Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier: ktGH66IiTcHVdFAb6FzHxLc1VwtY1NK68ZnjgrWnFNI=
Subject key identifier: 72:42:B2:6C:98:CC:6E:B1:55:38:E1:53:BF:C5:34:D7:EB:2A:63:5D
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 01987486A54E7C09B9F4807B191FE46839A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number: 03DA
Signing time: Mon 04 Aug 2025 10:00:37 +0000
Manifest this update: Mon 04 Aug 2025 10:00:37 +0000
Manifest next update: Tue 05 Aug 2025 10:00:37 +0000
Files and hashes: 1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: C0kvFvSG8Pzz2azBPHD1hKs9JK3FaQ8ZExNIdt5AKxE=)
2: IZobsVo8D0iMLl6R0arb5_tQtNA.roa (hash: k9u6wYsejWLpFpy4B5EqE+Go9z1mManh6wvsZ38Rnrc=)
3: fjcBIwD0UXboDtm9hQQuC4nZKFg.roa (hash: a7+yo1MMdqmC3Rdod1c+o5dbpKenkQKnUI7GqCwwDY0=)
4: jOTXaOGJoE6NDCvCKKBezqpIGGk.roa (hash: qYO092gSKFsXYhjhZOcwgA3qVjBaIAjkoDnU0SJsxRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:a5:4e:7c:09:b9:f4:80:7b:19:1f:e4:68:39:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Aug 4 10:00:37 2025 GMT
Not After : Aug 5 10:00:37 2025 GMT
Subject: CN=7242b26c98cc6eb15538e153bfc534d7eb2a635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:9c:da:dd:92:2a:bc:fb:2e:d0:12:e3:29:
2b:49:5c:8c:c6:15:61:d3:fb:fd:d2:27:04:7a:dd:
e1:80:57:1a:fa:e9:84:d5:5b:d7:30:7c:3a:ea:59:
3f:81:b0:e3:05:2d:cb:ea:76:d5:61:26:15:dd:e0:
ef:f6:cf:bd:fb:15:d8:3e:67:cd:2f:d0:9d:8c:3f:
26:7c:10:d5:da:82:50:0f:e3:7e:9e:c5:b2:a9:64:
1e:1c:37:36:34:11:41:d0:77:6c:55:80:98:80:f0:
06:25:7a:77:ca:ad:ee:b7:5d:59:c5:9b:9d:db:8a:
17:aa:c8:be:e4:3e:08:2c:92:75:36:d8:88:15:6f:
45:01:42:a6:e3:28:42:ab:6c:5b:54:5c:d7:4d:dc:
97:37:f4:6c:fc:a5:43:91:81:30:29:a1:c3:6b:6d:
9e:3a:41:1a:0e:79:bb:27:da:99:be:48:ca:67:f9:
c0:53:55:60:cf:81:f7:03:d2:e3:00:17:70:dd:12:
cc:15:d9:ce:a3:7d:4d:47:49:d3:24:8d:1f:a8:16:
11:8d:90:2c:4f:06:37:99:df:c1:eb:b7:ff:a8:6f:
30:ad:0f:a3:0d:b6:66:57:3c:9c:e3:3e:ea:8d:e3:
fb:3f:87:76:d0:0b:9c:bf:22:4a:3c:6e:45:d0:5b:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:B2:6C:98:CC:6E:B1:55:38:E1:53:BF:C5:34:D7:EB:2A:63:5D
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fe:3e:20:91:e6:f3:e2:a9:a3:7e:02:ae:f6:11:75:92:51:
2b:f9:d6:95:c3:7e:b5:3b:d4:a3:a1:16:3e:dd:fe:53:d5:ca:
bd:d4:a9:85:85:01:62:95:61:88:da:d8:22:a1:0d:63:91:25:
9d:e2:7f:32:f5:8a:93:74:b3:c5:45:09:12:3e:45:19:b4:c1:
ad:e6:01:1a:4e:34:96:3f:6c:64:3c:6a:d6:2c:f3:e3:76:e0:
00:43:06:7d:74:2d:3d:b6:fd:5f:6e:02:7b:ca:ef:cd:be:bf:
cd:05:87:e7:b9:d6:2e:33:04:8c:90:7a:b5:33:ad:a9:cc:ac:
aa:22:cb:c0:e5:bf:7d:62:f8:7c:f9:50:5a:2d:5e:bb:b2:5d:
3c:61:06:53:95:c5:4d:12:f5:07:01:e0:0d:52:68:32:b7:f1:
c9:ae:2b:83:e3:dd:be:42:50:56:34:4d:15:05:47:92:7c:96:
20:51:3d:3e:01:5e:a4:50:13:92:50:29:53:da:cb:87:a8:2d:
02:c4:84:5e:15:da:4c:2f:03:44:49:91:fa:04:f6:ae:c9:78:
20:49:b1:01:34:01:d7:be:39:28:29:c2:24:b7:64:44:08:eb:
70:e2:f0:04:e5:5e:fe:a0:89:88:67:3d:10:c7:d8:8b:2f:27:
a2:f9:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:15 2025 by rpki-client