Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: /AxAGVNuSunIGrNRzl8pB67RzxcR/YmZHUURh4K8nb0=
Subject key identifier: 8A:BE:40:AE:6B:A7:FD:50:8D:4B:F9:C4:50:11:DC:97:28:58:47:68
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 0197B70EDB216E35B3C02DF05D56874F774A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: LCJjMPwHRKGNUhHvid0pP68GGZn03fz3xFRJqCCgdfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:21:6e:35:b3:c0:2d:f0:5d:56:87:4f:77:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=8abe40ae6ba7fd508d4bf9c45011dc9728584768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:d0:ba:05:99:2c:12:63:58:19:28:09:c8:
79:6b:4f:b4:17:9b:16:aa:ea:8d:d0:68:2c:41:7c:
b1:e5:27:7e:26:0d:33:f3:5e:16:92:81:af:09:92:
86:6f:5e:68:11:8c:cc:4a:2c:dd:2b:38:dd:53:9c:
51:bc:e1:c7:28:6a:5b:f1:b4:85:63:a6:c4:ad:15:
9d:12:2d:ed:db:4e:64:22:e4:14:a7:69:25:02:6e:
47:b8:70:7c:91:d1:1f:17:0f:ae:16:fb:14:33:03:
94:d5:47:b9:05:73:3c:25:9f:78:4c:39:36:3e:c0:
2f:6b:bb:ba:94:57:32:a0:5c:8c:69:57:a2:a2:ec:
83:93:ea:96:93:5c:7d:7b:cf:d1:62:63:01:43:cc:
65:dd:c7:b3:9e:6f:a2:be:79:7d:ab:de:ab:ad:85:
e0:97:7e:04:f4:f6:be:ff:0b:4e:9e:f3:7e:e4:f7:
01:f7:37:b5:18:02:d4:97:ec:65:ec:4c:ba:41:fa:
9e:9b:e4:aa:73:c9:25:0c:41:13:2e:02:af:6b:5f:
55:b4:6b:d7:cb:e5:23:94:c0:9e:57:1e:47:9a:1f:
24:2d:3f:80:e6:5a:34:b4:42:c5:32:66:15:90:7d:
6c:d3:59:58:3d:3e:e3:a6:f9:52:10:2b:4a:a7:dd:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BE:40:AE:6B:A7:FD:50:8D:4B:F9:C4:50:11:DC:97:28:58:47:68
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f3:4c:3c:15:59:4f:d5:8b:70:d6:e7:48:d5:bf:fb:74:e7:
12:bb:61:bb:f4:20:c6:c0:68:0e:8b:97:03:22:1f:ea:b8:ee:
72:ee:43:7d:65:3b:17:d5:09:a4:e4:a9:70:0d:dc:e4:ec:14:
91:14:fc:f1:de:8e:fa:e1:17:bc:2c:f1:30:ec:e1:17:b2:0e:
54:8f:cb:6c:1c:32:9b:a4:40:5a:71:a0:ac:c0:3b:96:28:5b:
f3:86:83:04:20:9c:0f:6b:00:58:4f:4d:30:ea:b1:98:02:6f:
93:2d:a7:f6:ef:66:f3:d0:a7:1c:7b:24:01:ae:84:55:fc:97:
89:be:fe:88:bc:17:58:f1:80:34:fa:87:a9:20:4c:d6:63:4a:
a6:ea:d4:9c:cd:9e:b4:80:e8:62:fe:65:d9:3d:77:aa:b9:36:
ab:2b:ec:33:41:1f:91:80:d3:5f:8e:c1:49:10:b6:79:f5:35:
b4:b3:e1:51:77:3a:ea:66:ac:70:92:3b:87:5a:17:69:ec:4a:
c9:ad:a1:a8:39:64:e2:a5:13:7d:82:86:34:b7:04:56:f3:e9:
50:cd:3d:dd:ff:9f:f6:b7:3e:87:4e:e8:63:28:a9:01:a3:43:
62:7d:82:93:a3:52:11:b5:6f:7e:92:26:26:89:8a:9e:52:70:
73:7a:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:22 2025 by rpki-client