Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: XCtxsmnq9po/Bs3D4sF0TThwCPGm5wRtN0One0UJwWY=
Subject key identifier: EE:01:3E:90:41:A3:BD:D4:E1:7E:3E:BC:87:E9:1E:46:07:DF:F6:22
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0198D773525DA3D48E8E596105BFCC27D6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 15:01:55 +0000
Manifest this update: Sat 23 Aug 2025 15:01:55 +0000
Manifest next update: Sun 24 Aug 2025 15:01:55 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: BHsJd3pCLgxEVs9u0zIS5OmUr7+06mdNK1wUJlQ8IyA=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:52:5d:a3:d4:8e:8e:59:61:05:bf:cc:27:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Aug 23 15:01:55 2025 GMT
Not After : Aug 24 15:01:55 2025 GMT
Subject: CN=ee013e9041a3bdd4e17e3ebc87e91e4607dff622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:9b:60:6e:3c:f5:04:eb:12:75:d5:cb:37:
06:0e:16:95:82:f8:14:7d:0c:d4:d7:d4:de:b8:f2:
58:47:b4:08:b7:d2:76:1d:52:48:e9:c1:1d:75:23:
b8:54:58:a6:f4:fc:c7:41:23:e1:67:3c:e7:72:d1:
fe:76:07:e3:88:37:3a:9b:19:16:92:0d:55:0f:42:
c3:a5:0a:19:ae:28:f4:be:ea:7c:b5:54:be:ba:d9:
40:81:79:44:f2:52:b0:49:26:62:1f:ec:06:da:9c:
76:71:00:5b:64:91:67:bc:fc:5f:12:52:f9:94:d1:
be:14:b3:86:f8:f9:71:8b:75:e6:82:94:6d:89:a5:
cd:5c:d0:6f:22:4b:ed:b0:38:f8:45:47:9e:eb:b3:
17:da:ec:a6:c8:a3:1d:89:81:c9:cf:88:e9:c8:3d:
64:6d:03:ef:c6:01:50:2f:76:ca:d5:0f:61:ce:26:
f6:ef:17:e0:ed:99:b8:71:f7:e7:8d:bb:2b:72:fa:
44:c4:44:d7:21:ba:dd:f5:07:00:30:11:9f:82:54:
e1:32:18:db:10:2a:23:fb:bc:0d:8c:a2:00:30:8e:
e6:69:e8:e6:22:5a:b1:07:b0:7e:28:c6:15:ad:7e:
65:01:8b:55:7e:1f:95:e6:bf:8a:8f:57:d0:ef:95:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:3E:90:41:A3:BD:D4:E1:7E:3E:BC:87:E9:1E:46:07:DF:F6:22
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:ae:5b:cc:bf:60:f9:c2:7f:04:01:ba:2a:9b:25:d0:81:
e7:2f:46:ee:29:2a:be:f7:e9:1e:38:27:04:47:a9:42:d1:25:
b9:97:ff:1c:c5:e8:f8:0e:e8:9b:15:6b:af:be:59:14:7f:ac:
68:ad:31:89:4a:95:0c:ff:aa:1e:02:bc:57:8c:d3:5e:f2:4a:
59:41:92:60:29:81:82:41:b1:48:bc:43:57:99:b9:b5:41:8b:
bc:c5:8f:ed:98:89:6c:5c:6f:e0:df:0f:6a:b7:78:98:05:21:
d2:cc:eb:c4:38:f0:c0:f5:44:4f:38:68:25:0f:77:af:6d:0c:
66:c7:45:5a:3d:48:ad:06:4f:08:bd:8a:fe:6d:3e:2c:13:15:
5e:ee:07:78:d8:ae:f3:a1:e0:27:15:fb:ba:27:b7:92:6c:01:
f6:7e:2d:f3:c8:73:5e:68:9d:5d:f3:f0:47:cf:da:0b:77:ca:
7c:3b:ab:14:7b:1c:1e:f0:a0:9c:e3:22:2b:7a:ad:a1:db:59:
65:05:4a:37:57:4f:b0:e7:36:4c:04:92:3c:e8:af:67:cb:21:
a2:3d:de:97:bf:45:9c:4b:e5:1e:27:43:73:de:46:22:77:8d:
27:68:09:60:58:65:b0:35:60:90:94:57:99:67:35:dc:96:87:
80:76:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:56 2025 by rpki-client