
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: 8uFQ+RjTrP14bfP2QxqcneymUO/nZODpWlbyYIMySOU=
Subject key identifier: 1C:4B:34:79:41:04:6F:54:77:9D:96:11:CC:AB:8A:B2:64:9A:34:2B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0198D54DF03CAE43512F1CE2D00E271F7981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 165F
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: tHeJ1tGrAfsNGMn7KisVhqWGt8JhuCULsrvrNlaVMQM=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: MM0dD-Cnl2lqyWLvCK1-oHYBFlY.roa (hash: 0xgeIhk2pLPXnWlj2EeT8c9DNkODQXdxgnvF/AKwP4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f0:3c:ae:43:51:2f:1c:e2:d0:0e:27:1f:79:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=1c4b347941046f54779d9611ccab8ab2649a342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:c6:ef:ed:71:2e:8a:3b:1e:69:82:74:d2:
ad:a3:22:f9:62:d4:f6:cb:64:03:4f:09:c2:27:03:
da:e6:99:5a:07:b2:18:da:1d:b3:80:2b:e4:62:47:
68:86:3f:61:03:64:33:0d:e9:46:96:50:00:cf:10:
8b:ef:1f:90:d7:be:c2:bd:b3:fb:0e:5b:e6:45:b3:
ea:41:78:48:37:a5:11:14:0a:97:a2:c4:35:38:34:
11:f2:5c:0c:77:f2:fc:e2:ba:b8:f8:d8:56:ec:d1:
c5:61:66:f5:a2:c8:6f:89:5e:45:f4:f7:14:f9:5a:
92:60:ad:b5:c4:5d:1d:18:cf:ff:16:c5:79:6f:c4:
f1:ed:6a:00:46:bd:c5:8a:bc:98:a8:10:88:52:a0:
7b:df:47:40:59:71:ff:66:41:37:c6:0c:ce:80:d9:
f4:f9:9e:8c:d0:02:93:4b:86:92:7b:ce:09:e4:d9:
79:08:52:45:d2:0b:cb:be:76:97:09:81:57:9c:1f:
55:52:93:92:d1:5a:29:6f:3a:13:81:92:da:33:6d:
05:49:62:d4:c3:4a:13:53:26:1c:25:81:d3:df:1e:
f8:86:ed:fe:4a:b5:1c:5b:72:c0:be:75:c9:00:1d:
37:da:9f:30:bc:ef:84:ac:c9:9c:a4:a1:5c:51:27:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:34:79:41:04:6F:54:77:9D:96:11:CC:AB:8A:B2:64:9A:34:2B
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:fc:2c:77:d8:0b:fd:c1:0d:cb:c5:51:3c:fc:ae:53:26:
c5:29:fe:64:f4:e4:50:69:f4:e5:31:8a:e8:04:9e:65:01:03:
2f:80:22:22:b0:20:a1:ef:fe:cd:f5:6e:ac:74:3d:01:96:fd:
44:0d:34:26:69:11:08:ab:31:6e:bd:ce:fb:8b:f0:dd:d9:6e:
dc:82:e1:5a:5a:a6:d9:e1:f6:35:52:53:00:92:73:ea:6a:ce:
91:59:d0:60:c8:37:ba:cb:c4:92:a6:74:ee:f6:97:89:8f:f6:
01:b9:b2:79:77:e1:7a:de:04:b1:8f:a0:19:3c:2d:f6:27:5d:
87:27:f4:b9:47:42:3f:87:c0:cd:9e:6c:a7:12:90:9a:b1:f0:
5f:9c:56:31:5f:d0:b1:89:99:38:d7:2d:2f:30:4d:79:58:a7:
5b:5f:71:2e:83:cc:b1:ec:cc:84:a9:b8:74:fc:2c:78:ca:41:
0d:1b:ee:bc:96:72:1d:a9:38:9a:55:73:c9:f8:e9:2a:64:0e:
46:3c:b2:aa:44:4b:fa:3a:59:83:b3:2e:b1:3c:84:97:f4:9c:
45:2d:36:f5:1d:5d:ee:36:88:87:c7:c0:bb:88:f4:b3:3e:8b:
0d:73:79:b4:a1:8d:49:00:19:0f:fb:48:6e:4e:91:87:51:8a:
90:d9:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:42 2025 by rpki-client