Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: ik0vWaXGtTUQsq25gUPdxYbudpSCPiiKNRWGPbmUUDk=
Subject key identifier: C7:49:E6:81:54:EC:14:C1:17:4B:AB:EC:B5:91:03:24:35:97:11:77
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 01987E65C1455364C53B63F3C3EFE228A02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 04E8
Signing time: Wed 06 Aug 2025 08:00:54 +0000
Manifest this update: Wed 06 Aug 2025 08:00:54 +0000
Manifest next update: Thu 07 Aug 2025 08:00:54 +0000
Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: Zas0UXo5/ljy44+3bj+aU92Im1M4bpfc9L78LUul+P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:c1:45:53:64:c5:3b:63:f3:c3:ef:e2:28:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Aug 6 08:00:54 2025 GMT
Not After : Aug 7 08:00:54 2025 GMT
Subject: CN=c749e68154ec14c1174babecb591032435971177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:42:c4:87:ea:34:aa:15:c6:51:7b:4f:d8:
6a:29:3a:ff:64:b7:9f:9a:f3:a8:f4:a6:ac:32:d6:
db:c8:b6:6e:2a:ff:29:bf:db:d9:5a:3f:2f:bd:91:
2b:90:7c:2a:cc:47:5c:8b:72:0e:41:ce:10:3a:68:
80:67:e4:53:df:e0:b9:ba:f0:78:a4:09:f6:18:23:
8b:02:e6:b9:ea:e8:00:26:50:d9:22:e0:a7:e7:cc:
c0:91:43:94:95:89:9d:06:13:45:7c:f3:ba:ba:14:
0b:91:91:cb:91:07:91:43:e8:85:32:ab:1a:22:57:
a5:e0:e8:30:3e:63:47:4b:6a:e6:5e:63:e7:08:24:
62:8f:a9:08:d8:64:75:88:cb:c3:d8:87:c6:28:ef:
ab:f1:39:dd:20:54:ba:40:d2:53:c2:c4:84:a3:28:
1a:28:e9:6e:6a:00:99:ff:a5:c6:c8:ee:63:a4:7f:
d0:6f:16:0d:f7:d7:92:d1:c4:94:5e:5c:4f:a8:d6:
7b:02:ac:29:51:7f:5d:dc:61:ee:08:de:4b:85:56:
16:65:f4:0b:e1:6b:3e:b2:9b:8e:ef:46:e1:ba:2d:
b8:e3:67:c4:e7:5b:59:8d:36:ed:11:b0:03:e1:23:
f5:aa:89:9a:92:a5:80:e9:99:25:ba:47:17:e4:eb:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:E6:81:54:EC:14:C1:17:4B:AB:EC:B5:91:03:24:35:97:11:77
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:55:4b:fe:f8:9c:85:64:c7:92:00:38:4f:3f:28:f5:2a:4e:
76:53:7b:83:73:d1:47:b5:48:32:7f:d4:45:bc:de:10:9a:72:
b5:70:f2:25:ee:12:bf:78:9d:04:28:a7:44:63:3a:c6:1c:d0:
ac:43:31:f0:18:a2:a3:2d:db:32:18:81:99:ce:66:a0:b0:b2:
08:47:81:5e:fd:25:11:60:6c:3a:66:9b:c3:c0:6b:b4:12:70:
36:45:b2:be:05:4c:de:f8:80:d4:d8:bb:1d:83:ed:38:e8:5a:
e5:b9:a9:83:f4:23:de:39:f7:b6:b8:43:d0:66:f6:1a:a6:d5:
2a:d2:ab:99:49:d1:52:f0:c2:4d:dc:3e:7f:7c:07:a2:1f:78:
45:2d:3e:f5:bc:c4:d7:71:99:88:b3:b9:38:0a:2e:b2:3d:8b:
bd:77:82:41:8c:2f:a9:29:2e:a6:72:2b:cb:c9:82:8b:fe:bb:
72:e6:93:6e:28:d0:4d:9b:8b:ea:6e:90:af:1f:18:4f:54:b6:
c0:3b:11:fd:02:2b:b2:68:64:e6:d7:d7:e9:6b:e7:f6:66:71:
91:2b:43:02:91:64:db:23:16:ee:87:02:4d:83:de:a2:31:6a:
76:69:f7:79:0b:81:a2:cf:47:35:49:1e:66:67:12:14:87:4a:
7e:53:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:19 2025 by rpki-client