Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier: Q121iPjkNp1nWdxidm6vWeDs/CdKbYi3DTpklW7Phbw=
Subject key identifier: FA:2F:28:9E:09:7F:B4:62:7E:0B:2D:73:9B:9C:BC:F9:CB:F3:59:00
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 0198955B0B9A8AB86D4D3514ABE2EA28E252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 19:00:28 +0000
Manifest this update: Sun 10 Aug 2025 19:00:28 +0000
Manifest next update: Mon 11 Aug 2025 19:00:28 +0000
Files and hashes: 1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: xdx56W3IstvhDhISaeesitDHAYoQnMjL2tvWeaN7iiA=)
2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:0b:9a:8a:b8:6d:4d:35:14:ab:e2:ea:28:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Aug 10 19:00:28 2025 GMT
Not After : Aug 11 19:00:28 2025 GMT
Subject: CN=fa2f289e097fb4627e0b2d739b9cbcf9cbf35900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:99:59:76:7e:40:b1:ba:06:61:0c:36:32:
e7:c9:8a:af:8a:6f:68:15:d8:4d:72:84:15:c8:aa:
ab:2e:5c:97:3b:67:39:1b:3e:09:11:5b:81:1d:8a:
7d:0a:3d:88:f0:0b:67:01:f5:54:5e:1b:49:39:59:
b7:9b:f4:7f:a6:91:44:44:85:01:e4:bf:56:74:0c:
af:55:02:67:19:ad:7d:c2:35:bc:44:f4:58:0f:4b:
91:83:96:57:80:5e:dc:37:f1:d6:2c:15:de:44:90:
10:a0:ce:d5:69:99:8c:c9:ff:df:92:b7:c5:d1:5f:
8e:26:37:fa:d3:7c:ee:a8:87:7f:ea:c2:9b:9f:69:
36:d8:7c:db:4c:2c:95:be:6c:5b:ab:64:83:a6:d0:
54:79:c3:2e:10:9e:60:b9:2c:f7:15:98:07:75:22:
f2:33:bc:f7:d1:2e:af:16:5a:39:c1:25:e1:24:55:
1a:60:ef:b8:a3:6c:8a:1d:14:c3:b5:60:2b:db:58:
e1:7c:30:85:2e:4a:ff:1f:f4:6d:35:30:89:54:72:
03:7d:f3:9d:ed:bd:35:20:81:aa:e0:aa:97:ce:e7:
29:11:22:46:c3:3e:2a:1e:9b:b0:03:af:3a:b2:b9:
dc:53:2d:9f:0a:ff:32:53:b3:6d:b0:92:bf:5c:f5:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:28:9E:09:7F:B4:62:7E:0B:2D:73:9B:9C:BC:F9:CB:F3:59:00
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e0:c3:66:ea:bd:a9:03:b0:45:75:2c:36:9c:8c:63:20:83:
d4:b7:6f:8b:18:7c:85:1e:eb:d3:2f:9b:ef:9e:24:43:b6:0c:
73:b6:e3:a5:56:91:99:22:5e:a9:b4:87:06:04:80:7a:fb:22:
07:f3:44:c6:66:ee:90:a2:91:fb:43:62:6d:80:75:7f:8b:fc:
82:6b:ee:31:70:83:67:6a:ed:45:c7:ec:5d:02:39:d8:7c:fd:
f9:9c:8f:53:d7:22:94:54:ac:e6:25:06:f1:a0:97:85:1f:81:
6b:c9:65:8d:e3:cd:b0:6c:05:f9:73:ce:fc:9b:ef:e1:e9:e9:
8a:51:2f:da:0f:45:fa:39:c7:72:27:bc:fa:43:87:96:af:a5:
af:88:54:c7:00:d3:45:e8:e0:0c:04:6a:69:90:db:7d:8f:44:
a9:44:fe:4f:ea:4b:ed:3c:6e:78:f6:d1:bd:5c:c0:93:1a:4d:
6f:55:53:3e:17:82:68:b4:78:01:98:e1:0b:99:ee:bf:88:60:
2e:68:1a:54:52:ce:f1:7e:ee:fd:3d:4e:43:8f:bf:d2:c1:4c:
01:44:85:b7:dd:77:7c:63:51:9c:7d:0e:78:76:5d:44:49:85:
b1:a3:78:88:bc:0a:a6:19:74:79:90:5b:6d:da:17:1f:5b:a0:
1f:35:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:24 2025 by rpki-client