Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json)
Hash identifier: coBewg+wLqClTLezIBm4nOjNiZQKpm1jon4o1M4evnE=
Subject key identifier: 39:87:A3:BD:63:52:03:E2:B5:09:0E:77:77:9D:D7:59:9F:C2:49:8F
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 01989524155ABDF7CF211DDE545497C97B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
Manifest number: 01D0
Signing time: Sun 10 Aug 2025 18:00:26 +0000
Manifest this update: Sun 10 Aug 2025 18:00:26 +0000
Manifest next update: Mon 11 Aug 2025 18:00:26 +0000
Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: E4PesUhSJq5zlA7clrUGt8RxmKQvdYqnJ2EyfPlebyE=)
2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:15:5a:bd:f7:cf:21:1d:de:54:54:97:c9:7b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Aug 10 18:00:26 2025 GMT
Not After : Aug 11 18:00:26 2025 GMT
Subject: CN=3987a3bd635203e2b5090e77779dd7599fc2498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:97:4f:06:08:04:2e:fd:9a:e1:7f:a5:6c:
87:57:6a:aa:75:67:03:6f:09:5a:58:f9:84:df:fc:
b5:cd:bb:5a:ce:de:0a:28:55:ab:20:c5:97:78:bd:
a0:f6:7d:ac:73:91:4a:de:1e:72:85:19:55:7d:e1:
ae:ba:23:66:e4:ec:65:ab:4c:93:ab:64:50:ac:dd:
14:df:8d:98:01:32:b8:4e:ea:62:b0:5e:ab:df:f1:
2a:41:a7:97:3d:ae:6d:80:e2:5b:00:3d:c6:30:58:
53:43:14:9d:92:4b:5c:2e:61:50:6e:2e:5f:f5:0b:
32:61:e7:03:80:bc:a0:66:8c:d9:23:9e:27:ce:33:
fc:6f:69:10:08:48:59:be:4c:e6:b6:77:d5:d9:53:
05:a9:bc:0a:45:c2:cb:49:d6:03:7b:b9:d6:3e:cc:
08:07:02:76:f2:6e:a2:fa:47:90:b7:62:c6:cc:99:
02:b4:9d:af:e9:46:40:cd:2a:a8:6d:c8:8c:89:fa:
21:d5:a8:9b:3a:02:70:77:4d:6a:ff:40:34:ac:59:
14:7d:ce:e2:e0:a1:b0:aa:55:27:d2:04:2c:9c:db:
fc:5e:3c:2c:1d:33:65:20:5a:f4:d8:44:49:37:df:
a7:1c:73:45:2d:e1:07:48:76:3e:3c:5b:83:c9:96:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:A3:BD:63:52:03:E2:B5:09:0E:77:77:9D:D7:59:9F:C2:49:8F
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:99:21:64:09:aa:a3:2d:e5:4b:38:e5:eb:e0:a2:1d:c5:e0:
fc:a4:b4:f9:13:51:14:85:09:2d:f7:fd:a8:10:21:a1:ed:aa:
e5:06:c2:a2:9b:22:4c:9d:d1:f5:e0:e5:62:6c:e4:52:1c:b4:
13:97:3f:bc:c5:39:db:7e:99:22:64:63:7d:06:34:c1:e9:b1:
c7:f3:00:8c:ba:b1:e0:e9:9c:a0:d0:28:d7:64:4c:98:67:85:
b5:80:63:d6:e4:5f:af:68:ef:2e:2b:5e:04:e0:be:74:1b:5d:
60:57:f6:4e:d2:61:8a:77:ee:5c:85:97:8e:24:fe:ee:24:69:
66:2f:55:95:64:2c:41:ce:38:1d:c4:02:38:5d:fb:0a:d7:ec:
f3:57:b4:ce:29:8d:5b:c4:1e:e8:84:d9:3e:2e:15:5e:b5:2f:
e7:ac:ab:0b:01:d5:19:8e:49:e6:47:14:07:65:58:d0:e4:02:
ba:75:e0:64:9e:fc:19:f8:7c:87:0f:1b:75:5b:58:6a:2d:59:
30:11:d2:f3:5a:ce:24:ba:d3:7f:68:b3:32:99:51:23:52:9c:
a0:1a:09:f4:b4:8e:2d:18:0d:7e:0b:93:f7:5b:0b:3c:53:6a:
f4:ae:6b:05:16:df:b5:1b:70:f9:b5:c7:88:80:51:34:ad:ba:
5c:fa:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:07 2025 by rpki-client