Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier: krdywPtEav0LdYMmIdS1wwKVWHNv1gTGBG+SElF2Hcc=
Subject key identifier: 28:B8:85:58:AD:28:E1:B6:01:63:43:B7:44:57:0D:E8:91:12:19:A6
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial: 0198D5BC30E38098CCCAEEF69188C8948222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number: 017A
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: A6R/6ZvrKhR++N3XWNpRPNHMzeuwWrmr/gdlyD4n6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:30:e3:80:98:cc:ca:ee:f6:91:88:c8:94:82:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=28b88558ad28e1b6016343b744570de8911219a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:8b:fc:e9:e4:01:ca:d5:75:d5:ad:1a:17:
2e:b5:8c:39:cc:c5:26:99:aa:7e:56:58:45:86:d1:
d5:6d:13:34:98:ae:38:b6:42:95:05:4a:95:fa:99:
90:da:23:11:4d:50:12:3f:0e:d7:90:e4:d3:df:73:
5c:57:64:52:5e:ed:dc:e8:fd:5c:ad:60:d7:c4:8e:
1a:50:6b:f6:e4:c1:80:e5:a6:85:05:10:8b:1a:2c:
eb:ba:ce:fe:e1:be:b6:40:e7:05:56:02:92:f2:4f:
f2:a8:54:f1:48:cc:c6:97:f0:37:92:0d:c4:be:7b:
3d:69:27:b4:60:87:89:5d:21:61:3c:ad:16:18:d0:
d8:df:a5:de:5b:41:02:1e:1a:b1:cc:4d:f2:f5:3d:
31:ec:9c:f9:88:a6:50:9a:36:e3:e9:fd:c2:70:21:
c8:5e:5c:74:d8:8c:1b:1c:59:39:d3:15:c4:1c:14:
48:d5:93:d5:c8:9e:d0:a4:64:7b:60:76:72:da:42:
72:39:b1:e2:dd:8c:23:eb:ce:64:cc:51:b6:bd:f4:
47:71:f1:18:19:0b:dc:2f:9f:78:72:c7:a2:45:96:
24:41:3e:08:7f:c7:1c:aa:f4:f4:08:1e:b2:49:b0:
cc:89:37:04:c4:ff:83:ea:f8:04:7d:07:14:7d:f3:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:85:58:AD:28:E1:B6:01:63:43:B7:44:57:0D:E8:91:12:19:A6
X509v3 Authority Key Identifier:
keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:db:31:e6:11:48:da:fe:18:a3:c7:3f:0d:39:fc:00:f2:
8c:12:6a:fd:9c:00:7e:44:3f:e2:14:e0:4f:14:95:46:b3:bf:
be:ff:8e:8b:e9:c4:eb:e4:8e:e8:06:ff:a0:e2:85:08:2a:d9:
8c:07:f4:53:d0:a8:b3:a5:94:65:ad:7d:0a:06:7c:2f:38:26:
44:68:3d:e8:ff:17:31:e9:3e:86:05:c4:f4:57:c1:a2:dd:93:
42:dd:5e:56:78:bb:f4:21:96:d1:c8:d4:ef:0d:2d:d5:45:d8:
bf:37:9c:23:02:36:09:e6:8c:8d:97:a6:f6:b8:a3:97:c8:68:
37:c3:d5:ef:98:d7:42:ae:e3:3c:2e:8e:77:b2:b4:67:fd:06:
d2:16:36:2a:f5:54:2a:de:02:0e:d5:3d:5e:3a:84:10:5d:35:
8a:44:4b:e5:12:26:15:92:cc:5b:53:06:a4:f4:87:26:f9:d9:
dd:32:a9:5c:af:49:79:8e:df:7b:35:76:73:fc:b2:fa:7e:78:
49:f4:2c:8a:ae:8d:a9:0b:7a:45:de:50:7f:0c:f7:ac:9d:93:
3e:57:dd:50:18:fd:58:03:2a:da:6e:96:98:67:d0:f9:1f:71:
5d:e3:3e:3e:9c:cc:6b:70:bc:e1:92:c6:af:86:24:ed:38:4b:
29:d1:99:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDDjgJjMyu72kYjIlIIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTBjMmMwZGVlNmY5ZWQ2NWUwNTFlYWE5MDk3ZDAyY2Y1
YmY1ZjIwHhcNMjUwODIzMDcwMjE2WhcNMjUwODI0MDcwMjE2WjAzMTEwLwYDVQQD
EygyOGI4ODU1OGFkMjhlMWI2MDE2MzQzYjc0NDU3MGRlODkxMTIxOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEGL/OnkAcrVddWtGhcutYw5zMUm
map+VlhFhtHVbRM0mK44tkKVBUqV+pmQ2iMRTVASPw7XkOTT33NcV2RSXu3c6P1c
rWDXxI4aUGv25MGA5aaFBRCLGizrus7+4b62QOcFVgKS8k/yqFTxSMzGl/A3kg3E
vns9aSe0YIeJXSFhPK0WGNDY36XeW0ECHhqxzE3y9T0x7Jz5iKZQmjbj6f3CcCHI
Xlx02IwbHFk50xXEHBRI1ZPVyJ7QpGR7YHZy2kJyObHi3Ywj685kzFG2vfRHcfEY
GQvcL594cseiRZYkQT4If8ccqvT0CB6ySbDMiTcExP+D6vgEfQcUffMXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi4hVitKOG2AWNDt0RXDeiREhmmMB8GA1UdIwQY
MBaAFOrgwsDe5vntZeBR6qkJfQLPW/XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQt
ZDk4ZjVkMDc2Mjk4LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQtZDk4ZjVkMDc2Mjk4
LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKXbMeYR
SNr+GKPHPw05/ADyjBJq/ZwAfkQ/4hTgTxSVRrO/vv+Oi+nE6+SO6Ab/oOKFCCrZ
jAf0U9Cos6WUZa19CgZ8LzgmRGg96P8XMek+hgXE9FfBot2TQt1eVni79CGW0cjU
7w0t1UXYvzecIwI2CeaMjZem9rijl8hoN8PV75jXQq7jPC6Od7K0Z/0G0hY2KvVU
Kt4CDtU9XjqEEF01ikRL5RImFZLMW1MGpPSHJvnZ3TKpXK9JeY7fezV2c/yy+n54
SfQsiq6NqQt6Rd5Qfwz3rJ2TPlfdUBj9WAMq2m6WmGfQ+R9xXeM+PpzMa3C84ZLG
r4Yk7ThLKdGZ9A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:46 2025 by rpki-client