Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: D15b4FML/1w1f+iahdaTOTQbgpRdpascFkwyJUyS7Go=
Subject key identifier: 1C:3B:67:DB:75:83:B7:09:4B:4D:5F:C9:4E:2C:0F:2C:4C:45:CF:B1
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0198D4741C1881A85623AABA089E8F74C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 01:03:55 +0000
Manifest this update: Sat 23 Aug 2025 01:03:55 +0000
Manifest next update: Sun 24 Aug 2025 01:03:55 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: +UNkW9bgD4GINI7j/qqhZYHgs5Q/+Wrfx9Cd9NIaEmM=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1c:18:81:a8:56:23:aa:ba:08:9e:8f:74:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Aug 23 01:03:55 2025 GMT
Not After : Aug 24 01:03:55 2025 GMT
Subject: CN=1c3b67db7583b7094b4d5fc94e2c0f2c4c45cfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:6e:20:bd:6a:dd:22:09:80:a0:f8:83:40:
66:ac:19:e0:c1:de:88:47:bb:9a:28:1d:82:8e:fe:
5b:38:b7:c2:7c:4d:5c:9a:2b:c6:4c:46:7d:d9:35:
d3:77:40:b1:03:63:f5:aa:81:4b:54:b3:91:0a:5f:
64:be:1e:0b:94:62:da:85:81:32:1e:8c:0f:fb:de:
d5:ff:f7:b5:34:5d:b5:b2:25:29:35:28:6b:14:b9:
a3:8c:cf:92:c7:6c:a0:64:a9:2b:31:fe:e6:de:22:
0d:db:e9:a1:85:a4:d8:1e:70:d8:1d:57:e4:d1:66:
ca:95:95:a1:d4:f3:82:cb:1e:04:03:fa:be:52:4c:
d4:dd:50:37:29:18:19:01:46:73:ea:1d:32:01:22:
36:9d:90:ab:2b:9a:b7:60:23:f1:02:05:4e:c6:dc:
68:6c:6b:fc:01:e7:4d:b0:28:6b:73:98:51:83:b4:
43:b4:90:eb:78:84:ad:85:b3:65:fc:5e:3b:11:53:
92:54:14:a1:36:f3:66:4a:18:35:60:81:61:32:b7:
1e:85:6f:cd:24:3a:9f:c9:f2:a5:cc:9b:64:f7:42:
29:43:a6:47:3e:09:d7:21:ba:91:0d:72:a3:58:80:
64:64:28:36:ea:82:d0:15:c6:86:33:55:2b:54:c1:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:67:DB:75:83:B7:09:4B:4D:5F:C9:4E:2C:0F:2C:4C:45:CF:B1
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:30:2a:5d:17:9c:7d:5b:e0:cb:07:8a:d8:74:60:8e:cf:
c9:17:a9:1d:6b:b2:c3:45:b4:a6:89:bf:a4:85:ad:83:0e:4f:
18:b0:af:84:6c:5e:53:4f:3c:d1:e9:3b:5e:ab:e3:1c:72:fc:
a1:c6:45:9f:37:69:a8:ed:76:f1:e9:45:ae:3d:41:76:47:7b:
e6:ab:74:4a:0a:d2:96:da:6b:68:fe:7f:31:2e:d3:48:4d:5b:
27:21:3c:e1:39:a8:7f:e4:b6:fe:fb:a7:a4:ef:c8:56:d2:ce:
b2:e8:83:89:21:ba:35:bb:40:53:df:71:8b:95:4b:55:be:bb:
26:76:a3:f6:19:a3:33:0e:3f:a6:7e:b4:ce:48:37:40:80:0f:
ae:53:54:32:22:8f:a6:c1:9c:f6:b4:63:69:18:ab:6c:17:45:
88:b0:6d:a0:6d:73:fe:b8:a8:7e:cf:6a:a4:e5:d5:fe:72:eb:
f5:89:b8:07:1b:0b:a4:87:32:40:90:4b:14:f3:5a:2e:45:87:
63:f4:35:ae:30:44:cc:7c:7a:2b:2e:10:2c:48:5a:1c:37:70:
a0:c2:11:0e:93:06:2e:26:73:dd:60:93:15:77:17:42:d5:79:
e1:78:e6:d0:4e:2e:0b:fa:e4:42:70:85:54:f0:ff:8b:cd:72:
4a:f2:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:13 2025 by rpki-client