Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: BgDxpTu1Ou+Z1A/lrZr7MUO/ZjmXHl+RFKfvBENTbEc=
Subject key identifier: 40:65:99:12:35:8B:20:D8:69:3C:94:41:EA:D4:9E:EC:9C:9A:8F:AC
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 0198D58366C02331C1EB859061607805115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 010F
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: NX+j3qlqmxSlmgYNLFA4l9AiLu1t3F5rOu3wO9DB8eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:66:c0:23:31:c1:eb:85:90:61:60:78:05:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=40659912358b20d8693c9441ead49eec9c9a8fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:a3:4c:7a:96:74:0b:45:49:89:80:80:5b:
d1:51:bf:ce:80:e7:e7:1e:26:ba:74:f7:23:f0:d2:
3d:ed:ba:88:90:26:e2:cc:c6:8c:f1:85:cd:81:6f:
4f:7d:0d:7d:e2:25:2d:ca:40:9b:c8:03:64:37:c2:
a2:3e:45:24:77:b8:f9:8a:73:f1:00:c8:39:51:d4:
f1:46:88:3a:ad:9c:35:89:64:87:65:75:ee:07:2e:
36:0a:28:98:60:10:9f:f2:7f:4c:6c:48:6b:4e:0d:
75:72:82:46:6d:19:e3:62:6c:3c:40:2d:1a:90:77:
ef:da:64:48:f5:97:0e:eb:c5:7a:64:5f:ca:30:28:
7f:54:7f:5a:e9:f8:3a:24:43:55:34:ee:67:8b:96:
2b:53:00:cc:24:a0:80:a9:f8:a8:9e:eb:7b:90:20:
cd:5d:54:89:46:35:34:1c:1e:69:85:d7:20:26:0a:
e4:d2:22:a0:f3:91:29:cf:29:ec:80:b0:d8:c6:8d:
e5:f9:ab:29:8d:ab:14:f8:62:ce:75:ef:65:d1:aa:
cc:eb:65:c0:ee:a2:6e:71:3c:e4:8c:4c:aa:fe:9a:
34:4f:3a:e0:d9:87:2d:a7:a7:f7:92:cc:92:0a:6c:
fb:09:c4:02:3c:da:c6:42:f7:26:03:94:39:b7:f6:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:99:12:35:8B:20:D8:69:3C:94:41:EA:D4:9E:EC:9C:9A:8F:AC
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e2:3c:4c:02:be:d1:63:6a:b9:0c:14:7b:8e:a7:ac:49:58:
9f:e3:30:0f:fd:3f:13:fc:34:23:db:c6:8a:a6:5b:c6:56:c8:
53:49:55:2d:97:ec:b0:36:42:59:c7:ac:42:0f:e1:17:dc:5b:
6d:d7:49:8f:57:ab:ce:f2:7a:41:b3:d1:8b:08:bc:b1:04:4d:
29:a1:dd:99:22:50:9b:ed:77:5c:ec:a1:2f:58:30:37:25:f5:
58:04:40:bc:d8:14:10:22:87:8f:69:d1:64:e8:73:09:a9:cf:
03:54:2f:3e:ca:30:4e:9c:8a:b8:8c:2e:0f:d9:55:74:7f:f7:
49:0a:60:c2:08:63:bb:ad:8a:6e:e7:b8:ab:42:cc:ea:60:9c:
15:d2:7b:58:e8:34:95:1d:55:49:43:55:65:85:ca:ba:97:1e:
fb:ec:f3:f3:96:20:0c:2c:de:e0:1f:c3:fe:13:e8:ab:45:df:
e1:c9:bb:a0:84:a5:29:72:8c:59:06:40:24:26:81:d9:bc:65:
ba:c9:b6:32:2e:65:8b:33:ee:e9:e8:41:6e:73:16:5f:e8:b7:
4f:8b:b1:ea:f5:02:01:a5:1d:8a:69:6d:1c:cd:e0:5a:08:80:
d7:0f:fd:f0:ee:3f:05:e0:da:e6:e4:49:a7:f9:42:56:b3:8c:
86:a0:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:53 2025 by rpki-client