Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: mnH6REeIcAh3tB+Ap905D2ZVFkqetwogtSUyxLZHVW4=
Subject key identifier: 81:58:8D:AB:5B:4A:97:46:B2:18:85:93:26:4D:84:DD:EE:4A:29:46
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 01987DF7EBFE86ECC496879D09806D7ADEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 09E1
Signing time: Wed 06 Aug 2025 06:00:56 +0000
Manifest this update: Wed 06 Aug 2025 06:00:56 +0000
Manifest next update: Thu 07 Aug 2025 06:00:56 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: 4V3bWhkID6aX798Cuzj8vCGhEuMPsWXyf8Mp3ocxsec=)
2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:eb:fe:86:ec:c4:96:87:9d:09:80:6d:7a:de:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Aug 6 06:00:56 2025 GMT
Not After : Aug 7 06:00:56 2025 GMT
Subject: CN=81588dab5b4a9746b2188593264d84ddee4a2946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:46:2b:9b:88:b8:76:64:64:b3:58:e6:de:
d5:21:ee:17:1e:c3:60:cd:b1:9a:61:b7:72:c1:ea:
0a:ca:2a:72:2c:18:f5:c7:7d:15:dd:df:ae:11:47:
ee:0c:fc:b2:7a:1c:85:a1:0a:03:1a:85:b2:39:33:
96:c9:be:d0:a4:c9:b6:f4:84:28:43:d4:71:3f:e7:
4d:18:95:cd:c4:77:85:a8:d0:21:0c:ef:8a:c6:45:
94:de:97:29:6f:ea:18:6f:6f:75:92:9d:9f:a8:b8:
fe:13:e3:6e:fd:cf:79:5d:97:58:b0:6f:45:85:4f:
ae:8d:36:a8:1c:38:a3:7c:be:c2:bf:e0:a2:f7:89:
1c:e7:95:37:ea:17:70:03:19:01:40:f1:e4:a7:c2:
67:e3:20:21:a9:1f:69:e3:55:09:33:9f:ad:a3:18:
ae:01:88:f7:fe:38:44:f1:a4:48:1a:15:16:18:11:
e5:cc:6f:c6:23:8c:5c:2d:c4:71:db:bc:68:45:db:
6d:06:0c:a4:c9:f3:6e:3c:9b:61:8d:65:42:a1:d3:
4d:5a:59:a7:7a:99:24:40:8a:f2:dc:56:9f:5d:29:
0f:9a:35:8d:09:0d:76:d9:8e:44:8c:33:31:1e:cc:
c2:e1:bd:1e:bf:26:fa:2e:c6:d0:28:87:70:36:e5:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:8D:AB:5B:4A:97:46:B2:18:85:93:26:4D:84:DD:EE:4A:29:46
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:8d:80:a9:c2:46:11:43:cc:4a:54:56:e1:e0:50:2c:6d:
d3:de:40:c5:ab:fd:68:8a:f2:de:ca:1b:c0:f7:77:e3:0d:f1:
94:20:4b:9d:ec:f8:0e:cf:ba:9c:81:d0:4d:ec:e6:6b:c9:82:
57:d6:55:4a:98:54:c2:4b:84:84:f9:3b:39:aa:63:b8:61:2d:
e8:29:8a:83:31:16:ad:2a:36:62:37:f6:91:70:a0:78:c8:45:
f7:3e:d5:1a:ec:d2:27:aa:b1:d9:26:c5:8d:03:d8:a8:a9:1d:
de:e5:9b:c0:fd:b0:90:e7:23:b2:4f:24:4a:3b:95:12:1c:23:
2f:7a:eb:dc:e1:f8:e3:43:3b:53:00:6b:02:2c:2c:11:ba:e6:
26:7e:18:e8:01:4e:a0:55:35:9f:b9:b0:e4:88:cb:cc:58:ac:
26:4e:f1:c3:6d:bc:be:4c:e1:16:66:e5:0c:67:a7:c0:0a:8e:
d1:64:18:a3:e6:01:ef:a2:54:62:2a:46:cf:b5:77:92:b1:b9:
82:2e:b2:42:75:5e:ab:6d:c0:c2:7f:5b:5a:19:fb:27:5f:a7:
11:b2:fc:a8:55:09:f7:0b:d8:5c:5c:14:f5:6e:45:5b:98:d5:
b7:89:80:2c:39:af:c3:d8:20:13:4b:6f:79:73:62:47:e4:47:
97:77:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:39 2025 by rpki-client