Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: AOlgTrf0L0SbgSItc0cZGxjTzT1M+CMRTMxsRG5JBPY=
Subject key identifier: 46:DF:26:4E:2E:9C:06:46:23:21:49:63:C9:FB:4C:D1:94:BB:11:02
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0198D54E7BC4BE32F1F1AD41A8F41C12B114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 058A
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: r+kLylruFZ07y9jNvvXAb5v33+tMosvpFXJHJW60Jzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7b:c4:be:32:f1:f1:ad:41:a8:f4:1c:12:b1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=46df264e2e9c064623214963c9fb4cd194bb1102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:0a:f4:32:2e:14:88:5a:81:79:99:ba:ec:
e4:ca:4b:04:57:66:6d:21:dc:2f:6b:82:72:8e:91:
52:fe:3e:3c:b4:1a:21:12:ea:dd:dd:a5:d4:4b:a1:
88:19:f3:6d:de:0e:5e:4f:e0:6f:61:b4:55:7d:25:
f2:f8:56:8c:f1:f0:a4:c4:53:89:f0:79:f4:93:d8:
38:98:36:67:6c:90:ae:72:d1:54:46:fb:07:80:1c:
54:36:42:8b:6f:14:29:44:c2:8b:b6:d8:70:a7:9d:
87:64:ed:ef:19:32:31:73:4e:18:29:38:4a:4b:33:
85:c4:27:0e:f6:9a:04:86:d1:20:64:77:3a:ae:28:
44:b5:6d:23:5d:23:f7:df:8d:cc:ee:7e:89:37:3c:
96:e0:c2:69:b2:18:4b:3d:03:df:d8:3b:b8:7c:ea:
cd:09:da:1d:28:f1:e4:96:d6:56:b0:07:eb:e1:1a:
67:47:fa:88:3d:ed:4b:85:37:5a:8a:57:9f:02:88:
8b:b8:82:76:bc:45:81:73:b2:24:63:43:b5:e8:ee:
fc:72:16:27:32:a8:38:4b:c5:e5:b1:69:9a:0c:28:
2b:60:21:83:45:91:8a:5d:08:3a:b3:05:bb:4c:94:
16:0b:e3:e7:55:ea:a1:ef:9e:b3:01:01:ed:6f:7e:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:26:4E:2E:9C:06:46:23:21:49:63:C9:FB:4C:D1:94:BB:11:02
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:72:61:6d:b4:ec:04:f1:02:3e:74:f1:1b:cf:b4:04:0c:81:
f2:19:73:c0:de:6e:d2:07:f7:04:54:b4:67:07:89:a7:f6:38:
12:72:10:77:d7:ac:c9:42:67:8b:cd:9b:f9:43:57:6c:00:ed:
0b:5b:54:ef:c4:4b:f0:61:7b:8f:05:d5:3d:04:bb:d2:e3:30:
7f:4c:19:b9:15:cc:36:9d:68:b5:ef:15:f7:b1:ae:74:d9:b2:
aa:f6:4d:02:02:d0:4a:77:ad:71:75:77:b2:9c:2f:28:5b:07:
6a:fd:12:60:a2:6e:1e:88:d9:13:4e:32:ed:e1:30:6b:1d:0f:
73:35:c4:35:83:3d:b9:cd:c2:d5:3c:75:a2:e3:b1:40:61:12:
54:d9:cc:d9:15:6a:98:eb:c8:98:35:25:44:a4:fb:cc:d6:8b:
90:d4:e0:5b:01:cd:d8:14:07:36:8c:a0:7c:7a:01:d8:b6:39:
45:18:80:3d:68:09:f3:78:16:2e:68:34:d2:96:4e:2f:4a:12:
c2:4e:8a:75:4a:ea:a6:81:ea:d8:06:cc:7c:b4:50:66:d0:95:
6f:a9:75:02:26:de:56:33:73:dd:ae:44:10:9a:90:34:70:53:
83:32:e3:fc:aa:81:f3:5d:9a:70:3b:63:08:40:4d:f6:a3:47:
07:bb:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:36 2025 by rpki-client