Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: 78/dX3w6WD6ggy/NGp3tweDJ+wmcpnbTPdMYxO1wvkQ=
Subject key identifier: 3D:7A:C6:29:18:41:1B:67:8E:8F:A3:4A:BA:06:B9:7D:77:85:76:D1
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 0198D404C0623D04198DC9B983597E0CD6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: C7
Signing time: Fri 22 Aug 2025 23:02:17 +0000
Manifest this update: Fri 22 Aug 2025 23:02:17 +0000
Manifest next update: Sat 23 Aug 2025 23:02:17 +0000
Files and hashes: 1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: oqgyBLjdwcFvcixghINRZv2aHoFSU9Px6et9onm6jyw=)
3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c0:62:3d:04:19:8d:c9:b9:83:59:7e:0c:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Aug 22 23:02:17 2025 GMT
Not After : Aug 23 23:02:17 2025 GMT
Subject: CN=3d7ac62918411b678e8fa34aba06b97d778576d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:29:0d:c8:16:9b:d3:e6:48:11:6a:1a:97:
60:c0:15:c3:e2:68:36:c8:37:03:ef:1a:fa:73:32:
da:fc:36:e0:1e:80:0d:81:ce:62:18:67:a7:bf:b6:
a4:16:ca:38:f8:cb:e7:05:3e:ea:e0:b4:f3:a2:48:
f5:fc:62:07:30:3b:9d:93:4d:41:0d:79:cb:6e:6c:
83:16:fa:2f:9c:c2:60:e7:f0:67:d8:49:d5:c5:4b:
8f:9d:e5:99:fe:db:11:c8:48:c1:d8:d8:17:1e:b9:
c3:d0:66:8e:7b:36:91:48:2a:64:68:7f:5a:04:14:
e1:cd:d3:e9:eb:31:0a:e9:40:ff:48:98:2c:9f:20:
ba:5b:b1:26:36:c2:dd:7b:a2:81:19:40:23:48:56:
e8:d8:3f:73:41:76:a9:a6:61:61:44:1f:e2:80:43:
f3:fd:58:ee:f1:7f:68:c8:13:f3:2e:d6:b2:67:48:
50:c7:8f:85:48:aa:09:8e:c9:b9:8c:ee:2a:fe:a3:
dd:2f:c7:40:2e:04:5d:aa:da:25:95:b0:de:53:89:
18:f1:c6:e4:df:ab:97:6b:fd:7c:b7:e6:ee:62:d7:
52:25:53:96:77:63:ba:1f:1e:aa:05:d9:af:60:ea:
d6:25:d5:17:b0:2f:fd:fc:e8:2d:8c:59:9d:77:fa:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:C6:29:18:41:1B:67:8E:8F:A3:4A:BA:06:B9:7D:77:85:76:D1
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:39:5e:73:49:88:2b:cb:07:4d:c0:76:e0:eb:f0:3e:dd:57:
fe:4e:17:59:c0:db:5a:a5:08:7c:36:49:50:48:6e:4b:a7:39:
8e:b4:43:20:35:c4:6f:04:ec:90:ed:cc:63:1f:72:1b:59:b4:
99:96:63:8c:a3:cb:86:70:fd:77:9d:bc:f8:d4:4f:16:cd:16:
c3:d6:53:0b:85:e6:2a:b1:d1:63:0d:c1:db:e7:81:ea:58:73:
be:b9:58:bd:81:e9:3c:b3:63:67:21:60:58:21:a2:68:e3:cf:
a0:82:ca:79:8d:69:11:68:7f:a4:50:e5:82:ca:8b:98:7a:a0:
c4:e4:62:3d:f7:fd:e5:b5:6b:4b:c3:f8:81:a6:87:95:d4:ef:
9d:f9:4f:70:cd:68:45:7a:19:da:15:50:60:3d:7f:e0:63:56:
7d:76:1d:2c:3b:a4:b8:22:ab:57:ca:72:f4:dc:91:3b:a1:1b:
09:16:51:26:d5:8b:cb:80:de:f1:6b:09:c9:1b:6f:82:ae:e4:
00:b8:9c:6e:de:5e:1f:3f:ab:d2:62:ef:28:9c:40:d9:9d:0b:
c1:98:2d:f2:7a:e6:59:ec:20:3b:b8:0b:10:d8:2d:ae:b5:18:
23:28:db:58:66:2c:e8:a2:18:f6:0c:5b:43:f3:7c:e0:47:43:
bd:fc:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:49 2025 by rpki-client