Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: aM3GlPMcFV4v09pi5eb10hKOYiWKv7G4XwF89YqnsbQ=
Subject key identifier: D1:DE:35:74:E7:B2:3A:BF:6C:15:79:BB:6D:08:80:96:BE:B5:79:90
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 0198D84F8FAB86BFB3CE14D0A531DC4C6EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0954
Signing time: Sat 23 Aug 2025 19:02:29 +0000
Manifest this update: Sat 23 Aug 2025 19:02:29 +0000
Manifest next update: Sun 24 Aug 2025 19:02:29 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: KcRXp5UysZcLaN4bdzNMWnx5SWsO95dci4L0HX/EHis=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:8f:ab:86:bf:b3:ce:14:d0:a5:31:dc:4c:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Aug 23 19:02:29 2025 GMT
Not After : Aug 24 19:02:29 2025 GMT
Subject: CN=d1de3574e7b23abf6c1579bb6d088096beb57990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:18:e2:f5:84:cc:bb:c1:68:fd:e6:d6:00:
6d:e1:fc:10:4a:44:89:55:5b:bc:4d:59:c6:2e:6c:
24:f3:c2:c0:12:0e:51:4f:65:59:62:08:6c:0b:e0:
02:50:99:c8:40:50:d1:3d:f8:8b:a5:95:84:a8:c7:
d4:18:83:6b:a3:77:eb:b1:82:98:74:75:3a:74:15:
e3:ce:9b:7b:a4:7c:b4:93:d7:1a:03:31:c4:13:0b:
cf:58:60:e8:97:21:49:82:d6:51:26:c2:28:fe:27:
1a:e2:11:23:69:04:9c:68:6c:7b:91:c2:cd:3e:6a:
d0:df:c6:ba:4d:b4:ab:24:67:f1:00:15:86:14:1f:
d8:07:88:df:ee:d8:24:d4:6b:ec:0b:31:6e:ca:68:
b8:b7:5c:43:07:68:dd:f3:df:c8:79:a3:87:34:9d:
0e:92:bc:ac:a1:98:32:85:b7:47:83:98:a6:9d:5d:
a6:38:ed:86:12:6d:57:ef:52:96:3c:ca:a3:17:5d:
ce:06:9d:45:b5:94:6e:34:12:70:e9:6c:a1:f6:4f:
5c:f7:0e:fd:4a:40:31:eb:16:3e:c5:0a:98:66:6c:
c0:89:e0:a6:fe:a4:ab:d3:26:c2:07:aa:44:c7:5b:
e2:3c:ed:56:c8:45:4e:b1:46:5f:7e:f5:33:99:9e:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:35:74:E7:B2:3A:BF:6C:15:79:BB:6D:08:80:96:BE:B5:79:90
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:26:ef:6f:07:b2:87:46:f7:a5:03:07:24:43:f6:45:c3:58:
0c:b2:64:82:c9:e1:4c:8d:30:2b:19:e3:96:c1:40:e8:54:0f:
d1:2c:3c:8c:3e:66:7a:eb:92:d5:69:6a:87:22:52:5f:2e:fc:
a4:14:40:5f:dc:7a:a7:4c:cc:d7:8d:b7:b5:cd:03:20:f8:54:
f1:f0:86:71:35:b7:bf:77:60:62:c4:19:b5:22:42:b4:f7:42:
c4:d1:20:88:bf:2b:7d:59:15:09:32:e9:79:de:f7:b7:74:17:
72:28:ae:c1:73:b2:08:8b:5b:73:cf:27:75:e2:cb:53:c1:3c:
02:fd:38:e0:94:56:75:26:fd:d4:b1:fd:76:73:fa:40:3d:66:
67:af:18:9f:30:8b:83:78:ec:06:ba:c0:8f:43:a7:67:e7:1c:
d1:f2:b0:7b:5c:19:87:a0:3b:84:41:8a:b1:01:01:58:cb:bb:
6c:b2:a7:07:6f:07:62:fd:95:ef:fd:91:6e:31:d6:f1:19:3d:
08:73:46:b7:7a:83:0c:cb:3b:18:dc:f3:62:29:c8:8e:d5:17:
ee:0e:a5:1b:e1:95:ff:34:e8:b4:2f:ff:37:76:ee:ca:8f:73:
38:3e:79:cd:a0:a2:ad:4d:5e:ab:6c:91:3c:52:1b:33:14:48:
e1:74:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:34 2025 by rpki-client