32:c0:c3:ed:
33:4a:01:e1:fe:7e:80:12:3c:42:b9:26:74:2c:0b:77:49:31:
85:c0:03:e3:6d:58:2b:ab:88:6d:ec:4c:fa:b8:a9:fc:94:aa:
27:e6:56:f5:d5:40:aa:07:45:a3:8d:80:eb:87:3f:41:79:36:
40:6d:87:15:51:34:43:74:59:6c:af:62:d7:e3:94:65:7b:d7:
b7:6d:81:26:68:44:37:4d:bf:04:bf:6d:9d:c0:3a:13:3b:ac:
90:00:c2:7d:e7:e1:9a:ce:9f:8b:f6:77:29:24:34:89:45:09:
f3:db:8e:b5:5b:8f:f5:ec:25:73:79:7f:4e:fe:ee:61:dc:e6:
c2:e6:bd:f2:75:de:4f:e0:64:fe:cc:b7:9f:18:9c:36:b7:bd:
d4:33:e2:4f:45:1f:56:68:4a:56:ae:ee:77:77:af:7f:1c:01:
37:ad:75:c8:29:c6:9a:55:2d:42:4d:c6:fe:41:cc:0c:1d:23:
a9:71:d1:73:99:f9:ad:10:51:5e:36:ca:7d:e6:0b:75:30:8e:
29:f0:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:57 2025 by rpki-client