Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: HhEHOSTDpGqCB8V/Qh2ryigs2BKPGvl0ZPlnMuewreY=
Subject key identifier: 0D:F4:E6:78:B2:D2:34:AB:1B:D4:1F:46:E9:96:DB:85:FA:CD:70:4B
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 0198D4E0577E5593639EFD4CBB0FEA4A1475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 06B4
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: YlrQnz8ekqYzLw2aZ4Tjy1KgBi6w/mhLXemce33RSqw=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:57:7e:55:93:63:9e:fd:4c:bb:0f:ea:4a:14:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=0df4e678b2d234ab1bd41f46e996db85facd704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:20:59:00:b9:e5:58:76:5b:a4:9e:8a:5e:
1f:57:b0:ad:60:95:40:27:c4:4e:4f:82:c0:f0:1b:
1e:a5:4a:d2:cb:0d:11:ee:b5:12:3e:cb:ae:4d:6d:
94:8f:5f:68:50:14:de:b2:4c:b0:ef:8d:11:57:43:
db:46:94:7f:06:c3:28:74:0c:60:00:8f:af:45:a1:
ea:d5:ea:f6:85:b0:5e:52:80:2d:bd:07:62:89:bd:
44:bc:aa:5f:76:b8:fa:8e:91:f9:34:76:4c:e3:0c:
1a:86:1a:2e:c1:5f:e0:7d:cb:ea:c7:c3:ea:e3:58:
c4:e8:a8:d5:af:ab:25:61:6c:db:ad:e3:2c:4b:16:
81:bb:8b:e9:78:ce:90:97:cc:28:a0:52:fe:31:8d:
91:f0:97:20:59:08:fb:03:f8:4e:52:ce:8f:55:b7:
f6:cf:58:15:7e:de:e6:4e:11:ad:6b:e3:b8:c8:a5:
c5:7e:ca:5f:c4:8c:1f:c0:b7:a1:80:a6:a6:ee:83:
98:65:ae:76:fb:3d:cf:f3:7b:24:c0:21:e9:1c:ab:
f2:06:b2:e5:f7:de:69:29:16:b1:4d:b4:ff:f4:56:
28:e3:94:6f:68:2b:a9:a1:4a:19:dc:e6:f7:b7:f0:
5c:b3:a2:5f:d1:5b:a4:17:a6:09:3c:5f:ea:d9:bd:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:E6:78:B2:D2:34:AB:1B:D4:1F:46:E9:96:DB:85:FA:CD:70:4B
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:4c:0c:af:c3:3f:09:48:d5:6a:cc:21:56:32:e8:b2:dc:
65:57:1a:57:55:73:89:ac:bb:b8:a2:b9:82:e8:90:76:74:29:
6e:1b:cc:fe:13:fa:fa:0b:2e:52:af:1b:24:ea:5f:32:18:8b:
ae:60:fd:85:8b:07:2a:18:e7:8e:6b:90:1a:e4:e5:1e:6d:84:
55:99:c0:4b:d7:ec:5b:a1:25:3d:86:4f:ce:28:a1:ea:8d:8d:
29:15:17:a3:b4:8d:b4:4d:fe:38:c1:97:d6:47:80:77:d5:e2:
e7:eb:ae:d3:58:84:00:9e:75:79:ff:98:55:35:6d:38:73:37:
4e:9d:1e:7d:f3:23:17:7e:28:da:7d:36:24:0b:f5:1e:dc:a1:
ba:44:43:a2:b5:63:e8:a5:44:3e:47:9a:d1:00:c7:50:b4:0f:
de:dd:69:6f:d6:6e:0b:47:93:8b:da:e3:2a:89:dc:d0:25:20:
9d:72:b0:f2:a2:29:91:cb:58:66:2e:da:e9:8e:f5:9d:04:fe:
9d:0f:e4:ef:af:34:d0:37:af:5f:74:66:60:b5:d8:6a:7b:6b:
e5:75:62:4c:8a:c2:b7:e1:9a:70:a6:0d:a7:f2:60:cf:93:4d:
9f:f7:14:f4:b8:b9:bd:91:e3:39:f6:cf:fc:30:98:b9:fe:1c:
ad:19:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:52 2025 by rpki-client