Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File: 6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier: qanX2O7+gbFS+KNjGjPvm4hWWosTRBKByRMKC2N9fak=
Subject key identifier: 2A:06:A2:9B:8E:22:25:C6:1E:24:44:9C:A5:C7:BE:6C:F2:09:8A:25
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0198D4A82343ADBFB25534B230CA0DE0A8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number: 142D
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: 91iS8jtgLSG+V6R53bZmNnw5zr68T0GdO/tDikQLmMM=)
3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:23:43:ad:bf:b2:55:34:b2:30:ca:0d:e0:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=2a06a29b8e2225c61e24449ca5c7be6cf2098a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:43:28:a0:69:a1:69:c0:3a:b7:7c:b0:6d:
81:bd:69:15:7e:9f:cc:de:93:a7:07:a1:c4:60:03:
0e:65:c3:4d:85:9b:86:a9:1b:7c:34:f7:16:f1:50:
dc:54:37:f6:4b:1c:67:57:4d:37:a0:ff:07:56:8a:
e2:34:b7:85:61:03:32:74:f5:b8:35:f2:a6:ce:78:
89:a0:98:17:ea:2a:22:06:15:58:d8:61:81:a6:47:
3c:15:53:99:aa:b7:8f:c1:6f:b0:6b:76:34:72:42:
8c:7a:69:f3:41:26:2b:1e:f8:d5:63:e3:a3:25:af:
ac:b0:97:1e:08:d9:de:da:d7:ce:12:26:b4:43:9d:
04:eb:cc:0f:aa:96:df:eb:b4:af:47:58:52:ba:f6:
32:de:0a:48:4e:8d:dd:64:ce:97:55:f3:48:e4:f5:
4c:cb:b3:2a:68:e5:b7:87:af:bb:62:4e:48:59:e7:
be:d5:c3:18:44:32:7b:02:52:08:35:21:cb:df:b2:
b3:c3:4f:a4:bc:70:d7:91:0c:fc:a9:d6:64:77:ef:
00:cb:2d:bf:f5:a2:64:7c:47:89:d8:5c:5d:55:f9:
64:c4:41:c1:c8:be:37:16:2c:00:ce:24:7b:ee:f8:
63:a1:5d:d1:67:21:17:4d:fb:ba:d7:01:c8:50:c1:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:A2:9B:8E:22:25:C6:1E:24:44:9C:A5:C7:BE:6C:F2:09:8A:25
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bb:66:43:65:c0:4c:1b:ed:38:ec:0f:0d:1b:63:15:95:65:
26:d5:37:ab:3f:65:4c:8a:69:66:92:ac:5d:5c:88:44:8a:27:
a1:df:19:db:00:9c:10:04:f1:43:b9:5d:c5:b9:66:3d:0d:92:
e2:d5:f7:70:a6:d3:21:00:4e:f1:f0:6e:5e:12:c9:c6:51:09:
42:3d:85:1d:03:2b:62:83:4b:61:e1:55:c7:53:af:fe:35:cb:
9b:99:10:cb:6e:34:5b:7f:4d:4d:e9:eb:59:6c:e2:ee:51:92:
61:ce:11:cc:43:8d:4b:6b:2e:43:ad:3a:2e:47:6c:94:71:89:
40:78:00:01:09:36:ba:9e:4f:16:17:e0:49:cd:c2:fd:1f:32:
4b:79:ba:e8:f2:5d:bc:4f:57:d2:a1:9f:e0:1e:1f:fa:0c:04:
8b:bb:59:3f:c9:58:78:a0:44:b0:0b:0a:fe:7a:f0:60:0e:81:
f4:33:20:8f:fe:bb:cf:d3:ac:dd:9d:2b:cd:19:f7:47:bc:36:
43:b5:5e:6d:cd:c7:99:31:a4:54:6f:a9:ca:ca:f7:a5:ef:c3:
72:ea:96:5e:d3:cd:9c:a9:23:ed:d2:3b:a8:5b:52:74:37:b6:
9d:97:cc:a1:6a:25:34:12:5a:38:06:ac:2a:37:bd:f2:1c:af:
4b:68:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client