Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: CDoKP2K+nC2DbVLO5ZEEKFlJfwAXPzJVBvz3ILYMxkQ=
Subject key identifier: 6A:25:DF:EF:0A:29:00:3B:D7:B6:C4:5C:87:32:EA:32:80:6C:3E:11
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 0198D583A2AC29C464EF7238478864632913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0670
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: +L7zbO2XK70FDVOvw/+nifXWM08lcjaU5VtE5IxrW9U=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:ac:29:c4:64:ef:72:38:47:88:64:63:29:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=6a25dfef0a29003bd7b6c45c8732ea32806c3e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:68:d8:a4:54:1f:68:83:00:df:75:e7:49:
81:b2:7a:ff:e0:58:d9:0f:8f:5c:f0:e7:e6:75:7e:
58:d8:0f:52:b0:c0:79:8a:9d:6f:45:47:40:46:9b:
b1:fe:b2:0c:93:25:a8:51:5f:30:93:ac:f2:56:00:
f1:09:1c:8f:a5:14:09:c9:9f:2a:c1:fd:9e:24:df:
5e:3d:b5:80:6c:81:59:8f:b4:d8:47:c7:47:d9:30:
bd:b4:a2:51:0b:a3:d9:5d:cf:9f:3f:0c:fd:d5:a1:
98:9e:87:e4:0f:95:7e:7b:34:44:97:c4:04:f2:96:
4a:a0:99:69:18:8f:a3:cf:0d:a9:0b:65:9d:6f:e3:
53:c6:3a:e9:1f:7c:20:2f:de:da:fe:91:45:1a:81:
b0:51:e0:d6:f2:4a:68:9c:ec:5f:14:66:bd:66:0f:
c7:75:ab:d3:7f:aa:4d:22:e2:d4:a9:84:30:51:37:
87:70:ff:f5:58:48:aa:ff:4e:a9:3a:ad:7e:ea:f0:
9e:c2:79:22:67:ba:c8:c4:af:7f:82:42:b4:db:c8:
ee:f4:a1:9f:51:a8:0f:c8:a3:35:e6:91:dc:bd:4b:
d2:b0:98:a0:71:76:d0:5b:ab:0a:f9:9c:27:6d:7f:
b2:81:7d:48:b0:82:c5:0a:45:34:dc:49:8f:3a:37:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:DF:EF:0A:29:00:3B:D7:B6:C4:5C:87:32:EA:32:80:6C:3E:11
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:83:70:31:eb:0c:f6:71:89:27:03:4d:24:fb:b7:fb:b9:4b:
b0:08:e8:51:b8:96:d5:4f:10:70:78:53:e4:cb:a9:a4:f8:a3:
dc:d4:40:5c:a2:e5:c1:a7:07:ec:92:46:b5:85:7f:f5:08:76:
2d:af:a1:78:56:70:4d:b6:a3:8c:23:1b:84:bd:82:82:0c:a8:
06:e6:ed:e2:be:e0:b8:e0:53:e6:e9:23:bd:b2:55:22:e1:cd:
cb:81:1c:d6:d5:cb:c3:39:20:9a:a9:69:c9:29:5e:a8:91:ef:
77:c2:4c:96:90:9a:0c:47:00:2a:4e:e9:99:8d:93:70:38:a1:
18:a2:58:33:65:7a:85:db:07:35:d1:3b:cf:a9:5b:d2:c5:cc:
84:92:ce:0b:56:23:90:aa:be:36:c7:fe:66:8b:53:4b:2e:b1:
20:ae:9f:5c:7f:38:cb:da:ff:89:0a:2b:88:c9:7e:62:a8:d3:
7b:57:45:d7:8e:91:be:52:c9:e4:52:7f:53:dc:df:8f:4d:c8:
4f:68:94:86:51:32:22:19:a7:b6:02:cd:90:09:e8:3c:6d:95:
e9:ef:5e:00:3c:95:ed:fb:6b:70:b3:16:9a:c5:3c:31:31:5b:
64:43:5c:26:50:c8:65:ad:4f:0a:f3:62:29:d4:c2:4c:31:1c:
86:33:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:56 2025 by rpki-client