Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier: 11KcP771BxVqh7DQlUiBUdtqqoEM9Q4khtMyyUQiJa0=
Subject key identifier: B0:F2:C9:ED:30:16:A3:5D:13:EE:8F:37:C9:F7:9F:DB:F3:5B:11:00
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial: 0198D4E03CBD8ABE975E3EFCD1758B7D856D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: k2rdZLm4AG1KkEhnX/e3gvYHcQ1mWa/eAAeOhmu0L2c=)
2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3c:bd:8a:be:97:5e:3e:fc:d1:75:8b:7d:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=b0f2c9ed3016a35d13ee8f37c9f79fdbf35b1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:cc:31:d1:cb:19:97:3d:12:86:11:0f:c0:
c0:d9:b8:61:13:63:7b:2d:54:af:0b:08:cd:79:ca:
19:e6:57:e5:d7:cb:64:60:22:9f:c4:d0:25:b5:c7:
90:32:b9:b5:81:77:3d:52:fb:89:fc:8f:e9:07:7c:
cb:72:ce:96:ba:d5:d1:ae:5b:5b:ef:7c:28:38:dc:
f2:2b:0e:3e:1e:ed:53:69:38:b7:86:79:8c:42:f1:
a9:ff:de:27:1e:2f:90:58:c6:d3:19:26:a3:a7:87:
0d:c4:6d:8d:52:56:0e:9e:49:6e:59:76:0c:98:f0:
eb:f6:7b:d8:70:bb:c0:62:06:bb:97:48:72:a8:a5:
d2:a9:1b:c8:a0:04:70:0c:6d:9e:b1:e6:1d:fe:c4:
2e:d3:97:ff:9a:e0:65:ac:7e:1f:bf:10:b4:69:5a:
14:b3:35:35:7d:e3:fb:a9:af:9d:d0:11:2a:70:b9:
a4:f9:f2:3d:53:23:93:05:5c:d8:06:3f:d3:8f:93:
82:23:58:ca:3f:c4:82:2a:9e:b5:b2:fe:a0:c5:74:
72:cc:20:ba:36:47:97:cd:f1:14:e2:15:99:98:df:
79:9d:07:d0:a2:6e:fc:d0:11:bf:43:e5:46:66:4c:
18:0c:eb:a1:89:4e:65:38:a8:e4:d1:04:1e:81:3a:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:C9:ED:30:16:A3:5D:13:EE:8F:37:C9:F7:9F:DB:F3:5B:11:00
X509v3 Authority Key Identifier:
keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:eb:25:70:5b:f3:82:a2:4a:7b:83:3c:6e:9d:ba:86:fb:26:
c2:3b:c7:57:c5:cc:73:44:c0:bf:bd:00:62:3a:ee:bd:a1:88:
81:39:26:29:e0:0e:f2:f7:c1:de:08:b7:46:02:f5:be:19:61:
7b:93:03:e4:82:66:47:42:be:ce:31:83:9b:b3:4b:87:c0:31:
04:9c:fd:87:72:a9:e8:36:7f:51:a5:56:6b:8e:84:4c:6b:0f:
b5:32:74:28:8a:c0:0b:8e:3d:20:b2:8f:1c:1c:a2:b7:6e:97:
66:87:98:c6:77:6f:68:89:a9:0e:97:f8:5a:4f:60:2c:f2:d1:
8f:b7:69:21:22:fb:b3:d7:da:9e:9b:65:db:d9:ec:0a:ff:27:
62:0c:a5:be:a5:7e:81:6c:ea:33:53:45:42:31:bd:fc:51:5b:
61:14:50:65:4b:ca:7e:80:fd:31:f2:c7:96:91:d9:ea:6d:a4:
d7:37:55:00:df:c2:48:ee:98:48:e4:9a:7e:02:86:0a:e1:55:
b3:29:32:51:ba:3f:6a:f6:d5:1f:21:2f:37:f4:6e:90:c8:fe:
68:6d:17:b5:2e:73:ca:f4:45:a3:ba:9d:03:03:d5:8d:b4:ac:
28:c9:d7:92:a7:89:ec:b5:89:a6:9b:71:51:34:c5:97:f6:4f:
8e:bc:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:21 2025 by rpki-client