Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: 6sKkIA1SpZ2Vxf4Np8ce/Hol1SafCU7Vh3cAnMLoRBY=
Subject key identifier: 8E:31:70:C2:93:06:B5:A0:40:03:85:5D:3C:F0:1C:7E:87:3A:27:7F
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 0198D6298AF79A3A1F6E3B22750DD12C203B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0CB0
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: fVMybTBmkjjCK82C9G08nSU6lfK2t0cMSKg+oKnSG/Q=)
2: U9_szKR8srbhSHiXME0hISvB9zk.roa (hash: Zqb60PKOf5F6hXcN+4+/4uUqXILXd/JHdWXXHL4XlcM=)
3: UHt5Ue5EHvA2-W-Xmt-sxStGQG0.roa (hash: 2fRtxNUH3Aca8LFhSmKgwKn175stfHslO6K/ewoks+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8a:f7:9a:3a:1f:6e:3b:22:75:0d:d1:2c:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=8e3170c29306b5a04003855d3cf01c7e873a277f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:32:97:c4:61:84:95:24:4f:63:01:d1:1e:
f8:18:3e:b4:f2:91:89:26:c7:02:6f:ef:1b:70:ca:
fb:10:cb:e5:7d:7c:4a:2c:7e:75:48:22:16:97:b0:
04:46:26:08:12:3f:4b:39:e4:bc:5d:4f:c6:f5:8f:
2d:e0:a3:87:d1:9f:be:18:1b:89:e8:1c:28:31:bb:
51:05:85:9a:b9:20:63:f2:c1:ad:31:c4:56:20:2a:
dc:aa:9a:ca:38:19:78:f5:c3:fe:fe:06:f8:22:68:
0f:8a:71:e3:58:03:00:19:06:e7:17:e8:40:41:72:
fb:6c:d3:86:89:86:d9:fd:4c:64:d1:63:ce:16:c7:
3b:eb:2b:d8:26:93:25:27:b4:c7:45:f5:d4:11:6a:
50:99:21:d6:c8:58:0b:54:27:50:8a:88:6c:cb:9d:
51:39:7e:ec:ad:67:6c:08:09:23:2f:88:b8:b6:a4:
5d:69:53:67:23:32:c3:cc:66:64:ef:df:41:16:0b:
6b:21:c5:19:c1:0f:63:34:8b:45:df:6a:c2:78:eb:
3f:ea:93:25:5f:63:c2:ac:c2:9a:60:f9:45:b8:76:
9e:c8:3b:74:d1:4d:53:ca:61:b2:75:83:21:df:95:
0b:dd:ad:e3:53:86:91:c1:a3:04:76:96:a9:50:be:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:70:C2:93:06:B5:A0:40:03:85:5D:3C:F0:1C:7E:87:3A:27:7F
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:4f:8e:c9:05:70:fc:02:bc:74:f9:ed:a8:65:99:bb:35:
c8:1f:d4:6a:ec:44:4f:e3:00:4f:3b:07:1e:e7:78:25:93:f3:
33:dd:08:6f:44:a7:ee:cc:f3:b8:d7:a2:fb:19:5d:d3:cf:d6:
5d:2f:c3:c7:25:65:03:9a:47:6d:9c:ed:2e:c9:a3:a7:2e:a2:
ca:8c:be:d1:93:a4:e1:f0:d2:03:ac:24:e7:18:dd:eb:93:c1:
b4:0c:63:b8:32:ab:0f:cb:db:56:3a:81:49:33:fa:2f:f1:fa:
61:3a:71:48:80:d8:b7:74:90:80:7f:58:e0:01:53:2c:a9:bb:
50:2f:40:cd:4f:b5:c2:1d:3c:7c:c8:11:29:e3:d3:ad:ac:f9:
66:2a:62:f2:bc:ee:38:45:21:c4:fa:ac:78:e9:0a:d2:a4:71:
8a:fd:93:88:6b:a8:7b:ff:d6:23:42:49:66:58:90:66:ee:73:
57:36:ff:48:2f:a4:ee:b7:b3:2f:ff:bb:82:a7:eb:ac:5b:d0:
da:c4:20:c2:5b:25:e9:c3:1f:f3:7b:1d:fb:6d:60:64:68:68:
f9:79:9f:c7:15:d6:d5:a0:0b:62:05:6c:7a:e7:e3:02:0c:38:
13:0e:3a:6c:77:d0:b5:59:ef:c6:d1:8e:54:28:28:ee:1d:40:
8e:cc:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:01 2025 by rpki-client