Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: PtZuY4nZ9wnhhEZiRCK5PE57SVvGkoN3/gHGcy+HXvA=
Subject key identifier: 50:DE:83:59:9A:3B:19:E2:EB:81:EB:24:14:D7:16:AD:5B:DB:F9:66
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 0198D4A7BCAD898F1EA671ED011B7F8BE17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 5unOOwxOFH9L4b2OtlZ5YrJJ9IMcMyw/SNzQedP3Sso=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bc:ad:89:8f:1e:a6:71:ed:01:1b:7f:8b:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=50de83599a3b19e2eb81eb2414d716ad5bdbf966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:31:a8:9f:40:62:16:52:11:0e:5e:62:dc:
36:63:40:7b:ee:28:5e:ba:65:22:27:d6:46:90:d1:
b0:50:cb:ab:3b:3b:76:eb:fb:42:bd:b9:9a:f5:7b:
4c:e9:5b:e6:a4:ae:c0:2e:2f:13:68:60:bc:c0:06:
36:37:9a:40:28:a6:8f:db:5d:15:6c:d4:50:4d:ce:
fa:03:2f:86:c0:1c:18:d4:cb:f1:23:b4:6e:43:b7:
59:e7:cd:7c:75:04:6d:60:8b:e7:95:7d:dd:75:69:
89:a8:f1:a7:65:0e:81:e8:f3:5b:4e:5b:34:49:f2:
60:c8:40:c5:a0:f8:fa:dc:98:2e:69:a0:ef:a5:b0:
dc:48:fb:c5:a3:eb:4f:08:a9:e7:03:38:55:f0:2a:
49:02:80:d2:e2:46:de:bc:39:28:4d:d4:4d:ff:d3:
fe:82:04:81:57:e9:61:7d:3a:1e:17:cf:75:1f:30:
44:7c:a9:82:cf:51:45:ea:3a:7a:27:95:08:58:da:
79:91:a9:1c:e0:d8:b8:fe:08:64:d8:a0:db:b7:7c:
91:1d:67:64:82:60:b2:55:a9:6b:16:50:fc:a2:2d:
ad:e6:b0:d0:64:9b:c5:26:b6:9d:2a:d8:c4:1a:3c:
d8:08:eb:1d:9f:ec:ed:fd:3b:5d:89:a7:88:79:de:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:83:59:9A:3B:19:E2:EB:81:EB:24:14:D7:16:AD:5B:DB:F9:66
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:4f:37:b3:bc:4e:75:d0:d6:78:ba:ea:71:02:aa:1b:0e:
c7:09:90:fe:f2:98:e8:f3:1e:f2:dc:16:3b:2a:7e:6c:53:09:
44:ba:79:56:2f:e5:5b:23:28:35:83:1f:02:6b:45:69:57:f1:
8c:e7:3d:08:e2:00:20:77:57:d7:01:df:d4:66:a9:5b:82:dc:
21:eb:06:99:5c:24:c5:04:fc:a4:c4:31:04:02:19:a2:8b:49:
ef:05:04:32:d9:a5:e2:ed:09:2c:e3:b3:e4:05:2e:cb:c9:e2:
18:07:29:ad:c4:3e:1c:1f:b6:57:67:23:99:ea:03:be:f9:d2:
3f:76:54:0c:1e:af:5e:2e:8b:c5:32:b7:f8:36:82:5c:4a:c9:
7d:09:91:21:28:b4:7b:65:f2:56:3e:c0:36:30:1d:7f:5d:d9:
f5:15:66:26:69:57:d3:91:ee:00:66:3a:1c:88:6a:47:3e:2b:
21:64:ab:67:eb:f4:fc:55:8f:db:ef:82:f1:f0:9d:61:b8:06:
46:1d:41:2c:0e:dd:63:8f:19:77:b5:2a:99:bc:22:e0:97:19:
63:a3:a4:6f:02:d8:ee:4b:9c:c5:34:8b:e9:28:1b:49:83:0c:
84:78:5f:53:fb:ac:a9:47:bf:ac:d4:c6:be:c2:3f:6a:41:ef:
82:be:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:26 2025 by rpki-client