
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: wgJgxEXnthglAwEAZfI10j3AUNuyfScm0wAXSlUay4E=
Subject key identifier: C3:A0:C1:88:81:D6:DC:30:DA:92:DA:9C:4F:A1:95:37:B6:B2:44:27
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01987B9BCB16E328F77BF685461243005549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 08D8
Signing time: Tue 05 Aug 2025 19:01:04 +0000
Manifest this update: Tue 05 Aug 2025 19:01:04 +0000
Manifest next update: Wed 06 Aug 2025 19:01:04 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: vTJmGJ7L1hm13kKv8X+GlXKVLs9zI1fZyzTRZxdMb0Y=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:cb:16:e3:28:f7:7b:f6:85:46:12:43:00:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Aug 5 19:01:04 2025 GMT
Not After : Aug 6 19:01:04 2025 GMT
Subject: CN=c3a0c18881d6dc30da92da9c4fa19537b6b24427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:1d:3c:e9:5a:cf:83:ef:9e:89:94:d7:58:
34:54:3d:3c:8e:46:89:0e:a5:1a:0e:8d:4c:8c:34:
31:c5:09:4c:d8:8c:b5:6a:d1:6c:20:2e:97:e5:35:
08:8c:9a:09:2f:58:56:bd:94:24:c8:af:f1:fb:b7:
01:61:dc:9c:85:6c:bc:0b:bd:dd:c1:41:65:df:b8:
61:fe:fe:f4:33:65:48:3b:49:78:91:00:13:6a:39:
f9:91:64:7a:e3:a5:96:f0:18:f1:68:c5:34:39:3d:
34:3e:32:cb:1b:bb:48:a9:59:b2:8d:bb:e0:7f:1d:
88:40:0f:93:70:3a:f3:4c:2f:58:7f:58:e8:f1:06:
d1:7a:69:a8:f0:2a:eb:36:db:25:80:f3:90:a5:85:
fc:5f:e0:a6:15:47:8c:e9:cb:ef:81:ab:34:55:38:
e4:20:32:05:06:f6:e8:ff:e9:f9:cd:18:e7:74:62:
04:e7:da:09:6a:9c:bb:7d:48:2d:d9:95:91:92:69:
18:a3:ba:e1:5f:23:fd:2c:b3:da:ac:04:a2:bc:f3:
44:6f:a6:51:a9:d6:4c:80:57:88:1b:78:10:25:83:
1d:9a:38:43:55:89:3e:4b:81:9d:a6:83:eb:11:cb:
d7:ec:f4:55:ac:73:59:c2:56:1e:47:a2:61:45:c3:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:C1:88:81:D6:DC:30:DA:92:DA:9C:4F:A1:95:37:B6:B2:44:27
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:8e:02:21:a9:e9:cd:2b:c1:57:39:3d:77:d3:b1:b3:39:
a5:39:66:a6:ba:2b:ad:8c:d4:a3:c6:5b:3e:96:ef:7a:b2:2f:
c9:2b:b4:48:d6:bf:8b:25:b9:cd:33:27:23:04:ff:f9:8d:59:
0f:e5:d2:2d:cb:4e:94:ef:59:47:4c:9d:54:ac:4c:73:be:69:
be:18:54:d8:25:98:20:fb:55:af:66:0c:0b:3f:40:34:ce:c7:
1c:9f:08:e8:0c:a6:ea:39:6e:8a:8a:68:1c:7e:d3:a7:15:9f:
f5:0e:8b:ee:c9:06:61:65:b7:87:88:f2:cc:00:84:40:80:f3:
54:9e:00:50:76:3b:1b:db:e3:8f:c6:1f:a9:20:a1:99:d7:72:
73:3a:f2:12:31:53:bf:f8:ad:f2:73:42:79:37:c0:d9:43:11:
1b:f7:1d:11:06:0f:79:08:16:e0:bd:61:d6:e7:f8:f8:85:be:
b2:54:da:4f:b2:a6:e3:61:90:c6:00:ca:74:73:1d:ca:2b:05:
a1:d8:ac:ac:99:f1:7c:d2:62:2d:cc:08:7a:d1:c9:8c:46:31:
56:91:93:46:b9:8b:71:59:1f:08:4a:75:12:10:d8:7a:98:7e:
a1:85:07:55:1a:c8:5e:9b:47:cc:47:cc:c2:44:cf:bd:d8:a2:
a6:49:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:44 2025 by rpki-client