Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: MeQ3D1tVQT8zrGwWqU5PPFgRK6ZXZBYPJfFQNUUxMmc=
Subject key identifier: A2:B2:01:6A:56:07:D8:FC:F9:32:81:2F:0F:A9:14:1C:3D:19:99:0F
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 0198D65F5BDF44EDF3F67A5E756E2013D269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 0308
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: 0i77rZBI8MSRVDkdilPqv7wO20RD5vxw0M6od1K8IMs=)
2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5b:df:44:ed:f3:f6:7a:5e:75:6e:20:13:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=a2b2016a5607d8fcf932812f0fa9141c3d19990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:46:62:4d:31:c2:de:1c:3b:e2:25:d0:7f:
29:0e:ab:fd:15:21:e3:9b:61:81:dd:61:30:33:2d:
f4:47:36:d7:4a:01:a8:e5:be:02:8b:8c:56:0c:cc:
cf:83:c9:2a:2d:88:d8:3e:06:6a:42:1f:ae:7e:c6:
2b:19:1d:06:e0:88:aa:4d:54:0c:94:5a:dc:a1:00:
d0:3a:d8:e2:a1:13:20:94:1f:ff:db:8c:02:a3:45:
56:34:9b:67:53:9e:52:e4:23:e8:1a:1a:3d:d2:99:
45:e0:dd:46:58:8d:ad:f6:78:2f:2f:0e:d6:63:10:
1f:4f:66:4d:d0:d1:63:aa:43:e5:6b:ca:7e:e2:de:
60:64:8d:a9:0d:fe:cb:da:02:8b:ec:24:d9:6b:a8:
10:2a:26:b6:69:96:8d:e2:61:f5:ba:ad:26:46:87:
b7:f3:fa:1e:13:6d:3c:66:9b:5c:09:37:80:71:68:
59:df:16:35:ba:88:03:54:d2:de:f6:49:c0:68:bf:
6a:23:a2:a8:e3:4e:d1:ae:06:d2:b7:3f:e2:67:d5:
f3:5d:f8:d2:98:52:da:1b:d2:42:54:c2:e6:7d:50:
ab:03:6d:9d:07:93:e1:b0:05:a4:a4:12:92:8c:0b:
6e:17:ee:c3:af:f9:d6:db:68:16:52:34:de:ed:b4:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:01:6A:56:07:D8:FC:F9:32:81:2F:0F:A9:14:1C:3D:19:99:0F
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:57:74:63:35:b0:43:5f:88:2f:e9:fe:fc:6d:86:1e:14:
1a:33:3f:af:0f:0b:f8:46:38:38:b5:e7:07:5d:41:97:de:cc:
5a:c7:d3:10:b3:4e:ea:14:d5:d1:41:f2:5b:8e:dd:ff:df:31:
8f:fd:09:ac:c5:93:5c:ff:a1:60:a6:4e:5f:88:c2:de:4c:53:
0a:19:b1:d8:38:10:78:1f:86:b8:75:f1:b9:e0:eb:a0:50:84:
b1:e3:3d:61:2d:f2:94:9d:53:e7:72:5a:0f:e4:a9:68:14:8a:
dd:88:05:da:f6:c2:21:71:c5:24:30:b0:2f:1f:ad:d4:d4:df:
33:75:48:ec:0e:de:ca:b0:d6:63:61:56:a1:51:b4:ab:65:08:
b6:e2:f0:85:84:b1:8d:38:87:a2:d7:1d:fd:94:01:cd:6d:fc:
28:44:71:08:06:15:ad:a4:16:b1:66:f3:e5:cc:1a:4a:ee:cd:
e2:53:86:43:e8:ee:8e:35:d4:8b:d9:1f:c9:7a:9c:e4:44:80:
da:b2:2c:e4:b7:4d:1d:3c:74:b5:c1:eb:45:25:46:3c:14:6a:
be:ad:5b:75:b6:69:04:3a:25:7c:bb:f1:fb:22:6a:44:e0:10:
dd:05:ac:ff:73:0b:98:36:87:4f:24:29:d4:09:e4:3c:2d:1b:
30:7c:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:50 2025 by rpki-client