Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: pca62ySto9SnNi2rJvBNYLecm1kRZVVXNThlxETQCfU=
Subject key identifier: 1E:CA:B4:62:32:43:97:00:8C:81:36:0A:FB:75:C4:D8:3F:82:B3:8C
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 0198D4DFCF86E50498A80BA7F13C4898B261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0A34
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: eXMhVughc0ivA/UjbFky5XEnGF85b7HYP1BywGj4dJU=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cf:86:e5:04:98:a8:0b:a7:f1:3c:48:98:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=1ecab462324397008c81360afb75c4d83f82b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:12:28:cc:e4:bf:6a:10:17:ec:af:a7:cf:
97:07:8f:2c:21:fe:fa:cf:44:5d:2c:6a:be:34:22:
37:70:3d:3f:88:3a:57:f9:d9:50:94:e3:a1:a1:82:
bc:52:38:7e:ec:d2:15:7d:db:8f:4d:52:21:b2:d8:
a1:32:49:cc:1e:dd:6c:73:54:c3:57:bf:d2:70:e0:
14:81:f6:6b:ca:42:b6:11:7b:65:a8:95:d3:d7:b7:
1a:d2:d8:01:d6:c5:a3:54:2f:05:0f:0e:05:02:6c:
fb:86:3d:78:6b:61:a3:9b:b8:c3:87:49:03:be:88:
56:1e:0d:1e:75:e4:cf:6b:5e:08:58:09:a1:fa:5c:
cf:62:82:3d:ce:16:a3:1c:98:c1:f8:0a:ec:24:fb:
5c:c2:ef:2f:a2:44:45:eb:bc:3e:98:a1:45:c3:18:
93:d9:3a:8b:4d:d0:40:98:c5:b7:40:42:16:27:50:
5e:fd:92:05:22:7b:50:ce:f4:e0:3a:4b:04:57:3e:
13:b0:9b:9a:0c:12:4d:63:12:a4:0a:4a:e2:9a:e9:
45:d6:c6:03:d8:ba:9d:1b:70:11:be:76:89:6e:59:
00:2f:3c:b8:52:d1:00:32:aa:a3:d6:41:b8:c6:bc:
5f:2b:34:37:50:f7:82:01:71:70:51:e2:13:eb:61:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:B4:62:32:43:97:00:8C:81:36:0A:FB:75:C4:D8:3F:82:B3:8C
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:31:27:8a:34:54:6e:a6:87:4d:aa:97:65:9e:aa:25:2f:23:
a3:8e:7b:c8:3a:03:f0:5c:4f:91:f3:0f:b6:78:e4:a8:09:c0:
f1:38:8d:a4:f7:8d:90:2e:a4:7c:2d:17:bc:24:ca:ba:89:6c:
64:f0:fa:81:6e:26:67:2f:67:65:46:ba:65:8f:d0:c8:9c:1a:
6c:a5:bd:3c:c9:d6:b9:89:23:9c:03:cb:73:ea:a8:ec:c1:46:
b1:03:73:b2:e0:da:42:ee:0e:cf:42:58:c3:aa:e0:92:4b:6c:
2c:70:22:e3:b7:4e:ad:f4:a5:80:30:a9:d2:c3:7f:3e:5c:de:
e0:c1:34:b8:31:20:6c:1b:45:05:df:41:b8:ef:18:8e:95:ca:
9a:80:d0:ba:52:84:ec:7b:7d:af:1c:a8:21:8c:03:35:8e:a4:
85:95:04:70:e7:ea:04:d9:4a:53:88:23:57:c5:7d:33:49:fc:
15:5a:af:30:ce:10:5a:7c:db:bc:a8:f0:a7:ce:b1:24:81:db:
4f:58:70:74:ef:8b:25:a7:cd:d4:b2:70:65:fa:87:2b:9e:4b:
c1:8d:6a:42:a0:70:a5:bc:67:02:af:bd:72:db:90:f9:e4:05:
34:55:c8:07:83:00:6c:53:6e:44:8e:ad:9f:cc:57:59:c8:bc:
da:ef:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:27 2025 by rpki-client