Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: HKTq4SCtzqc1MWPWzY9ccWx1fPqU3uWlyDpQefchiuw=
Subject key identifier: AE:7D:BC:1B:E0:FB:A5:3D:D4:09:44:31:0C:2C:7E:1D:2A:73:DB:9A
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 0198D4740EBB827AC8BAA7D66EA107673AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0B92
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: 6+HdOapJsJgHIy24jtPCWjMusqfYnxI1J87nph/Hy6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0e:bb:82:7a:c8:ba:a7:d6:6e:a1:07:67:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=ae7dbc1be0fba53dd40944310c2c7e1d2a73db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:03:9c:46:e8:d0:81:b3:f3:c1:60:6d:df:
0c:3e:17:25:30:02:1a:b9:51:d5:b7:5e:b5:ce:c7:
00:b7:dc:6f:76:5d:07:da:18:1b:a4:97:12:9b:83:
d7:d2:34:6b:47:2f:ac:48:c5:ae:b5:27:d0:0d:a9:
44:37:e1:56:b5:73:de:6c:3d:9a:6f:26:7c:fb:b6:
2c:89:14:1f:96:2c:80:60:a5:7c:67:52:3f:30:a5:
fb:78:36:ff:31:cf:72:c7:28:88:74:c1:6f:71:9f:
54:01:23:ab:bb:4d:9b:66:dd:5b:77:80:59:56:27:
fd:18:5a:bc:87:43:f5:79:ab:43:e1:ef:12:7a:f1:
dd:78:5b:9b:42:b3:26:91:a8:2b:ce:3a:ca:89:d4:
da:87:e8:44:78:df:4e:ad:49:d2:7c:a4:6f:c7:64:
9d:a7:eb:b0:d5:b7:a1:d3:2c:0a:fe:9d:f2:d1:e8:
8a:44:96:a6:97:7c:20:77:16:0f:80:cc:4c:39:b2:
93:e1:f4:06:6a:ab:79:1b:08:37:76:77:e0:df:5f:
d5:26:68:0b:c2:65:9d:68:8e:4d:04:eb:f8:77:58:
9a:17:47:7b:ad:1f:c4:f7:3f:7d:f6:18:1c:01:69:
f8:78:a2:29:94:54:1e:d5:35:a6:56:16:65:75:8c:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:BC:1B:E0:FB:A5:3D:D4:09:44:31:0C:2C:7E:1D:2A:73:DB:9A
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:5b:6a:14:35:0a:f6:d1:f1:f9:34:82:ef:5e:59:bb:61:3f:
b2:33:5b:50:08:2d:bb:3c:32:ad:70:14:7e:e4:a6:1f:c6:9d:
97:11:3f:23:26:e2:cf:21:d4:11:87:c2:04:0b:2c:e3:0d:94:
08:22:e2:7b:20:6e:21:da:87:a5:71:01:99:b3:a4:36:b0:40:
9d:e0:80:33:2d:ce:29:88:c9:81:d7:80:14:fc:a7:2f:15:91:
47:8b:68:0c:e8:88:3f:6a:81:5b:de:ad:9f:5c:58:39:d3:1a:
91:47:ab:33:12:6a:3c:0f:5e:08:f2:9d:43:f5:e3:04:35:e3:
9b:02:04:4d:5e:e9:dc:d1:5a:d3:49:e1:7b:eb:f8:c3:6e:a9:
72:63:7b:99:55:1b:fc:a1:45:57:39:9a:4e:f8:33:3e:d2:3c:
79:dc:80:6e:69:43:0c:5b:0f:eb:94:41:32:a1:a9:04:49:50:
99:21:02:03:fd:c3:00:e3:11:cc:fb:16:6c:1a:d4:19:76:da:
77:75:64:f2:0e:d0:1e:99:12:c2:3d:15:5c:8d:c1:c9:cc:64:
f2:a2:44:52:79:49:92:24:5b:55:2d:57:3b:2e:52:94:9d:d3:
3e:70:90:52:0c:91:05:40:da:c7:98:72:ef:0d:1b:36:3c:6a:
41:1e:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:39 2025 by rpki-client