Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File: 6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier: XCJ59iZxtQT+b36pJJjDgExciGfGHaJqo5NlOlKwIeE=
Subject key identifier: FA:B3:05:31:54:EB:BE:48:66:14:75:C3:9A:5B:67:1C:D4:5B:4E:3C
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer: /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial: 01989780D1779BB5B37784086062FE71D391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number: FF
Signing time: Mon 11 Aug 2025 05:00:58 +0000
Manifest this update: Mon 11 Aug 2025 05:00:58 +0000
Manifest next update: Tue 12 Aug 2025 05:00:58 +0000
Files and hashes: 1: 2PO56c07BT5UqW7VHJgEtBZRuc4.roa (hash: j6nnqb1GzOx8EAgfl33x3DbOrwgUFnv8OKDrDXb3GYE=)
2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: Hvf/OkWVu59EDcsoH3LZxrERc5VAhkoccpt6YijPKvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:d1:77:9b:b5:b3:77:84:08:60:62:fe:71:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Validity
Not Before: Aug 11 05:00:58 2025 GMT
Not After : Aug 12 05:00:58 2025 GMT
Subject: CN=fab3053154ebbe48661475c39a5b671cd45b4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:6e:64:2f:d7:5d:eb:84:8f:97:4f:dd:dd:
0f:a0:41:6b:71:33:d5:8e:f0:ce:c5:af:bf:75:42:
cb:9b:b1:9d:87:81:58:e2:51:60:66:d2:89:d2:1a:
ab:30:18:bd:b7:be:e6:6e:7d:ad:cd:ee:b7:61:6c:
22:00:aa:a4:ec:73:fa:52:a5:7f:c8:74:72:93:6e:
50:31:29:05:7b:0e:0b:cd:86:a6:77:18:28:91:2f:
8e:74:05:cb:a5:50:f3:31:a9:ea:20:cf:70:5b:b3:
71:c0:5f:71:8a:ca:35:62:87:cd:2a:cc:e3:cd:76:
32:2b:bb:03:89:41:ca:94:af:ed:59:54:84:8c:7d:
45:b3:e5:e4:1d:9e:d2:ce:67:5e:94:1c:65:6e:b8:
b1:63:b4:59:e9:53:a7:46:89:76:75:03:da:99:e8:
d8:99:c3:50:e8:7d:db:b1:3c:3f:e1:3f:37:9c:e7:
6c:e1:f3:30:d8:f9:0d:6d:73:fa:60:ca:0f:e3:37:
ab:62:b5:87:9c:07:a6:e8:e8:df:d0:39:d1:fd:e6:
42:bc:1c:00:d2:56:29:42:dd:e5:4d:ef:6d:39:88:
65:65:4e:b3:98:49:8b:4a:11:89:7b:b7:f1:cd:41:
29:ab:57:27:30:c4:e2:dc:36:a2:85:aa:ad:5e:09:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:05:31:54:EB:BE:48:66:14:75:C3:9A:5B:67:1C:D4:5B:4E:3C
X509v3 Authority Key Identifier:
keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:1b:08:e4:64:06:6a:cd:61:a8:9d:61:66:30:c1:fb:5a:
76:8a:e3:d4:aa:64:ea:75:3f:14:36:5d:7b:06:67:ac:a4:2e:
e6:df:fe:13:94:f1:7b:c2:fb:f9:d1:f6:cf:f2:53:ac:8e:96:
0c:65:1f:7a:41:7d:14:7f:61:f2:53:8b:43:c7:1d:5f:74:b0:
dc:97:26:7c:8e:f4:71:75:d7:a0:3a:aa:35:07:3f:7b:30:78:
df:a2:f9:cc:a2:93:dc:5d:f6:05:88:d8:5a:7c:16:8e:4f:11:
0e:be:35:de:57:d8:77:5c:0a:17:da:e8:b5:d1:8c:c4:07:43:
08:f8:ee:0e:df:2e:7b:b0:39:1c:9f:e8:1c:f0:e9:4c:34:01:
04:f6:bb:52:37:21:68:0a:0b:b8:6a:b7:d2:7a:3c:b4:32:ef:
db:3e:41:c4:ca:66:1c:b8:a1:59:a8:ab:ac:7a:6a:4c:b9:ff:
93:9e:60:3e:4d:ad:ef:6a:dd:e8:6e:62:be:e9:6f:7e:aa:d9:
0a:fd:72:07:43:5b:01:07:4b:c6:0c:4c:bc:ef:c0:91:73:6c:
97:75:f0:4e:f0:9d:e7:4d:dd:7b:ea:03:2f:b1:a5:02:cf:aa:
0e:88:81:40:b1:8b:d6:08:04:bb:3a:5f:6c:ee:9a:e3:0b:23:
9b:ac:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:57 2025 by rpki-client