Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File: 6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier: im8xNcVCtKKENw2q3UWgk2mxrGyEaWRk//zOsTNCrOc=
Subject key identifier: 67:6E:A9:A6:9B:30:26:4E:7A:A2:07:98:AD:76:1A:5A:5E:CE:5C:35
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 0198D4A798550EA081DE6D63049EA1D797B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number: 0915
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
2: 1KHRlfAmZCjgdchpsV2t_4c1OSE.roa (hash: WCQTHOW/Hv3m0ge62Xw1HCKv223lQ6k0GOEHqDCZYTs=)
3: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: tYEs6A6QXflAe0a/ZA9RWmOxlDLgaJ/rzfnNDyscfU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:98:55:0e:a0:81:de:6d:63:04:9e:a1:d7:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=676ea9a69b30264e7aa20798ad761a5a5ece5c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:f4:ac:b4:3f:5d:eb:a5:f5:8c:57:5e:16:
fb:8f:e9:cd:c2:f2:4c:66:fd:94:79:fc:a3:00:ef:
76:a1:5b:4d:03:6b:bc:d2:0f:12:bb:22:f2:1a:bc:
4c:44:3f:fc:85:b2:f2:b0:c7:e0:e2:f9:00:0f:ec:
0d:9a:56:2e:6d:de:d9:65:c4:63:6d:95:ee:a4:f7:
1e:90:db:91:f5:d9:fe:6f:05:41:34:ff:71:fe:f7:
2a:9e:4e:7b:d8:fb:cf:86:30:82:24:d3:a6:71:24:
86:cf:60:c5:11:77:50:35:7c:2f:ca:2d:98:33:73:
d4:82:ef:c6:75:11:13:18:70:e6:1b:85:a5:15:88:
cc:26:d6:81:98:43:09:e6:cf:da:87:37:c8:fe:66:
56:0d:ee:29:b2:0d:cd:d2:82:92:23:3c:b4:70:cc:
49:e1:14:3c:97:94:8c:c9:d3:10:79:80:42:bb:85:
18:94:70:a0:14:bd:86:f7:62:14:a6:1e:24:65:8c:
29:2f:d8:cb:8c:ac:6d:8d:c7:ea:6e:6b:cd:b9:33:
2c:c4:15:2d:06:66:8a:1c:08:db:71:b0:42:ce:fe:
63:3e:4c:d9:22:d1:a4:ca:56:1e:6e:99:a2:d8:2a:
fc:38:6e:d1:a6:10:37:a3:19:71:9b:f9:98:8e:6b:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:A9:A6:9B:30:26:4E:7A:A2:07:98:AD:76:1A:5A:5E:CE:5C:35
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:0c:39:ba:5b:35:c2:a2:7e:d3:fa:9c:f8:fe:80:b6:8e:
d6:52:7f:63:c8:e8:c1:13:0e:f8:46:b9:43:e7:c4:90:eb:a9:
d4:25:1e:6a:96:b0:d0:01:7b:f5:6f:09:ab:89:3d:08:3e:43:
3f:9b:99:81:96:bb:7f:c7:7f:55:fe:60:71:b5:94:bb:d5:13:
81:bc:44:a0:5a:00:dc:8a:05:d7:b3:8f:36:e5:52:82:d1:e0:
dd:b1:b4:5e:09:5c:c2:66:d8:35:0c:a2:a5:5f:f9:06:37:1b:
88:90:d7:46:f7:49:f9:0c:41:5f:9c:61:79:da:cd:a3:5f:75:
8b:d8:3a:a5:bb:c8:db:86:20:e4:32:8e:ab:09:08:d5:ff:10:
c4:67:c0:df:44:94:56:74:6e:3d:5e:bb:23:6d:9c:b5:f3:60:
44:d0:df:c2:da:dd:3c:d0:69:04:31:ab:d0:b4:37:d7:cc:eb:
3b:2f:a8:6f:71:9c:f6:11:ce:05:86:34:10:c0:aa:d3:11:9d:
ca:71:35:c4:f9:47:39:a9:b5:9c:19:0c:dc:3f:64:43:bb:23:
20:17:59:28:9b:92:8e:32:2b:56:e2:35:b3:91:7e:51:4b:10:
c9:b1:6b:35:40:6c:5d:11:db:7e:0f:e5:a2:e3:bd:32:02:29:
12:b9:ae:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5hVDqCB3m1jBJ6h15e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx
MTgzZjEwHhcNMjUwODIzMDIwMDA5WhcNMjUwODI0MDIwMDA5WjAzMTEwLwYDVQQD
Eyg2NzZlYTlhNjliMzAyNjRlN2FhMjA3OThhZDc2MWE1YTVlY2U1YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdX0rLQ/Xeul9YxXXhb7j+nNwvJM
Zv2UefyjAO92oVtNA2u80g8SuyLyGrxMRD/8hbLysMfg4vkAD+wNmlYubd7ZZcRj
bZXupPcekNuR9dn+bwVBNP9x/vcqnk572PvPhjCCJNOmcSSGz2DFEXdQNXwvyi2Y
M3PUgu/GdRETGHDmG4WlFYjMJtaBmEMJ5s/ahzfI/mZWDe4psg3N0oKSIzy0cMxJ
4RQ8l5SMydMQeYBCu4UYlHCgFL2G92IUph4kZYwpL9jLjKxtjcfqbmvNuTMsxBUt
BmaKHAjbcbBCzv5jPkzZItGkylYebpmi2Cr8OG7RphA3oxlxm/mYjmt4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGduqaabMCZOeqIHmK12Glpezlw1MB8GA1UdIwQY
MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt
ZmZlMjFlZjk4Njc0LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0
LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6MMObpb
NcKiftP6nPj+gLaO1lJ/Y8jowRMO+Ea5Q+fEkOup1CUeapaw0AF79W8Jq4k9CD5D
P5uZgZa7f8d/Vf5gcbWUu9UTgbxEoFoA3IoF17OPNuVSgtHg3bG0XglcwmbYNQyi
pV/5BjcbiJDXRvdJ+QxBX5xhedrNo191i9g6pbvI24Yg5DKOqwkI1f8QxGfA30SU
VnRuPV67I22ctfNgRNDfwtrdPNBpBDGr0LQ318zrOy+ob3Gc9hHOBYY0EMCq0xGd
ynE1xPlHOam1nBkM3D9kQ7sjIBdZKJuSjjIrVuI1s5F+UUsQybFrNUBsXRHbfg/l
ouO9MgIpErmuSg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:42 2025 by rpki-client