Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: hTtV+YeK7jfAuOq/0G5RI9qWiuLYvoSq/4UgA5vA/tw=
Subject key identifier: 69:6F:B0:88:0A:00:6C:4F:74:F1:B5:A8:D9:82:AA:FD:47:15:27:41
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 01989335C35D3F375C2CA301D0A6F0872192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0A12
Signing time: Sun 10 Aug 2025 09:00:30 +0000
Manifest this update: Sun 10 Aug 2025 09:00:30 +0000
Manifest next update: Mon 11 Aug 2025 09:00:30 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: /mfGHjttYtEevt3z0LepNYi1cp1L3lzsNytjPsBdJcg=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c3:5d:3f:37:5c:2c:a3:01:d0:a6:f0:87:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Aug 10 09:00:30 2025 GMT
Not After : Aug 11 09:00:30 2025 GMT
Subject: CN=696fb0880a006c4f74f1b5a8d982aafd47152741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:5b:5d:59:b6:97:43:26:e7:57:0d:cd:e1:
9f:5d:4a:dd:83:88:3b:bf:63:a4:90:63:72:d2:86:
69:71:9d:8d:01:75:b6:21:80:c7:44:44:e0:ab:82:
40:c4:10:1e:4c:e3:6a:2e:5d:b8:d1:eb:c4:95:7a:
76:01:d7:4d:3f:52:44:b3:0c:12:0c:23:ef:8d:01:
d8:0a:ef:0a:3d:58:1e:7c:5c:c7:c9:5c:30:bc:c8:
c0:64:77:fc:7a:cf:d5:7b:c2:44:4f:15:31:b7:73:
15:ab:c1:2f:7a:4d:95:83:9d:30:c4:cc:d9:77:d7:
5b:f2:dd:2e:9f:b6:74:f0:87:0d:18:15:49:ab:8e:
c6:a9:a2:d9:92:2b:eb:f9:45:71:c0:48:54:d0:f3:
ed:d4:20:87:c5:23:9a:eb:76:67:9b:b9:d1:c7:16:
73:a5:88:0f:d0:a6:45:22:31:86:1a:80:20:48:60:
05:f1:4e:77:0d:3d:23:3d:95:95:c2:ac:00:89:ad:
ec:4f:28:17:f0:f4:fe:c5:20:f1:2a:1b:11:2e:7b:
3d:35:c1:d2:60:7b:30:e2:33:7b:cd:62:1e:a0:fa:
fe:ac:3f:ad:b4:8e:eb:d4:f1:ea:08:b4:3e:bb:79:
2a:df:84:88:0d:aa:2f:22:8b:05:ab:91:0b:40:bd:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:B0:88:0A:00:6C:4F:74:F1:B5:A8:D9:82:AA:FD:47:15:27:41
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:23:a3:59:e5:40:75:dc:18:73:70:5e:fd:58:d7:aa:60:
db:78:f3:c1:a4:c0:1f:99:d2:7e:25:9b:9b:90:68:27:ac:7a:
70:9a:df:a0:8b:9d:ed:a7:c7:72:57:61:2e:e0:ce:f4:9d:b0:
37:86:99:dc:7a:37:d4:2b:91:e3:86:e4:79:0b:bd:ec:3a:8d:
50:57:9a:59:67:3b:07:52:7b:97:f0:c9:3f:5d:1a:ec:5c:0e:
28:1d:4a:e3:cd:ca:f4:15:c6:a3:c2:aa:9b:b5:f2:33:83:22:
a5:7f:a3:da:18:c0:b7:c0:c9:cd:98:21:30:88:bf:ec:da:2e:
ff:04:22:3e:b1:fa:d6:fd:02:cf:95:ce:ba:f9:b4:72:90:ca:
9c:a3:9c:6a:39:2d:13:d9:56:e0:ee:d1:50:db:0f:6c:a4:77:
37:0c:e3:a6:e4:14:60:df:93:c0:60:ab:dd:91:72:f6:30:09:
64:59:c4:59:86:ed:dd:6c:93:37:87:29:11:4d:76:71:22:29:
81:59:b5:42:53:fc:61:44:fa:8d:06:47:f9:0c:27:bb:41:76:
ec:43:fb:f8:e9:82:6a:33:19:4f:f6:ea:46:9e:2d:86:c3:49:
fc:e4:27:62:14:48:24:11:6b:0c:6f:9d:7b:1a:de:68:fb:c5:
11:ae:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:07 2025 by rpki-client