
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: TJTf1Ub4MJWpfo8gz7bBDPb75wGa15UOqNsytuOKCPc=
Subject key identifier: 06:FE:EA:00:49:AA:13:27:A6:FF:A0:30:F4:CB:B4:E1:04:F0:5D:57
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01987450292D63C85F18A0C4D40B50BE9246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0A97
Signing time: Mon 04 Aug 2025 09:01:07 +0000
Manifest this update: Mon 04 Aug 2025 09:01:07 +0000
Manifest next update: Tue 05 Aug 2025 09:01:07 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: 7KUtBra8ivFr7HBgYwpUi1L62oAytMJ5kKhdgod9LTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:29:2d:63:c8:5f:18:a0:c4:d4:0b:50:be:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Aug 4 09:01:07 2025 GMT
Not After : Aug 5 09:01:07 2025 GMT
Subject: CN=06feea0049aa1327a6ffa030f4cbb4e104f05d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:83:12:b7:49:71:66:2d:b7:be:04:d3:d3:
84:64:67:ba:6c:ab:3e:bb:26:71:df:21:51:aa:57:
39:7b:f5:4b:a5:10:5c:aa:34:30:00:e8:5c:ca:d4:
62:7c:78:83:6c:8a:94:81:ab:c9:d3:ef:71:d4:0a:
5f:32:f7:57:1d:7d:ad:c8:4b:47:c5:83:1e:74:91:
e0:d7:6b:e7:0d:8e:02:7f:10:83:a3:71:69:d9:1e:
d5:fe:87:da:77:52:81:82:32:b6:ee:d6:0b:7b:c4:
2b:d6:40:a9:61:8f:5f:cb:7d:e3:1e:b3:9d:cf:25:
5d:19:04:f1:f9:95:97:25:1a:8c:28:8b:88:df:22:
2d:98:5a:56:36:08:e6:96:5f:4e:43:9b:e6:b0:61:
28:ea:d6:b4:8a:b2:1c:3f:a9:9e:79:ef:6c:8e:b7:
8c:a9:d9:66:0f:4e:e1:6e:5f:a0:34:e9:06:ac:44:
93:6b:37:07:a6:e3:59:65:6c:c8:f9:99:6e:3e:f5:
ff:f1:93:25:8b:86:af:d7:8d:5d:ef:33:70:a8:2f:
ee:94:a1:d0:59:96:ef:0a:a2:b6:26:e9:0f:b5:cf:
f6:88:9c:c0:0d:a8:d6:af:aa:1d:4c:32:90:f5:1f:
20:81:f1:c2:d4:5b:e5:e9:ae:e5:a2:4b:b1:78:12:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:EA:00:49:AA:13:27:A6:FF:A0:30:F4:CB:B4:E1:04:F0:5D:57
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:c2:7d:e4:20:68:4f:4f:8e:78:99:f5:a3:4a:5c:e6:94:
69:e4:c1:d1:cd:f4:31:53:0d:7d:00:0f:ec:d4:10:ef:81:03:
38:0f:ce:8e:c1:3e:b7:f3:c2:01:3f:fe:6d:d3:c5:d3:e3:ea:
79:da:ed:b3:58:57:4d:1c:d1:dc:3b:fe:a1:b7:34:68:ea:95:
25:3c:de:d7:99:d2:e0:e3:d5:02:48:7a:00:d3:b9:e9:07:76:
6b:ed:be:50:9e:9f:ff:70:5d:3b:d7:d6:8a:38:b7:c3:83:1a:
06:85:59:b8:28:16:71:37:8b:f3:7e:72:b8:22:95:ba:c1:4a:
76:89:e5:0d:15:ac:97:c1:41:f8:5c:97:ea:08:37:9e:ce:1b:
82:73:cb:6e:f1:c5:e4:fa:d2:fd:6b:0d:5a:59:95:1c:98:a8:
55:84:32:80:a3:13:46:46:c2:62:63:0b:c7:af:5b:ba:c7:63:
05:77:03:de:dc:d4:ec:c0:6b:b6:25:a5:3a:11:42:cf:39:3b:
1f:71:38:a9:d4:6d:71:e9:a2:26:54:6e:9f:26:77:90:70:08:
0a:c3:74:24:69:5f:eb:58:c9:86:85:8b:ad:16:11:df:7a:34:
81:d6:2b:7d:12:90:a1:23:da:29:bc:63:93:2e:3a:da:2d:30:
83:de:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:17 2025 by rpki-client