Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: Rriv4YjEjmuJ8il60G964PR2ZWPyfJ2WD0dmQLM0KD0=
Subject key identifier: E6:F3:ED:34:97:EF:D9:F8:0B:DB:EF:A8:B1:AE:8B:4A:B7:E7:2D:6E
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0198D5834CBC56D7C8291723F93F1A9C8299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0BF4
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 1FBBik4X021JSujNLE5qM+O9sCLFKsnAVXkkqXtU8fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4c:bc:56:d7:c8:29:17:23:f9:3f:1a:9c:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=e6f3ed3497efd9f80bdbefa8b1ae8b4ab7e72d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:58:c6:30:04:91:69:8e:1b:9a:e4:48:fc:
50:53:dc:78:39:d4:bd:00:87:af:4b:2f:cf:b5:c5:
40:2c:f1:87:e7:a3:a4:71:c0:67:7a:71:cd:be:5b:
3d:70:3c:80:92:f8:ae:c1:60:4d:d8:88:e9:6f:8e:
07:8f:17:44:97:fd:b4:77:85:05:85:90:74:3a:63:
3f:3c:a8:f3:ad:37:e4:1b:f2:12:1b:75:0f:89:7f:
7b:47:98:fe:75:5e:a3:44:21:73:02:a2:b3:6e:01:
77:8e:c5:ac:4d:a3:84:77:71:22:6a:83:b2:90:7a:
a1:1c:12:22:d4:d1:93:2a:8c:1b:67:c6:f5:13:7e:
e9:41:88:c7:35:26:02:65:b5:4f:38:de:df:91:45:
54:2a:d3:85:41:db:a7:b3:7a:fb:98:d1:11:6b:ab:
4b:a1:6e:f1:86:ce:a9:aa:e1:21:52:37:f8:2c:4a:
05:25:e5:33:6c:25:d0:1f:70:7f:cb:37:4d:5b:0f:
bd:e8:6f:fc:f0:ae:02:28:41:c1:16:07:9a:3a:ae:
b1:ee:9f:60:35:c8:a7:32:19:c2:65:80:8b:7d:5a:
b6:b3:90:96:4c:e7:ca:cf:fd:90:c8:e7:34:df:da:
d4:7a:93:b0:dc:83:54:92:97:93:b8:6e:0f:db:73:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:ED:34:97:EF:D9:F8:0B:DB:EF:A8:B1:AE:8B:4A:B7:E7:2D:6E
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:ba:17:da:b5:5e:c5:db:95:0f:7f:0c:25:f2:50:ad:dc:
f7:f6:3f:12:18:4e:94:4c:58:1a:18:06:51:04:9b:f8:a6:ca:
94:ba:e1:ea:27:95:2f:b0:7c:6a:4b:2b:12:59:15:4f:22:d3:
33:40:71:58:72:76:f4:bb:fb:3e:b7:33:d7:f0:9e:1f:80:24:
7b:b7:c2:9c:95:6f:3b:0b:de:2d:6e:75:d3:21:8a:44:c8:4c:
d1:6f:6a:70:85:eb:c2:78:ab:66:26:65:a9:97:87:6c:07:d3:
3d:55:d6:64:38:be:20:22:0f:9e:79:1d:6b:d7:80:de:be:0d:
b1:95:fd:50:51:16:9c:53:75:4a:00:25:bf:77:fc:cf:3c:08:
9f:58:48:cf:0d:52:af:e1:64:7a:be:22:24:61:2f:69:7d:87:
fd:cc:ba:d0:af:56:c1:94:00:16:6c:fc:9f:ee:59:ab:92:30:
5e:80:6e:92:68:95:d1:54:27:e6:8c:57:1d:f0:7d:68:4f:da:
d9:93:bd:8b:98:b2:56:b2:0b:75:ba:05:66:68:e2:62:a0:38:
79:60:9e:84:b1:cb:2d:86:f8:58:ae:15:1e:7e:91:5b:c5:e6:
2b:d5:b4:d2:24:ac:06:da:a3:03:f1:d6:67:3e:fe:63:9f:1d:
aa:15:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:48 2025 by rpki-client