Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: 2m6xfwx73OghdDJFmRQLRZAjwAhoedz2G1N4zRizovo=
Subject key identifier: 53:81:F1:6F:90:EF:E2:F1:EC:FD:D8:A7:6B:94:58:1C:8D:C5:43:BB
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 01987E65FB0D665BD9D30D1105945081F547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 0520
Signing time: Wed 06 Aug 2025 08:01:09 +0000
Manifest this update: Wed 06 Aug 2025 08:01:09 +0000
Manifest next update: Thu 07 Aug 2025 08:01:09 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: KgM0NOiGU2LvT+IXFH8DnQDWssDKGd4U7ZTdFrMLCzQ=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:fb:0d:66:5b:d9:d3:0d:11:05:94:50:81:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Aug 6 08:01:09 2025 GMT
Not After : Aug 7 08:01:09 2025 GMT
Subject: CN=5381f16f90efe2f1ecfdd8a76b94581c8dc543bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:c6:a2:96:70:5f:45:fb:4c:93:bd:de:ea:
0e:a8:0e:b4:fc:ac:1a:07:35:15:7a:8c:e3:f6:99:
6b:5c:f3:0b:fe:33:f0:03:50:ad:68:90:bd:2b:d9:
e3:bf:d7:cb:21:11:79:22:96:53:82:ba:b0:9b:42:
b8:76:1a:ce:81:07:5c:d4:78:37:fb:53:b0:04:3c:
69:12:ee:85:33:dd:b5:5b:8d:54:2d:53:a8:a8:68:
73:2d:48:c1:c1:21:b2:eb:50:29:e8:5b:33:1d:52:
09:6a:2c:f0:90:e0:9f:cb:9d:5b:a9:2c:10:b7:af:
41:92:45:51:b2:a1:08:ed:6c:7b:79:03:cd:49:c9:
0c:02:53:9c:a2:98:e1:f2:59:0a:b6:66:a5:02:34:
3c:b7:2c:85:50:8f:db:0e:6f:5f:a2:35:da:49:21:
e1:b1:be:9d:d8:83:5b:08:4b:dc:b3:f7:92:71:1f:
bb:aa:fe:ad:0a:67:4e:fd:56:11:a1:ad:4d:4a:c6:
a9:cc:7f:48:d0:58:9b:f1:be:36:49:5e:6d:ac:7b:
79:17:68:d9:ff:1a:b5:e6:f2:68:2f:7d:65:a3:48:
c8:af:07:57:3b:ac:e5:77:49:ff:21:cd:4e:4c:b0:
47:20:c2:7a:d4:08:3b:93:0e:f7:88:09:71:ef:5c:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:F1:6F:90:EF:E2:F1:EC:FD:D8:A7:6B:94:58:1C:8D:C5:43:BB
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:83:6c:d7:71:fd:41:83:3a:2e:d8:55:72:fb:44:3b:2a:
34:ab:47:71:fd:e5:c2:c6:e4:dc:77:55:a7:0e:8e:23:c9:b2:
07:43:23:68:55:60:d5:7c:3a:bd:ee:0e:7e:03:06:24:5a:07:
c6:a0:d8:a6:f5:37:27:6a:19:4b:37:5a:31:cf:fe:14:c5:73:
71:1b:eb:27:f6:67:23:b8:b0:cb:12:e2:79:71:2c:82:20:89:
bc:01:6a:bf:cb:48:5e:3e:f7:64:f6:5b:ad:79:a6:f4:79:1d:
dc:ba:d9:71:6b:77:e8:38:8b:59:bd:32:4a:f5:68:0f:23:59:
5c:87:93:a1:a8:bb:f2:ed:94:c2:7c:2c:47:7c:c0:97:76:4f:
69:44:be:14:91:9d:35:2f:f2:01:93:a1:43:e7:b6:41:2a:c6:
d3:c5:66:e9:47:0c:35:dc:5e:0f:87:17:7c:a5:bf:57:3d:68:
ba:65:c8:05:4c:76:41:87:cf:4a:be:24:e7:8b:72:82:a1:eb:
43:b6:a6:6b:05:72:b7:1a:25:7c:4e:d0:8f:c6:1f:9a:54:5b:
1a:5d:d8:f5:b5:c8:7a:6e:96:6f:f2:bb:27:8d:1d:99:8c:bd:
c8:26:5d:93:5f:2e:24:4a:28:57:c0:27:a8:25:5e:83:e9:28:
eb:9a:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:04 2025 by rpki-client