Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: NX9KekoO9ZylMG6Z7RabnpPpkbiCdjynlts5dewLgMY=
Subject key identifier: 4E:F1:34:10:6C:18:76:23:F5:51:ED:86:CF:CA:80:38:70:34:6F:C1
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019889FBCB98FE08E8D41A78135EBF7C3188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1638
Signing time: Fri 08 Aug 2025 14:00:36 +0000
Manifest this update: Fri 08 Aug 2025 14:00:36 +0000
Manifest next update: Sat 09 Aug 2025 14:00:36 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: 7P3QnqGv67eAE6SL5y7fdUQIjKgFrVACpe28SPtePRc=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: MM0dD-Cnl2lqyWLvCK1-oHYBFlY.roa (hash: 0xgeIhk2pLPXnWlj2EeT8c9DNkODQXdxgnvF/AKwP4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:cb:98:fe:08:e8:d4:1a:78:13:5e:bf:7c:31:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Aug 8 14:00:36 2025 GMT
Not After : Aug 9 14:00:36 2025 GMT
Subject: CN=4ef134106c187623f551ed86cfca803870346fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:61:2c:46:f0:11:c0:81:f6:64:cd:92:d9:
10:45:69:bd:a4:cd:5c:13:1e:a4:97:fa:d5:57:b9:
d5:af:1c:13:0e:f6:34:bc:d1:84:63:f1:84:26:3a:
1d:55:98:90:ca:d0:6d:2d:7f:69:44:fc:58:ca:bb:
94:b3:a6:07:2d:b4:8f:95:39:a0:21:50:aa:fd:cb:
d2:23:ce:72:8e:f7:88:c0:94:d2:1d:3c:46:19:95:
1f:83:20:92:be:7d:04:65:b6:b8:07:62:3a:af:94:
ea:8d:eb:bd:70:17:45:46:96:34:73:9c:5e:f3:49:
2a:6c:3a:c9:cb:f0:13:c9:bc:cd:9a:24:5c:75:0e:
a4:b6:99:da:30:ac:66:00:1f:c2:21:a6:5f:71:5c:
8f:cd:e0:cf:03:50:03:2c:6d:9d:30:ea:f7:4e:14:
fd:14:75:3c:77:63:74:d5:09:46:d7:cc:07:d0:e4:
be:87:93:bb:7c:dd:d8:1c:2d:e4:69:75:56:d0:2a:
b3:aa:09:c4:0c:ec:70:0f:dd:6e:f9:49:88:ca:d4:
32:65:6d:80:d7:e9:92:39:7c:ef:f8:b2:b1:9f:bd:
db:30:bd:0c:55:57:5d:bd:03:ce:0c:2c:1c:07:48:
3d:4b:78:b7:a8:72:c0:ec:d2:49:25:45:89:12:a1:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:34:10:6C:18:76:23:F5:51:ED:86:CF:CA:80:38:70:34:6F:C1
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b8:88:c6:da:84:c8:89:ab:9e:13:36:90:17:8d:e5:a9:07:
8b:b0:d7:4d:00:f9:12:70:f8:dc:32:ab:c0:7a:70:70:c3:8c:
80:75:c6:75:08:a7:4e:75:c3:97:d0:10:31:60:be:50:7a:e0:
71:ae:58:9e:cc:42:94:01:e4:41:5d:d7:20:11:cf:1d:08:d6:
28:ba:fb:de:43:a7:6c:e9:0b:61:74:74:81:5e:8c:2c:3b:c7:
89:a7:9c:c3:28:d3:99:83:f3:87:1a:bc:30:93:27:c4:7c:38:
d7:d8:45:93:29:53:fb:a4:96:9d:c0:5a:92:8f:08:69:c2:83:
95:2d:d9:99:4b:76:17:30:50:6a:f1:7c:0b:20:8d:ec:d3:1e:
3c:c4:c5:9e:e1:bc:7b:d8:e4:b8:20:73:e6:52:5b:f3:ae:a0:
59:6b:5c:f5:4c:bc:b7:74:1e:21:f0:15:0c:ba:87:86:25:a2:
58:8a:7c:c5:87:b8:cb:27:22:d1:83:0f:eb:85:f9:bf:37:e1:
7c:6b:1c:59:fb:f6:c3:19:cc:61:90:7b:f2:9b:2c:76:eb:83:
15:89:e5:85:d1:d4:b1:bf:42:e4:35:65:1e:26:80:ab:b7:67:
a0:00:c9:0a:96:83:57:dc:14:70:94:36:58:94:c9:be:0c:84:
b0:fd:7a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ+8uY/gjo1Bp4E16/fDGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjUwODA4MTQwMDM2WhcNMjUwODA5MTQwMDM2WjAzMTEwLwYDVQQD
Eyg0ZWYxMzQxMDZjMTg3NjIzZjU1MWVkODZjZmNhODAzODcwMzQ2ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW9hLEbwEcCB9mTNktkQRWm9pM1c
Ex6kl/rVV7nVrxwTDvY0vNGEY/GEJjodVZiQytBtLX9pRPxYyruUs6YHLbSPlTmg
IVCq/cvSI85yjveIwJTSHTxGGZUfgyCSvn0EZba4B2I6r5Tqjeu9cBdFRpY0c5xe
80kqbDrJy/ATybzNmiRcdQ6ktpnaMKxmAB/CIaZfcVyPzeDPA1ADLG2dMOr3ThT9
FHU8d2N01QlG18wH0OS+h5O7fN3YHC3kaXVW0CqzqgnEDOxwD91u+UmIytQyZW2A
1+mSOXzv+LKxn73bML0MVVddvQPODCwcB0g9S3i3qHLA7NJJJUWJEqEgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7xNBBsGHYj9VHths/KgDhwNG/BMB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7iIxtqE
yImrnhM2kBeN5akHi7DXTQD5EnD43DKrwHpwcMOMgHXGdQinTnXDl9AQMWC+UHrg
ca5YnsxClAHkQV3XIBHPHQjWKLr73kOnbOkLYXR0gV6MLDvHiaecwyjTmYPzhxq8
MJMnxHw419hFkylT+6SWncBako8IacKDlS3ZmUt2FzBQavF8CyCN7NMePMTFnuG8
e9jkuCBz5lJb866gWWtc9Uy8t3QeIfAVDLqHhiWiWIp8xYe4yyci0YMP64X5vzfh
fGscWfv2wxnMYZB78pssduuDFYnlhdHUsb9C5DVlHiaAq7dnoADJCpaDV9wUcJQ2
WJTJvgyEsP16ww==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:08 2025 by rpki-client