Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: Pd9BzAlV+sIxtqL3V5aRgV2XJW2xqBSoWh2shyQxvzg=
Subject key identifier: 34:2E:EB:20:F1:E2:AB:06:EE:8F:DE:93:A4:B1:13:D5:3F:AD:09:F8
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 0198D6CCD31A06F4D19D85BCA8A878C27F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0CBB
Signing time: Sat 23 Aug 2025 12:00:04 +0000
Manifest this update: Sat 23 Aug 2025 12:00:04 +0000
Manifest next update: Sun 24 Aug 2025 12:00:04 +0000
Files and hashes: 1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: zvbh+pEZSM2pCvgby2FLklgEB7KYPPnlbzkZGrhOr4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d3:1a:06:f4:d1:9d:85:bc:a8:a8:78:c2:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Aug 23 12:00:04 2025 GMT
Not After : Aug 24 12:00:04 2025 GMT
Subject: CN=342eeb20f1e2ab06ee8fde93a4b113d53fad09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:51:ee:bd:a2:5a:82:3c:b1:db:f4:b5:8d:
b7:30:57:41:2b:bb:ee:5b:33:43:05:2c:58:38:3c:
3c:b3:61:cd:18:90:d6:70:bd:7e:37:37:cd:af:1d:
78:fa:48:8b:a7:ec:95:a7:f0:aa:db:6d:75:39:9a:
c8:b2:1e:74:ea:58:dc:d3:b9:19:96:6e:db:19:cd:
af:65:08:91:d0:4e:c3:2b:58:11:64:e3:72:4a:62:
0e:c5:da:4b:15:20:97:c1:96:a6:a4:e8:2e:7b:bf:
6b:f7:d6:45:63:0a:2b:e5:89:00:34:2b:26:c3:be:
20:0f:a6:bf:46:c9:e9:f1:f6:a1:95:cc:aa:9f:3d:
c6:fb:f5:51:0d:e2:f9:d9:02:be:f8:67:e0:3d:fc:
7e:d3:e7:a6:d6:b2:45:26:40:fe:8b:91:66:7c:8a:
78:c9:d7:52:3c:8a:3a:59:dd:3b:47:02:6a:8e:9c:
3d:64:5e:1c:78:ac:2a:31:ad:ec:4a:16:a3:a8:9b:
77:34:27:61:78:53:60:17:01:10:0c:fd:b1:ae:22:
5d:33:f2:21:aa:41:4b:0b:aa:0c:c8:cd:e2:7d:6c:
d5:02:3c:32:8b:74:19:38:a8:fe:04:81:6d:19:56:
64:68:59:77:cd:19:f0:1f:0a:85:76:c3:97:b9:c5:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:EB:20:F1:E2:AB:06:EE:8F:DE:93:A4:B1:13:D5:3F:AD:09:F8
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d8:79:9e:e9:4a:d8:8e:86:41:bb:a2:f2:13:de:58:40:a1:
76:75:fc:9e:16:4a:46:34:87:13:8d:5c:9a:2f:61:8f:35:86:
4c:da:2e:13:04:ca:9f:ae:e4:e0:0d:8b:02:64:4c:fa:c4:59:
97:59:3f:25:93:c4:16:aa:d8:53:c1:ac:d8:f1:e3:73:bc:27:
28:20:86:a6:a5:b5:40:21:6d:f3:ec:60:ca:14:38:19:d2:7d:
e4:68:b6:3d:fa:74:0e:cb:14:a0:63:08:6f:2c:69:63:73:b9:
f6:f3:65:5f:96:44:10:0b:5b:85:b9:3d:ea:03:52:6a:14:44:
cd:2b:3a:55:35:f4:c7:49:93:e3:74:b3:5b:de:ca:d9:54:aa:
b5:db:04:99:a8:01:78:78:f4:31:67:be:64:71:4b:89:96:c4:
8c:25:cf:d2:49:0d:b8:8b:07:57:09:37:19:32:4e:4b:5c:81:
7d:11:61:ef:5b:9a:2c:80:4d:96:d8:ec:47:31:3d:17:72:c1:
09:a6:b3:81:5c:28:01:6a:14:2e:c2:dd:50:93:a5:a6:6c:7f:
c5:f8:92:d9:61:81:41:4d:47:d4:ce:b2:fb:1e:04:a3:63:7f:
2e:2a:81:08:dc:38:27:f1:86:2d:80:4a:38:ce:56:d1:ac:49:
18:f0:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:46 2025 by rpki-client