Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: ZB9RrJ0EarUYu6wmisDzC8c5Vl0fKl0Q0+bfUjNgUKs=
Subject key identifier: B7:D1:3A:CE:3D:89:62:EC:ED:3F:EE:5D:A6:68:00:AF:E5:BC:16:F7
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 01988DA1E1D0D43F42698AB35AA35C630AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 07:00:53 +0000
Manifest this update: Sat 09 Aug 2025 07:00:53 +0000
Manifest next update: Sun 10 Aug 2025 07:00:53 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: PNBi9YuSbaf83sAh+Kdl1prV3rd/ZttFYj3XHwrKyig=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:e1:d0:d4:3f:42:69:8a:b3:5a:a3:5c:63:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Aug 9 07:00:53 2025 GMT
Not After : Aug 10 07:00:53 2025 GMT
Subject: CN=b7d13ace3d8962eced3fee5da66800afe5bc16f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:4f:4a:67:7b:8e:14:c5:2b:40:85:12:59:
19:c2:af:d8:14:d4:dd:53:0e:02:e8:37:97:a5:2b:
c6:6c:b2:5d:aa:8d:29:80:d9:94:e6:aa:3c:df:45:
37:85:d7:7e:09:17:27:c6:48:98:a3:6c:b1:5e:24:
f2:5b:6a:63:f5:39:6a:d8:28:c2:b1:f7:e0:5b:97:
75:bf:b8:2d:8d:6d:30:04:5c:05:a2:c2:3a:7a:be:
27:a1:e2:32:86:ca:28:b2:d9:c2:da:59:0c:5e:5e:
0a:77:ce:db:b5:76:87:9e:99:cd:96:58:05:cb:b7:
04:19:eb:52:3d:54:b8:cc:8a:6f:82:1e:4c:b7:05:
83:9f:9d:b2:4f:cc:52:04:1f:f8:c8:19:0c:65:a9:
95:95:d7:04:d4:b9:a8:89:5e:df:56:28:bb:02:93:
73:3e:f7:61:3b:9a:43:f6:af:09:92:24:1a:b8:cd:
4d:c6:a3:86:63:16:b5:0f:fa:cf:2c:91:d1:c8:c0:
8d:e0:eb:36:8e:93:5e:19:e8:d9:f5:4f:97:fa:f1:
75:a1:3c:f8:8d:7c:79:30:af:18:58:0b:86:70:ba:
ce:e6:37:4a:39:62:09:ce:d9:7f:73:af:d3:4b:ca:
a7:fc:9c:5a:9a:19:42:65:f8:5b:7b:23:60:4f:f1:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:3A:CE:3D:89:62:EC:ED:3F:EE:5D:A6:68:00:AF:E5:BC:16:F7
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:55:8e:c5:5e:f4:0e:84:0d:08:de:1d:9a:33:2d:44:c2:91:
41:11:3f:d8:5c:8d:3f:3d:77:f7:e7:8b:3a:d6:36:8b:4a:b8:
a5:3c:80:da:00:47:4c:b5:e0:54:31:b4:b1:e2:3d:31:a2:e7:
cb:0e:d8:63:41:ef:d1:0c:66:c6:81:f5:68:32:e9:0f:1b:e6:
1c:3e:c8:32:6b:5c:07:3c:e8:0b:20:f0:84:bb:66:12:6b:c5:
a2:7d:cc:e0:59:70:c0:1e:fd:1c:24:12:40:e4:55:9f:7b:f6:
af:9e:ed:3f:94:b5:bc:9e:a7:03:e3:4d:f7:27:6f:c9:97:bc:
85:f8:1a:df:74:79:13:05:19:2e:7e:a1:8e:f6:6d:46:61:18:
bf:a2:d1:d0:bc:e6:47:a7:a7:d0:00:80:b9:a9:b1:68:aa:e2:
e8:96:6d:18:72:59:16:02:20:6a:10:98:51:bc:92:9c:00:b4:
6e:d8:18:3e:35:39:5e:55:df:84:59:b1:19:a1:2e:d1:e8:aa:
d4:b1:42:6a:8a:3f:58:79:6c:ed:f2:5c:d3:2b:9b:02:30:a8:
5b:da:c9:2a:f3:38:36:7b:4a:ae:3e:ce:de:57:b0:b4:7c:38:
1e:77:2f:9e:33:65:73:b0:e7:6c:9c:ff:1f:7a:61:6a:d3:9a:
f2:1b:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:45 2025 by rpki-client