Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: eOpEevRePglCz30pWyTD13z8s9Tn5+apUHHn9OnBVFA=
Subject key identifier: 13:8B:56:E1:30:60:66:82:33:0D:8D:C3:DE:A8:0C:AC:AF:CF:56:C3
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 01987CAE77FCE0DB7B6CD25077B41F0DD3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0D11
Signing time: Wed 06 Aug 2025 00:01:05 +0000
Manifest this update: Wed 06 Aug 2025 00:01:05 +0000
Manifest next update: Thu 07 Aug 2025 00:01:05 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: j/ixEa+NNo4Bh+R0E3N+U1WwfZLo/cngRFLoLoRhL60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:77:fc:e0:db:7b:6c:d2:50:77:b4:1f:0d:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Aug 6 00:01:05 2025 GMT
Not After : Aug 7 00:01:05 2025 GMT
Subject: CN=138b56e130606682330d8dc3dea80cacafcf56c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:51:09:ee:97:37:7b:9b:10:18:11:a8:3e:
8c:a4:61:8e:fe:95:54:a5:5e:b1:0d:37:0d:47:c4:
cb:be:c3:96:63:61:21:33:2b:2a:5e:f2:f2:66:d9:
d5:38:82:eb:6f:f3:83:0b:88:7b:a8:51:dc:d6:2e:
28:e2:22:2f:f9:53:77:16:be:d6:3a:07:6f:f5:29:
95:e8:5a:28:11:4b:21:57:52:81:7e:80:0b:0c:2a:
f5:70:90:a7:5d:a6:83:76:85:e3:e0:22:80:a0:d4:
14:84:af:4d:cd:5b:89:4a:c2:fb:13:ab:77:b2:c3:
1c:de:0f:18:c8:d1:49:76:8e:08:46:ff:51:9b:28:
d6:0d:d0:dd:98:51:b1:5c:9f:bb:b0:d0:29:5d:f9:
da:3d:e9:b6:77:fa:98:40:b9:0b:9f:e2:21:6a:44:
d9:20:0b:4c:db:e3:6f:ec:aa:31:f0:20:e9:a1:3c:
5a:19:b4:8b:9a:8b:8f:8e:a0:de:b5:ca:15:bc:3a:
03:59:30:68:c3:af:90:e9:b6:1e:76:b7:b8:cd:ce:
ca:ab:8b:3a:0a:ee:59:3c:9f:6c:d7:e2:8f:22:d2:
3a:60:64:aa:d6:cb:14:6e:31:ea:bc:99:0d:5d:5d:
75:e4:4d:13:62:2e:2f:20:9e:b0:b0:85:5d:1f:12:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:56:E1:30:60:66:82:33:0D:8D:C3:DE:A8:0C:AC:AF:CF:56:C3
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:7b:ce:26:b5:34:41:a5:3e:90:10:6a:b0:ba:ff:8a:ea:
31:2b:d6:15:34:d1:da:4c:14:a4:da:08:56:1f:ab:45:0a:8a:
ab:48:9e:ba:17:7e:be:a3:47:e1:87:70:e0:29:e5:29:dd:5f:
47:90:51:90:35:30:70:26:96:af:83:a6:cc:df:68:66:a9:cb:
82:94:85:e8:00:7f:20:fa:79:c2:e9:bd:31:05:95:c8:a3:e9:
27:d5:35:09:67:08:50:f1:01:74:e2:00:e3:b4:d9:cb:15:ee:
21:f9:ab:8d:57:19:92:1b:f2:91:81:1c:6f:0e:b8:d3:74:2e:
45:a1:92:6e:15:04:6f:b9:41:f7:8a:63:dc:d2:96:14:57:f8:
dd:7c:a2:54:58:b1:64:fb:b4:dc:94:6d:68:6e:18:85:16:8a:
97:59:a5:8a:17:39:b9:55:f1:20:16:6d:dc:78:ed:85:4a:0a:
90:8e:1a:81:84:42:38:0d:60:f2:c6:7a:0a:9f:e0:bf:42:27:
13:20:b4:af:8c:2d:3b:2b:56:92:ae:21:5d:9d:c0:4c:75:fc:
71:53:3d:45:1a:5b:c1:22:f6:d6:d1:35:23:6d:c0:fd:9e:f5:
63:b2:5a:0f:6b:3c:30:e9:04:22:71:a1:55:3b:91:5b:a7:56:
9c:37:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:36 2025 by rpki-client