Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: 1sSMpOsUckNBqLy5ZUXbxrYiVvj65ynQ2As7WWRShqg=
Subject key identifier: 8A:93:61:59:7F:16:2F:77:76:A2:9E:DA:4E:02:08:36:81:F3:50:F8
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 0198D7736956C348B74EEF23593CD94CD80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 14A6
Signing time: Sat 23 Aug 2025 15:02:01 +0000
Manifest this update: Sat 23 Aug 2025 15:02:01 +0000
Manifest next update: Sun 24 Aug 2025 15:02:01 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: 0hP1apBb4PJ7AR6Oywz2/O9hzav9nG3OxWofTq+YAlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:69:56:c3:48:b7:4e:ef:23:59:3c:d9:4c:d8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Aug 23 15:02:01 2025 GMT
Not After : Aug 24 15:02:01 2025 GMT
Subject: CN=8a9361597f162f7776a29eda4e02083681f350f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:e8:a2:bb:69:c4:c0:64:a2:94:13:b3:af:
a5:4e:4d:99:cb:f2:fa:25:83:40:40:7e:90:12:6c:
61:77:f5:27:be:93:49:08:b1:35:bb:0e:ad:9e:5e:
89:90:82:85:5a:82:73:93:b4:2f:b7:c1:22:02:41:
fc:7e:08:c0:63:f9:8d:5b:ed:63:be:2b:64:81:ee:
16:f9:83:34:b0:51:f5:f8:89:df:31:95:7e:f4:46:
95:c8:28:5a:40:ca:d5:69:94:08:87:91:8d:1a:c2:
2f:3f:59:38:6f:cc:6d:97:df:b1:dc:ec:d7:06:8c:
60:ce:d2:6c:fc:c1:26:6f:f7:aa:36:e0:13:55:75:
31:ae:c5:e3:c0:6a:65:c6:87:3b:6c:2a:70:01:21:
d3:eb:fb:5b:03:d4:dc:b2:b0:89:24:e1:a9:59:b5:
d3:82:ef:37:c4:5d:51:dd:b9:76:b9:9b:2b:29:26:
da:31:56:3d:fc:f7:57:88:05:d1:90:cf:1b:0e:8a:
45:6d:56:64:ac:11:e1:bc:cc:34:44:29:3e:b7:f8:
f7:e3:c0:72:0e:6b:f1:42:6b:fb:59:93:55:c0:34:
49:c3:0c:04:2a:50:50:62:13:fc:20:f1:20:b9:f1:
9e:3e:67:89:64:c8:5e:a7:b7:86:99:18:fe:a5:fb:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:61:59:7F:16:2F:77:76:A2:9E:DA:4E:02:08:36:81:F3:50:F8
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:43:13:58:df:db:92:5f:49:93:1c:f7:93:6b:bb:45:1f:
47:9c:9d:fc:c1:5e:bc:0c:0c:a3:9d:10:36:7b:ef:fb:c1:b9:
0a:33:d9:e2:6e:5a:cd:0c:42:4c:97:fc:64:d9:71:98:dc:09:
14:be:47:d6:de:33:3f:56:78:e0:4d:97:20:d1:38:3a:1d:05:
47:91:bd:9d:d3:da:40:29:b4:9c:49:5e:7c:81:d6:7c:b3:30:
93:47:d1:58:95:63:16:66:ca:16:e5:47:cd:cc:24:06:59:b8:
90:91:b6:1d:b3:82:8a:bc:c7:4b:b9:a5:a1:a7:cf:b3:fe:d6:
a5:a0:c6:cf:5c:b8:51:51:93:fb:bb:68:e2:f7:9d:bd:aa:f8:
d9:7a:68:ff:a4:a9:c4:d5:d9:9c:ab:09:5c:5f:99:7a:c6:b7:
60:b1:8a:83:89:6e:4c:5d:35:17:85:e5:39:11:30:8e:8a:9d:
18:63:82:33:61:33:c8:e1:34:42:04:f6:0b:c0:5d:af:41:bb:
b7:13:74:c3:a2:ec:83:dd:ca:2d:89:c4:f6:db:88:80:20:01:
44:e1:81:3a:04:a9:dc:a5:21:2b:9d:72:bb:53:c1:a9:8d:8d:
55:79:0d:11:1b:7a:e2:ac:fd:b9:d8:e7:6a:d0:88:78:16:54:
5d:53:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:21 2025 by rpki-client