Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: urz3C4GZBDzbWQy2PLQr2Dskp9ySieowqYBP8NGD3JQ=
Subject key identifier: B8:DF:5D:21:BA:8A:76:AA:CA:15:3F:35:A1:91:51:FD:B6:DF:7B:C8
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01988355FDD3957FF871BDC08BE484ADD155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 07:01:47 +0000
Manifest this update: Thu 07 Aug 2025 07:01:47 +0000
Manifest next update: Fri 08 Aug 2025 07:01:47 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: NdMBi4kC6N/OpxDiAAiApXYEu6510PF/yRrdwTFn6/8=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:fd:d3:95:7f:f8:71:bd:c0:8b:e4:84:ad:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Aug 7 07:01:47 2025 GMT
Not After : Aug 8 07:01:47 2025 GMT
Subject: CN=b8df5d21ba8a76aaca153f35a19151fdb6df7bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:79:b9:34:a7:25:8e:88:14:8c:de:91:6f:
a7:77:22:85:fd:b4:e0:65:a7:49:55:04:d8:d6:fe:
1a:2c:79:67:62:b4:69:62:48:43:b7:21:b9:71:bd:
40:31:fe:e0:9f:0a:31:41:ae:56:de:ba:e4:e7:56:
72:1b:c1:65:94:26:4f:fd:61:74:fb:8c:ec:65:6f:
19:61:28:1d:1d:94:61:6c:ca:74:48:90:44:e9:1f:
4e:42:e2:f6:46:8b:cc:5f:5a:79:a5:3f:5a:e3:9a:
21:1c:8b:59:13:6e:fd:c8:79:2c:56:62:da:c3:32:
78:d5:14:e6:f6:7a:56:76:1e:51:3f:a5:49:0d:2d:
b8:8c:74:d6:13:da:16:76:9a:71:13:fb:25:2b:8c:
d7:d8:72:b5:de:05:e9:ef:4a:16:b8:72:f4:ca:37:
6a:28:0c:bc:c2:1e:7e:4f:99:bf:d4:e2:fc:b6:bf:
e6:b4:8c:53:fa:13:3f:cd:a2:37:7f:1b:4c:98:31:
05:33:1e:2b:d6:67:a8:8e:2e:96:8f:85:92:04:53:
ff:6c:7a:6d:09:7c:39:27:d5:d2:d7:fd:77:20:df:
ed:3c:26:a8:c9:99:6a:32:f8:02:6a:37:c0:b0:45:
e7:06:a4:08:7e:41:ac:2a:d7:b3:78:b6:ea:43:6f:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:5D:21:BA:8A:76:AA:CA:15:3F:35:A1:91:51:FD:B6:DF:7B:C8
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:18:84:04:1e:73:08:87:d6:80:fe:fb:4b:61:79:40:74:
9e:d1:a8:3b:41:d7:45:a6:e0:b3:07:a7:38:7f:9f:c9:2e:93:
60:92:39:21:0a:4f:62:99:46:ce:7e:3f:4c:37:a3:9c:39:6f:
5d:4e:57:37:41:f9:95:96:96:91:75:99:0a:4b:62:b2:c9:79:
1a:1f:54:0e:be:d5:2e:14:63:9f:0f:2c:17:36:1a:72:48:e7:
07:91:9e:7f:ae:79:43:94:d6:5b:87:c9:f7:78:33:f0:0c:1e:
73:de:4a:3c:eb:29:0d:0d:32:b7:da:c2:f5:94:8b:a1:d5:b4:
f4:27:41:d0:4d:15:c9:a1:7d:e5:5f:da:94:29:93:e2:9d:42:
71:41:9a:3c:fc:07:82:81:53:38:69:53:08:e6:08:be:be:52:
0d:3d:18:04:df:ec:df:3d:3b:a4:9a:64:f6:31:43:87:8f:f6:
35:ea:c5:25:23:a7:cb:ff:61:13:0a:57:45:b4:b9:8c:a2:06:
f9:54:d4:69:36:ed:aa:1f:0b:91:93:f0:b8:7d:9a:0d:63:8a:
90:6f:81:db:50:f3:94:b5:e2:08:8f:b9:e8:86:74:8f:bf:83:
0c:b5:3f:62:ae:97:25:61:97:99:6d:1c:0b:09:37:83:75:ba:
2a:be:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:01:48 2025 by rpki-client