Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: eUogHlgbtnpOA2/tiDL52tfQMz7Zfx8oodh+hu4SdPw=
Subject key identifier: 65:8E:0B:42:69:1A:41:DD:6F:A8:1F:53:E2:12:2E:87:D0:BB:92:1A
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 019896373B2A97379CB173F1DD479581AB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: A7
Signing time: Sun 10 Aug 2025 23:00:58 +0000
Manifest this update: Sun 10 Aug 2025 23:00:58 +0000
Manifest next update: Mon 11 Aug 2025 23:00:58 +0000
Files and hashes: 1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: IVPLjL3bfaGAnUo6lw8BkWgjyvQerjMYjYSeYMEhhvU=)
3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:3b:2a:97:37:9c:b1:73:f1:dd:47:95:81:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Aug 10 23:00:58 2025 GMT
Not After : Aug 11 23:00:58 2025 GMT
Subject: CN=658e0b42691a41dd6fa81f53e2122e87d0bb921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:8e:6d:63:1c:f0:9b:c5:f5:9f:c2:8d:02:
81:cb:ee:42:2a:f2:31:f5:b2:6d:2f:4e:75:90:dc:
a9:2d:6a:5f:40:69:ce:15:cd:66:32:dc:7f:29:6a:
90:fe:d1:72:10:d0:3c:e6:9b:cf:a9:37:de:b8:17:
ce:cc:88:f3:7b:88:52:50:38:00:9e:e8:8e:24:4e:
27:11:b4:1d:4b:0f:8c:95:bd:76:18:97:68:11:79:
a5:30:48:8f:48:78:3d:e1:fc:6f:c7:f1:5b:0d:e7:
68:cc:1b:85:f1:97:68:de:0e:87:b4:9f:ae:2a:d8:
19:1f:78:8c:c3:64:60:c3:7e:b4:83:b8:9f:96:a7:
c4:88:90:9c:26:59:2c:5a:e1:47:60:68:fb:42:98:
7a:b9:3a:a1:96:80:fd:d5:0d:b5:9e:f0:01:7b:bd:
41:1f:85:71:51:a7:5b:69:8d:c1:5b:71:04:fa:ad:
ae:3d:74:27:8a:fd:81:fb:18:73:6a:3e:27:18:05:
35:6c:78:d2:e6:2c:a6:ab:45:48:68:41:3c:bc:02:
69:72:38:06:03:79:25:e0:e3:6f:57:5d:b4:d9:7a:
fc:e1:13:06:1b:5b:60:41:91:cd:33:91:9c:63:29:
27:a6:18:c3:0d:19:62:56:45:74:6a:d3:16:fd:57:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:0B:42:69:1A:41:DD:6F:A8:1F:53:E2:12:2E:87:D0:BB:92:1A
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:60:17:83:66:5b:5a:f1:64:0d:2e:39:8d:73:a0:15:bd:9f:
2e:c3:37:90:25:58:9d:b8:d2:9c:b3:21:a4:c2:7e:5e:1f:36:
f4:b8:4c:b8:35:89:5b:3f:82:d3:ed:02:09:8a:36:6f:43:f9:
cb:d9:36:14:69:7c:0f:82:e6:61:56:de:be:d6:7f:25:1d:12:
6e:8a:5f:f3:13:a1:a3:e7:3a:10:4e:e7:c8:31:16:ce:0a:b4:
fa:49:19:ea:f7:34:88:1d:7d:ac:e4:15:30:56:b7:e6:3d:f4:
2b:a2:a9:dc:9f:83:13:c9:73:0f:69:bd:0e:67:d4:b4:64:33:
a3:07:4b:90:92:9b:00:b5:5c:57:3c:26:37:ec:02:a3:8b:6e:
0c:7a:ba:28:ae:4b:9d:99:96:70:4f:a2:0a:36:dd:99:f4:75:
82:b4:b0:b6:8b:dd:12:d4:bd:ef:82:6b:f3:ad:ff:34:bf:3b:
54:98:9c:fa:21:21:e3:4a:9a:f5:cd:15:20:f6:0b:72:fa:ea:
49:1b:17:ba:67:e0:48:d9:37:d0:a3:93:df:67:32:da:78:ab:
19:43:6f:8f:53:de:75:72:c6:5a:43:95:8f:f6:49:2c:79:b6:
d2:b8:49:4b:ce:1c:46:c1:98:d1:b7:9c:88:a3:53:56:33:a0:
f7:a9:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:30:02 2025 by rpki-client