Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: nz+VqQDc6KztOAMt239kCtOY2CC1c6NvEb/B3imdnhw=
Subject key identifier: A6:3B:C7:A7:41:42:13:D1:FF:4A:A2:AE:3C:02:C2:60:52:88:A1:98
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019897B7EE5CA0FE7A90FB7C8D65CC4A6867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 06:01:10 +0000
Manifest this update: Mon 11 Aug 2025 06:01:10 +0000
Manifest next update: Tue 12 Aug 2025 06:01:10 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: kEeUtb1TBjSQX6T0ZUHkTH2pqn1XIDiwEbutfdKZJV0=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:ee:5c:a0:fe:7a:90:fb:7c:8d:65:cc:4a:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Aug 11 06:01:10 2025 GMT
Not After : Aug 12 06:01:10 2025 GMT
Subject: CN=a63bc7a7414213d1ff4aa2ae3c02c2605288a198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:f3:93:35:21:0b:c5:ff:b4:23:c1:0b:c0:
a9:b9:27:38:0b:7f:a3:d8:32:79:3b:78:8f:32:bc:
dc:06:07:d6:a9:c5:94:e7:f7:01:2a:ba:2b:99:65:
11:c9:2b:b6:bf:81:2a:a1:00:3a:5d:1e:ca:08:d9:
84:0e:9c:cd:f8:48:04:db:a2:7e:28:43:79:ae:dc:
0b:b4:bb:41:de:45:66:fb:52:a2:a3:0b:b6:6d:57:
5a:c9:54:a0:9c:e0:a9:3a:99:5b:9e:a5:4f:cd:24:
09:e8:20:79:ec:78:54:5f:49:06:e2:7f:5c:9f:b7:
fb:cd:10:71:2b:b3:e7:94:d6:b9:0a:4d:2c:4d:f0:
28:f1:23:f4:be:c1:dc:f5:8d:57:d4:ef:fe:68:b1:
89:2c:67:07:cd:f6:d3:af:0e:d0:92:75:80:3e:1a:
b3:64:1e:3c:0f:5c:68:7f:30:59:52:3a:f7:0c:5a:
0f:7c:ae:b6:2f:10:05:00:fd:2d:bc:96:f2:b7:4d:
98:cd:f4:69:81:c8:fa:83:44:28:f1:07:91:af:8d:
e7:2f:8c:60:9a:3e:aa:57:10:ec:16:db:31:07:a5:
d6:2e:d9:d7:ec:70:0e:36:a1:b8:36:8d:cb:0c:e0:
c5:6d:8d:1e:e1:6a:18:49:08:ba:ed:a6:72:37:8a:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:C7:A7:41:42:13:D1:FF:4A:A2:AE:3C:02:C2:60:52:88:A1:98
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a6:90:ff:db:06:9c:88:59:a6:87:d0:dd:5c:41:f6:38:dd:
92:43:ce:40:23:cc:62:a8:c4:af:f3:86:5d:a8:57:99:04:2e:
38:db:75:7c:75:da:79:45:fd:d3:1c:28:b6:39:63:db:40:e5:
20:01:f2:12:d6:b7:4b:cb:53:44:53:b2:42:6b:a5:80:f9:4a:
09:80:fb:08:99:d4:9a:bc:40:19:80:ae:f6:db:dc:df:f2:72:
e8:1a:4a:69:4d:42:91:c2:fe:36:35:2b:25:9f:d2:26:2c:f7:
10:ab:48:f6:f6:e0:1a:0b:a6:d6:40:18:2b:1c:0c:f6:47:6b:
26:b0:ab:60:5d:d4:ac:cb:cb:ba:f5:d5:2e:99:92:2b:a8:5a:
cb:89:5f:f8:e5:a7:c3:92:2e:de:3e:4b:fe:b4:a2:6d:86:1c:
8a:7d:12:0e:47:8c:bc:b2:5d:0e:98:0a:0f:7e:74:ae:88:18:
98:27:5b:4b:45:4f:e1:99:2a:e2:78:0c:01:4e:09:e0:49:ae:
fc:56:37:a9:7a:09:b9:19:d6:0f:d0:b9:b9:78:bf:45:ee:f2:
91:15:0a:8e:9a:7f:0c:c5:4a:b3:d8:65:f7:6c:2f:12:9d:fd:
f3:2b:7b:5d:65:b5:38:ce:e8:c2:35:cd:6e:19:f0:94:85:1e:
23:66:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:22 2025 by rpki-client