Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: Ks3iecowkkSnc4gB1D+ecxDuZdk2bKJ4f995W/y0ZGk=
Subject key identifier: 62:06:84:C0:09:D5:F1:D3:49:A4:AD:97:63:F6:F1:2C:9C:70:9E:A2
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 0198D51628047A7B68BF6C2FFC9DA8EDA33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 06DF
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 0DL+2MrtdsDMUYbarbGUY4HPc3O+nWvy8j0JsKbsVEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:28:04:7a:7b:68:bf:6c:2f:fc:9d:a8:ed:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=620684c009d5f1d349a4ad9763f6f12c9c709ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:42:f5:f8:c9:7d:4a:fb:84:22:9e:b6:9c:
87:9b:04:cf:7e:94:36:6f:69:69:e5:ae:7a:b9:cb:
14:59:1f:5e:c6:bb:f1:b5:35:b7:54:02:1e:ea:9f:
5e:97:53:5c:e0:29:93:22:63:20:13:6b:3c:c7:25:
66:55:a0:6f:ca:cc:bf:6d:c3:72:9f:f7:75:31:a1:
a7:8c:b6:51:a8:3a:c3:67:89:e3:cc:78:de:d6:be:
48:a7:bb:db:81:64:85:03:c7:5a:d2:5b:60:a4:94:
15:c6:de:90:f5:58:e2:b8:62:d9:03:8b:0a:7b:7d:
ee:ff:c3:25:13:89:ae:79:0b:40:1c:fc:0e:8b:41:
74:37:03:16:07:9b:85:fc:5e:7a:df:a7:df:3f:e1:
5d:6c:29:7d:c4:45:0b:6d:12:e5:d7:f7:97:7b:56:
bc:b9:4e:d0:fa:6a:ac:d3:e6:70:27:aa:3a:41:7f:
b9:73:b4:51:0c:fc:a2:fe:53:8b:67:b0:50:19:26:
58:40:7a:24:63:c0:20:1f:95:55:c2:45:e5:01:7b:
16:a2:43:f3:e5:85:a8:8e:fe:a6:99:5e:3a:92:5d:
69:3c:4c:0f:cd:de:22:09:9f:84:7a:ef:30:b7:0e:
cf:6b:3c:24:9f:81:3f:04:ac:47:85:59:23:21:29:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:84:C0:09:D5:F1:D3:49:A4:AD:97:63:F6:F1:2C:9C:70:9E:A2
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7c:c9:71:78:5a:41:ab:3a:76:bc:96:1d:32:35:40:32:5b:
4c:cb:e6:0e:80:5d:dd:72:bc:44:84:b2:6c:44:16:70:a8:f2:
4d:30:6b:01:18:12:a7:c1:3a:e5:75:b2:a8:14:2e:d7:7e:06:
d3:e0:5f:bc:d1:14:7a:b5:7b:1d:69:ed:f1:fa:5b:c4:a0:d8:
48:95:f3:bd:dc:91:0d:67:cb:1f:7f:d2:1a:4d:cf:4f:56:74:
6a:2f:a5:3b:43:f0:26:e2:c8:c1:60:6e:3a:c4:3d:cd:28:cc:
05:5c:cc:09:79:b0:2c:30:3c:e4:ab:f9:19:e3:4d:19:05:c8:
32:d3:f3:5a:40:83:30:36:64:8b:9d:a8:21:ed:ad:b6:61:f6:
16:8e:ce:c2:7b:9b:55:61:ed:cd:19:95:9c:c5:2d:17:1f:01:
77:54:2f:1c:23:8c:b8:4b:d7:be:a6:02:19:7e:0e:48:ec:ee:
49:25:49:b1:8d:ff:98:69:5e:b0:f6:1f:21:6c:6c:6f:08:3b:
6d:fa:f4:a8:5b:80:e5:fd:ed:44:a0:c4:4a:04:19:37:6f:4f:
16:5b:7a:e3:b0:ce:13:25:a4:df:e6:2d:d9:44:88:5c:42:b5:
11:e8:f8:92:02:b8:8c:d6:a3:63:fa:b3:4c:ca:72:31:1d:fe:
dd:9e:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:37 2025 by rpki-client