Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: ECrJKoPw8jgUs8y6lHvigGZNOOAPH7yThAfFPQHYQLc=
Subject key identifier: 03:E2:28:FA:9D:F9:F5:89:91:4B:A0:D8:65:8C:2A:F7:81:E0:8C:03
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 01989713104AF9D156E990A6BEB76A48D92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0B6D
Signing time: Mon 11 Aug 2025 03:01:05 +0000
Manifest this update: Mon 11 Aug 2025 03:01:05 +0000
Manifest next update: Tue 12 Aug 2025 03:01:05 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: CgbK221nLd85FvwmrdTqal313jzchJ2a6NmGRg/yyOA=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:10:4a:f9:d1:56:e9:90:a6:be:b7:6a:48:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Aug 11 03:01:05 2025 GMT
Not After : Aug 12 03:01:05 2025 GMT
Subject: CN=03e228fa9df9f589914ba0d8658c2af781e08c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:20:25:5f:af:7b:48:14:9c:8c:9c:d2:31:
82:4a:a7:3d:2c:5f:82:7a:bc:ff:b3:fd:53:f4:b8:
20:d4:eb:59:5c:8d:92:c9:0a:21:de:a5:a4:b7:a9:
7c:81:65:c7:a5:03:ef:9b:b8:a8:4f:7f:0f:29:ee:
63:74:7a:21:5a:07:b8:60:bc:99:61:2a:2a:9a:5c:
23:d3:40:1d:d1:d7:c6:d7:df:bb:07:a4:54:dc:1e:
6f:f2:f4:bd:f7:90:d9:c6:af:92:07:88:bd:78:d4:
cd:1a:60:b7:d9:e6:cc:8a:5e:e8:29:a7:1d:c5:90:
32:60:a2:de:d4:9c:9e:b9:2e:1c:07:fb:59:40:21:
8a:f2:0a:fe:f9:d0:02:79:5f:ec:a7:2b:f7:4c:d8:
c4:98:7e:48:e8:eb:4b:6d:b7:88:10:09:84:a7:d4:
ca:3e:1c:33:28:98:2f:75:01:19:09:1a:fb:94:97:
eb:dc:16:68:1e:d8:b4:f1:78:4f:91:cd:e7:dc:c7:
d7:06:88:64:83:8c:7c:8e:41:8d:74:ee:f8:a4:1a:
13:a9:53:2a:1d:7b:b9:b7:4d:4f:b3:c8:6c:d7:b0:
c8:0a:ee:51:a0:40:6a:63:04:63:8a:e0:a0:47:b9:
90:7a:cd:b3:2d:2e:b6:5f:4b:64:2e:fa:03:b4:92:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:28:FA:9D:F9:F5:89:91:4B:A0:D8:65:8C:2A:F7:81:E0:8C:03
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5e:e9:fd:b0:e2:8a:3c:bf:da:54:33:2c:e9:f5:19:01:0b:
71:e7:85:eb:63:c3:38:e0:b2:cc:f7:1b:ba:7c:0f:3b:18:fa:
04:09:6c:00:22:31:7e:6e:62:50:e2:6f:ff:38:e5:65:a6:9d:
f8:b4:44:90:ea:2b:ea:c7:b3:dc:ed:ac:73:f5:8c:ce:c0:3c:
ef:fd:2f:45:b9:27:d6:29:48:4b:bd:5d:3f:e5:04:d2:9d:28:
47:6f:d3:75:62:2a:01:3f:46:f4:15:f2:49:ca:c9:6d:5a:86:
e2:a3:ae:44:7e:d3:d1:a9:a8:03:c8:d5:f8:db:da:81:a3:83:
15:94:8a:78:9c:1d:3c:d4:93:c9:8b:94:54:da:0c:2a:2d:00:
0a:7b:b6:f7:8f:4d:5b:34:ff:c7:e5:49:c8:26:68:22:2d:ce:
ed:1e:87:05:e6:7a:11:ca:f5:1e:0c:0b:59:51:52:b2:c4:61:
c0:6d:e0:04:6d:8e:1b:22:d0:f6:b3:2a:98:e1:60:70:89:8b:
11:ef:81:f3:78:42:57:a1:9c:99:cb:c0:03:3c:72:a2:bf:58:
c7:0c:e5:dd:62:82:b3:2c:74:0a:71:b6:98:a3:22:e8:a2:e4:
d5:1f:cd:25:6e:31:15:d1:e5:6e:e3:5b:20:39:2c:ca:d0:bb:
50:56:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:28 2025 by rpki-client