
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: TUjuE/5rWLWhm4yg/KyP6f7YkXI665A4OKCErFCH2g0=
Subject key identifier: 7A:78:49:3D:F1:E1:70:5C:E9:C1:B5:02:5A:F8:9F:B1:BF:DF:39:81
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 01988B0FF3BEABEC97950D7C98037F8EB330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0CF6
Signing time: Fri 08 Aug 2025 19:02:15 +0000
Manifest this update: Fri 08 Aug 2025 19:02:15 +0000
Manifest next update: Sat 09 Aug 2025 19:02:15 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: H771e9PKJWbDgmgKi6WC3euUOwZElNeol3urutq2jrI=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:f3:be:ab:ec:97:95:0d:7c:98:03:7f:8e:b3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Aug 8 19:02:15 2025 GMT
Not After : Aug 9 19:02:15 2025 GMT
Subject: CN=7a78493df1e1705ce9c1b5025af89fb1bfdf3981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:ae:d4:ad:06:71:8a:ce:5a:54:d3:6a:bf:
af:df:5d:7f:99:cc:71:11:a0:87:20:8b:82:92:e1:
b6:27:3d:42:cb:f6:58:05:61:2b:af:04:ba:06:44:
d2:90:20:5d:95:9b:32:07:f9:44:9e:1b:8f:d0:cc:
c6:98:e1:e9:33:c0:ea:b7:38:c5:77:73:74:57:15:
c1:64:d1:07:87:ed:90:40:f2:2b:a6:3d:b3:57:39:
68:b4:1c:de:8b:66:5c:10:1a:7f:4c:5d:d8:00:4f:
c6:78:ef:7d:27:b6:fd:20:ee:99:42:0a:79:e1:b2:
b9:91:22:cb:3a:2f:c7:d2:56:17:a8:a6:f1:6f:a3:
48:14:e8:ab:32:6e:74:34:f6:0b:b7:1a:94:c8:6f:
0a:db:84:84:c7:da:6c:f2:b0:79:76:df:9e:1d:ed:
f3:2b:ef:4f:b6:df:ba:9e:28:91:be:47:8a:b9:87:
64:64:1c:91:62:66:cc:d2:b4:51:d3:6f:3a:c9:17:
0c:db:ab:eb:16:9c:a9:2f:aa:a4:4f:02:30:73:ee:
2e:80:e8:d5:91:50:7e:bf:17:e1:b5:17:cd:b0:34:
3e:f5:b3:08:14:26:2c:68:26:c9:48:8a:52:8f:22:
2d:29:e8:98:12:ea:b8:be:50:3f:64:0f:bc:10:9b:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:49:3D:F1:E1:70:5C:E9:C1:B5:02:5A:F8:9F:B1:BF:DF:39:81
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:1a:c5:20:d5:1d:cb:f8:6d:8e:a7:97:f4:10:5d:a5:31:
b7:b7:e3:39:a9:12:b1:3e:9e:ac:b6:6b:61:d3:98:88:80:b5:
52:72:17:63:06:4e:6b:44:fd:2a:2a:ea:cd:6e:a5:a1:d6:c5:
41:7f:3f:77:87:1c:a1:30:f9:ce:96:0b:d7:7c:86:50:60:a4:
43:31:ee:52:e9:b5:95:2a:cf:73:f4:9c:91:30:b1:c4:f5:59:
fe:2c:56:a6:c3:85:a5:6f:14:c6:ae:5a:68:81:9d:c1:50:25:
7a:15:fe:cc:a5:7c:61:7b:a4:1e:40:1d:4a:6e:e2:ac:f9:48:
f0:20:a5:ac:fa:c0:0f:9d:cb:c2:c8:61:66:f7:80:65:dd:48:
f0:89:6c:17:8c:95:a4:28:4d:84:b7:42:7b:fd:e3:b8:d7:17:
37:7d:9e:ff:f2:f6:de:b7:65:bd:5e:68:07:c6:31:2f:99:5c:
8a:f0:1a:95:ab:37:82:cf:74:b5:12:0b:d9:5f:a7:54:eb:61:
e8:a6:50:d2:24:23:6e:8e:18:e7:a1:3d:58:dc:fe:78:34:31:
7b:9c:0b:18:29:89:7e:d6:ee:35:32:25:86:86:79:aa:97:d8:
45:03:a0:bf:30:f1:fc:19:5d:6a:2a:be:8e:7f:aa:59:82:3f:
ed:c8:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:47 2025 by rpki-client