
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: JmHL4GqyXltf8qXLONXhPuctHxXoZmEt45hgksCwGVA=
Subject key identifier: AD:2F:7F:C0:2F:DA:EE:99:A2:BA:EA:3C:18:3F:D6:BA:1B:23:15:9E
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 01987F79A55B6D0FC3E060A1C53E933A900D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0A58
Signing time: Wed 06 Aug 2025 13:02:15 +0000
Manifest this update: Wed 06 Aug 2025 13:02:15 +0000
Manifest next update: Thu 07 Aug 2025 13:02:15 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: bV8vmwn3S4C58VJMUp3uxix/qZDAS4WsBkW5Avclc0E=)
2: ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa (hash: kpxqL73T43lKVSu7/H7qyZ0Ta1r2r6Ekr0F6N2fIhsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:a5:5b:6d:0f:c3:e0:60:a1:c5:3e:93:3a:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Aug 6 13:02:15 2025 GMT
Not After : Aug 7 13:02:15 2025 GMT
Subject: CN=ad2f7fc02fdaee99a2baea3c183fd6ba1b23159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2b:36:12:48:e6:ab:a6:91:ba:2c:04:0e:58:
a2:e2:30:66:51:15:fb:fa:5d:25:03:ef:31:4d:65:
6d:b0:53:34:4a:79:d6:a9:e3:3a:d4:55:93:56:fa:
06:a7:21:82:3c:17:88:cc:24:86:87:0b:fd:90:26:
44:59:12:e8:2f:24:13:23:50:e7:73:79:26:34:ba:
24:e8:10:44:42:c3:25:cb:3d:dc:d6:ba:d8:24:45:
4a:12:41:52:4a:5d:ad:d5:79:b0:d1:af:19:74:cf:
d1:80:b6:fd:d9:51:cf:ba:56:2a:9e:cd:2e:53:f6:
f5:9c:53:fa:49:e5:64:65:10:86:2b:b3:6a:34:a8:
48:d7:ac:4a:62:15:b0:71:78:bd:e7:bb:b9:f1:ef:
54:f9:0c:95:33:6d:d1:1e:b1:8b:cb:e8:03:87:b8:
02:93:2b:bc:6f:6f:2e:e7:60:0d:99:30:a9:c4:93:
74:07:d7:53:5b:76:65:e4:dc:f8:86:c5:a6:5d:3c:
5c:64:f5:a0:18:c9:24:e8:9c:99:77:ef:14:61:e4:
ba:db:6e:53:26:9c:0e:9b:83:79:45:37:7e:2c:40:
19:81:04:74:ee:45:e9:80:ae:c8:9f:ff:b6:86:e2:
63:ac:0d:a7:e9:8f:24:db:58:9b:84:a8:da:fe:30:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:7F:C0:2F:DA:EE:99:A2:BA:EA:3C:18:3F:D6:BA:1B:23:15:9E
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:b8:4c:74:72:f4:04:aa:30:c2:96:39:b4:31:e2:d0:6b:
5d:f4:f9:5a:a4:85:e0:78:c8:f7:a1:67:26:86:43:43:c8:35:
6c:a9:f2:04:20:db:76:7a:c0:6d:c9:e9:70:bc:51:26:03:02:
67:b2:82:d2:5e:24:aa:d4:f1:a4:26:88:22:67:c8:15:4a:3f:
6f:e4:74:66:a4:4d:03:42:fe:4a:ba:c8:d9:2d:97:f3:3f:bc:
36:4f:a1:14:f2:a4:34:28:bb:a4:28:33:ac:5f:14:91:52:9c:
16:71:ec:50:1f:e3:85:61:ce:6a:aa:fa:27:6a:5e:c7:bd:e9:
ef:d8:b8:d8:47:91:3c:6b:16:61:d0:9d:65:ff:30:b4:c3:9b:
e0:53:e6:b9:4b:a3:11:55:d3:cb:87:6c:ef:03:f6:6c:10:a3:
55:31:aa:ae:df:b7:72:ff:b4:ff:07:f4:27:d6:d6:1c:32:1a:
fc:66:6f:af:48:92:06:5d:da:77:44:05:11:d6:91:53:84:7f:
98:4a:c6:ce:aa:70:27:07:1e:73:99:9e:47:f2:87:8e:c8:83:
27:82:6a:b1:3f:08:62:5b:d0:b3:97:10:15:53:00:b3:47:f2:
8e:1e:3d:9b:8c:af:60:3d:c7:b4:45:14:fc:fb:ec:ac:e6:dd:
8e:b8:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:29 2025 by rpki-client