Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: SPae9xYBmF/BfgSfD7KbnMYmqejuGAZiLdlX+nmsd3o=
Subject key identifier: 9C:97:24:2B:24:2B:49:5B:A2:2A:AD:E8:2A:81:EC:BC:B2:3D:2C:79
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0198D4A7884D44EE7197018D12F36548D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 148D
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: EzYm4giHqAcUP8WcJU2w6nA8Eb+yhu57lj2LrZ3MIvY=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:88:4d:44:ee:71:97:01:8d:12:f3:65:48:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=9c97242b242b495ba22aade82a81ecbcb23d2c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:36:60:be:44:2e:41:ed:dc:e5:4b:aa:72:
61:ac:86:59:25:09:b5:56:95:b8:33:ca:86:f0:a4:
46:ee:76:34:9c:59:77:1d:b7:c1:a4:fd:4b:dd:58:
04:e2:a7:5f:25:16:a1:02:85:cc:e1:31:a3:87:7b:
58:cb:df:8a:78:d0:51:60:7d:06:98:d0:ed:bc:96:
b6:76:b2:69:e5:69:ca:86:a0:7f:6b:b4:02:4d:b8:
23:c0:23:d5:3d:b1:74:ec:d2:47:09:e8:98:bf:02:
ac:b1:96:1d:fd:75:38:c3:2a:27:b9:da:7c:e1:59:
c7:00:f7:55:7a:68:84:d2:fd:38:7e:eb:1e:af:93:
29:3d:2e:e6:cb:32:be:56:b2:06:fd:3a:40:a6:a5:
17:47:48:1e:73:7b:00:fb:fb:13:c7:d3:83:fb:22:
df:dd:9f:7e:05:25:04:3c:44:77:b8:3f:48:8f:eb:
41:1b:1b:de:22:41:35:b7:61:dd:c5:ac:ab:d9:51:
52:73:36:61:4b:d9:e6:da:8e:b6:a7:4d:6a:9f:d4:
1b:07:8f:36:ee:c9:f6:f2:66:bb:26:01:ae:d6:1d:
22:f7:79:fc:24:70:04:cc:d2:4e:d6:9e:cc:28:28:
23:c2:27:bd:9e:76:9b:14:4a:88:62:4f:80:66:86:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:24:2B:24:2B:49:5B:A2:2A:AD:E8:2A:81:EC:BC:B2:3D:2C:79
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:9a:18:57:79:34:cd:a6:43:ac:0e:4e:35:1b:57:49:c3:
33:ec:e2:37:8a:dd:0b:6e:d4:6f:05:84:ec:6a:84:01:9d:6e:
fb:38:cf:a1:98:05:79:14:84:6b:fb:50:76:d6:d7:fe:bd:c9:
04:c9:49:1e:4c:c5:4e:69:90:55:53:e6:d0:26:5d:62:60:aa:
9d:3f:0f:dd:cd:c9:6a:7e:f1:99:4b:7b:e4:63:be:15:bd:72:
66:87:53:33:84:6d:d4:dd:20:93:7b:39:7a:7c:64:06:19:9f:
79:27:5a:e5:a6:74:43:ba:1a:de:9b:b5:8b:71:a1:7c:59:04:
69:65:f6:44:50:3c:ca:ab:9c:6d:38:7d:bc:dd:6c:89:7e:fc:
52:9b:28:1d:ff:6e:7e:4e:26:dd:b0:b3:15:92:f4:e4:cc:95:
45:dc:0b:3f:e7:91:b7:05:d8:18:98:df:37:28:d4:f2:9c:f7:
f7:5c:c2:0e:69:af:24:29:db:17:df:78:f3:62:d3:18:3e:0a:
b5:f3:3b:f2:6d:39:1e:81:80:b1:22:f6:4f:a2:97:90:c4:89:
a8:e4:59:72:27:f5:f5:ee:75:dd:c4:c6:8d:7b:35:fc:02:48:
31:6c:77:94:76:eb:e2:c9:91:c7:1c:0e:bc:b9:7a:19:cf:71:
bc:21:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:40 2025 by rpki-client