Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: 9eSXHfSmnpmLxX/96wEjaEKQYjSUl2KjW7ksQirjCoE=
Subject key identifier: 82:9A:A6:E3:82:A1:4C:76:EF:5C:65:40:1A:1C:BE:13:3C:70:BF:F2
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 0198D472C55F83F03A76DC73F97DE6302491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0906
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: LzkStVl3KELNmC0PA3+FQ3rR7xJAvjJh5XQE074lZ+8=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c5:5f:83:f0:3a:76:dc:73:f9:7d:e6:30:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=829aa6e382a14c76ef5c65401a1cbe133c70bff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:8d:92:74:32:93:42:07:3e:ad:30:79:b9:
f8:79:87:d1:e8:6f:fb:e7:cb:16:66:4c:5b:0b:36:
c3:ce:2a:03:6a:55:5f:a8:9e:aa:5f:4a:b4:19:36:
d4:b2:ab:d9:65:cd:ba:c7:5c:0f:72:0d:b2:94:be:
52:24:4b:f1:61:68:73:23:59:28:72:b5:30:0f:b6:
a4:81:68:eb:3e:5d:ac:b3:3e:44:2a:bf:3e:2c:7b:
c3:37:b7:25:64:2f:03:89:79:13:8c:e1:89:f1:69:
22:5d:d4:bf:1c:b1:37:a0:38:8e:36:13:21:e4:1c:
e0:8d:ce:b3:a8:11:82:0d:c8:d4:0e:8c:68:c4:51:
70:14:6e:a4:a0:3f:c5:1c:3a:fd:ac:69:f3:8d:21:
40:fd:a5:a5:1b:df:f6:8e:03:f2:51:eb:9c:fe:1f:
59:f6:ad:40:1c:7f:97:fa:c0:03:fb:76:d5:40:ee:
c0:01:b4:05:87:e1:58:06:f2:f7:6f:36:1f:36:91:
9a:df:cf:ff:7c:58:cd:bd:e7:07:f8:63:b4:8e:d2:
90:42:ad:37:6f:ed:ab:e4:a4:bf:5f:ce:14:d4:46:
0d:d4:94:c1:25:6e:c2:3d:48:05:39:7b:68:82:1a:
f4:4b:fa:49:1d:74:10:34:42:a7:26:cf:02:ca:25:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:A6:E3:82:A1:4C:76:EF:5C:65:40:1A:1C:BE:13:3C:70:BF:F2
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f7:fd:72:9b:09:7e:2d:71:84:23:cb:c2:a2:f9:fb:af:5c:
d4:34:0b:f2:04:ad:99:8e:72:84:8c:0f:2a:78:15:af:5c:97:
66:f7:7d:28:e7:f4:50:39:58:16:16:2d:e0:34:d9:8c:55:ec:
7a:69:d5:be:4e:74:63:4f:ca:36:73:ae:21:be:c4:c6:ef:9a:
08:1f:7b:5f:84:27:19:6f:e1:cd:4b:52:31:a6:c3:e6:a5:d0:
67:ae:17:d5:3a:6f:34:2d:75:bb:78:e6:9c:cb:ed:71:06:c3:
4a:02:4b:d7:36:2a:a2:06:a5:38:cd:8c:bf:1c:d1:16:ca:9b:
75:5e:7b:15:bd:bc:55:26:9a:cf:c0:40:ec:75:ce:1c:f1:25:
74:ce:3f:05:b2:24:de:ce:9c:14:f2:8c:17:3e:ba:83:42:97:
a9:4f:f3:dc:84:fa:ab:5c:37:55:1b:a2:be:e9:9b:66:f9:7a:
0f:8b:01:10:0b:d2:d7:8c:14:37:d4:23:91:25:6e:3a:f5:54:
19:cb:fd:bb:4b:6d:a4:56:89:13:df:97:16:39:a4:82:00:01:
d0:d1:ff:8a:5f:69:59:01:f5:28:a7:df:54:10:53:c8:72:e6:
dc:48:d7:75:07:e9:85:5d:08:58:66:fb:65:78:45:02:1c:aa:
45:b0:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client