Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: VP5kXPf2Zrrlvtwp4SKm5ZC7RCwdIm26q+Y+4KzAsNQ=
Subject key identifier: 88:E4:90:62:18:28:40:6E:DD:E3:C3:8E:FD:96:07:76:DE:C5:08:F0
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 01988EEBC28CBF1814640011F684200F03EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 02E3
Signing time: Sat 09 Aug 2025 13:01:12 +0000
Manifest this update: Sat 09 Aug 2025 13:01:12 +0000
Manifest next update: Sun 10 Aug 2025 13:01:12 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: 3uPUbB4g8GkDPz0dJTIT/2MgxTlxFQu7m8c68curyT4=)
2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:c2:8c:bf:18:14:64:00:11:f6:84:20:0f:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Aug 9 13:01:12 2025 GMT
Not After : Aug 10 13:01:12 2025 GMT
Subject: CN=88e490621828406edde3c38efd960776dec508f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:6b:0e:c5:f2:fb:27:09:c2:36:f6:05:65:
a9:a7:7d:df:37:51:32:ed:ae:5d:40:b4:0e:cb:3d:
05:86:23:fb:91:31:3b:5a:80:64:f0:28:39:b0:48:
89:22:2f:0c:83:9f:90:2c:09:34:1b:68:cd:43:41:
8f:09:08:5e:8c:09:65:f1:aa:3b:83:51:94:17:95:
27:e0:13:69:00:56:d4:d5:b9:b9:51:87:fd:99:cb:
5f:a7:e6:18:01:97:6f:e3:c7:4a:55:61:5a:6c:3c:
0b:71:00:d6:a3:78:30:5f:c9:90:55:52:98:45:70:
93:2b:ef:ea:1d:7c:2c:34:2e:28:25:8d:c4:36:94:
6e:8b:ee:65:5a:8b:86:19:5e:95:2e:1d:3b:1e:70:
a6:71:a0:0a:fe:01:97:22:15:03:8c:ec:8d:72:0b:
54:8a:20:64:b3:a8:a3:c2:86:1b:f6:b8:ee:54:8b:
1f:39:90:34:9b:1c:01:5c:5a:f0:22:31:30:b1:71:
47:a5:ba:c0:f7:36:8f:c9:c1:02:12:45:a5:69:c6:
bb:51:0c:b9:ac:91:02:37:2b:10:bf:0a:ab:36:c0:
f4:e5:21:77:33:a7:f6:b1:03:69:fa:b8:6b:ce:33:
f7:69:b8:42:1d:04:49:f2:e3:1e:73:30:60:2d:86:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:90:62:18:28:40:6E:DD:E3:C3:8E:FD:96:07:76:DE:C5:08:F0
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:f4:7e:7b:85:20:59:8b:ce:1b:f0:f1:b5:41:d4:05:45:
e7:a7:f1:5e:f6:07:4f:8f:d2:d4:c5:54:06:e0:0b:57:71:5d:
00:df:d8:bc:80:af:3f:10:8d:eb:19:2c:6a:cb:d4:2a:a8:4c:
c0:eb:96:bd:df:3e:6b:9a:47:65:2a:85:cc:b1:03:36:4f:78:
ce:ff:85:2d:c0:b4:0c:11:a6:73:be:ff:80:da:31:4e:33:b6:
02:2a:c1:0c:24:76:c2:33:fd:7b:9b:75:c8:14:dd:c7:ef:94:
bf:70:31:ff:c2:62:d1:ef:da:c4:83:ff:99:53:0e:25:4d:c4:
e3:d5:60:66:c1:bb:00:83:11:cd:d1:66:04:a8:c4:a5:63:9e:
e2:1f:67:97:ec:65:22:3a:05:14:77:11:c8:0d:7c:8e:60:de:
76:f4:f0:af:41:9d:73:cf:ab:70:e8:7a:88:11:2b:bf:c1:f1:
35:25:aa:d9:11:b1:c8:1d:0a:65:d7:87:9d:09:79:3b:62:04:
6c:8c:f4:d7:98:a6:c6:66:5b:87:a1:57:98:29:3b:a5:3f:53:
e5:e9:4b:fb:b4:5e:db:09:a2:db:fa:cc:da:d1:77:68:a7:62:
c1:1b:60:43:a1:b1:80:c0:09:50:bc:fd:4c:d1:4b:06:62:2c:
57:4b:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:41 2025 by rpki-client