Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: QxNZVKBqgz1u+J0Ivu9v3IJhM2g1urc9uIZdx+vIvLM=
Subject key identifier: 00:A9:79:A8:CE:23:DC:C7:C1:85:2A:AB:DA:AE:13:EE:61:E5:DC:80
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 0198D705D33594F33A14062D80DE3D90B776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0BA8
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: pfwZ/9JuRdcrzYCW1YOpxiwd4F2h6d2EpZd+D7VtykI=)
2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d3:35:94:f3:3a:14:06:2d:80:de:3d:90:b7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=00a979a8ce23dcc7c1852aabdaae13ee61e5dc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:7a:ad:9d:9c:61:a9:40:8e:1e:6b:d3:13:
dc:0a:4d:29:e9:1d:07:b7:0b:16:b1:e0:5e:65:18:
54:07:a2:a0:fc:8f:28:64:db:eb:a9:33:79:1b:57:
2c:3f:e0:15:55:d2:34:7d:9e:14:45:b4:48:cc:a3:
e0:be:6b:e3:7b:6a:7a:3b:6e:cd:b6:d9:c8:fb:1a:
cd:02:7a:36:02:37:63:66:95:45:0a:f8:9e:f5:63:
40:fb:bd:2f:f1:92:60:1a:e0:1f:c7:45:81:da:e0:
a8:bd:d3:8f:ec:85:22:5d:42:d5:c4:b6:91:b5:41:
76:0d:de:6b:f8:d8:7c:3b:e8:91:13:7e:00:2b:b0:
dc:b6:b1:b6:96:37:49:d3:f2:3d:51:10:9a:4a:0d:
a9:8b:1b:60:23:49:53:1e:3a:71:68:4e:82:5a:96:
80:5a:a1:87:11:34:bb:bb:85:4b:84:1f:56:23:29:
7e:0b:75:7d:d4:ee:7f:ca:27:64:77:ab:66:9b:6f:
74:a9:32:d7:4f:16:31:8a:0a:ac:ea:bb:99:23:23:
22:8d:70:00:6d:13:a2:10:9e:bf:80:7a:25:00:de:
40:2b:62:48:8d:16:6b:36:1b:82:03:9f:0b:8f:17:
b9:f7:59:2f:60:08:9a:05:27:a7:c9:95:1c:82:54:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:79:A8:CE:23:DC:C7:C1:85:2A:AB:DA:AE:13:EE:61:E5:DC:80
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b0:dd:bc:67:d9:e4:9b:8b:8a:52:5c:5f:6a:29:e2:94:d8:
b4:ab:96:c6:02:d6:ad:cb:46:a5:f7:7b:c9:48:43:3f:c2:44:
0d:ac:e2:4a:94:d6:f0:93:db:41:24:ce:19:43:dd:3d:fa:2a:
94:51:ab:2c:a1:de:b3:81:a0:21:ef:5e:12:1d:5c:c1:63:c7:
0c:08:6a:ff:d7:a8:0d:69:d2:23:4a:ca:ff:0e:0f:d3:3e:a8:
50:1d:73:6a:1a:36:47:53:0c:a0:c4:56:36:1b:98:59:a6:36:
7a:1b:fa:62:b7:d7:85:5c:95:3b:df:12:c8:b8:19:13:41:ae:
e8:77:91:d7:da:75:16:82:f9:52:2e:8d:78:d9:b4:a1:28:86:
08:36:07:d2:20:50:72:7a:2c:ce:4d:a0:81:bf:d1:b7:95:40:
d0:20:67:48:33:ce:bf:a3:06:5f:2a:ea:4c:4d:c6:cc:66:e8:
21:c1:7d:6a:8a:f5:f3:74:da:9c:e5:31:56:f0:d0:99:42:b1:
f6:f7:b3:af:31:bb:f2:27:6a:dd:64:77:e1:13:7a:25:49:8d:
c2:6e:c5:8e:3a:6b:ea:bc:7c:ce:64:2b:13:32:da:40:b8:7a:
0b:d3:d1:f9:dd:52:38:a6:ce:bb:11:7c:53:c3:ca:37:54:5b:
b4:cd:1f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:39 2025 by rpki-client