Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: 8nBxf8OhJ1EdbsUS/q1ePdDwkD1GQuxE7mRazmKDBMw=
Subject key identifier: 18:47:A3:F4:31:FF:BF:C8:D0:2E:51:33:35:9F:DD:45:96:FB:FE:A9
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 019872987394476CA534DFC5F8B7746BB77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: 029C
Signing time: Mon 04 Aug 2025 01:00:50 +0000
Manifest this update: Mon 04 Aug 2025 01:00:50 +0000
Manifest next update: Tue 05 Aug 2025 01:00:50 +0000
Files and hashes: 1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: 0k7pSIbur7Gn+9nZSbxqEYYeOcJucSijoFTC128zCGg=)
2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:73:94:47:6c:a5:34:df:c5:f8:b7:74:6b:b7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Aug 4 01:00:50 2025 GMT
Not After : Aug 5 01:00:50 2025 GMT
Subject: CN=1847a3f431ffbfc8d02e5133359fdd4596fbfea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:16:c8:f6:9e:c6:1d:8c:c2:38:1b:5b:60:
1f:a5:f4:38:5e:43:d4:d0:11:78:e7:fb:46:48:4a:
a2:1d:6f:5d:aa:c6:d9:27:df:8f:3b:26:69:94:3c:
90:00:cb:35:a4:fc:77:d8:96:ba:b6:b1:b2:3d:b7:
ad:f6:fc:ea:5c:2e:77:7c:b4:a3:53:b5:df:86:b4:
2d:e3:0b:a1:bf:8c:83:aa:50:da:69:34:66:7c:95:
40:3e:0e:c0:d2:90:6c:8a:8f:8c:75:9e:5f:a8:41:
96:e4:3e:10:66:d6:f4:3f:1a:d8:50:bf:88:69:d3:
4b:08:44:86:e3:e8:05:af:b2:26:55:a5:7d:de:d7:
9f:f3:c6:eb:59:0c:ad:39:44:99:c6:06:70:bb:61:
7a:ea:0e:28:af:40:ab:d0:d1:79:21:d1:94:2e:e9:
86:b3:00:9d:c3:8f:ad:42:fc:11:f8:40:d0:c0:2f:
ba:5d:ed:5e:85:e9:b4:10:5a:3a:00:e1:a9:70:f5:
f5:98:fe:34:b8:43:3e:4e:77:63:7d:7e:ef:b9:98:
68:5d:6c:f3:f3:12:c4:f7:67:7b:bf:14:61:5f:12:
a8:38:a0:c8:08:20:8d:20:d4:34:50:36:c2:11:8f:
1b:dc:14:25:30:90:6c:cb:a1:09:b1:be:e1:d5:64:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:A3:F4:31:FF:BF:C8:D0:2E:51:33:35:9F:DD:45:96:FB:FE:A9
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:46:fc:1c:14:d7:30:9e:7d:46:d8:4e:8d:1d:8a:26:cc:
ef:ba:7e:50:d6:7c:ee:2f:42:eb:de:26:55:77:2b:87:75:af:
c8:87:b5:fb:96:bb:df:ce:fc:f8:58:6c:2d:ee:4f:b2:af:58:
e2:60:ac:00:11:88:44:ae:5c:09:8e:df:60:20:66:2c:ef:df:
80:4c:85:e3:e9:c6:f4:6e:c5:d6:9f:73:31:b1:d5:c9:cd:71:
50:20:af:9a:33:1e:5c:49:fb:5e:9d:00:46:2a:24:75:ab:7a:
0a:56:eb:c4:ef:95:a3:e9:27:c9:2c:11:b9:37:af:16:70:b2:
75:25:43:38:c6:99:6a:90:c1:1f:12:b3:51:76:37:c0:2e:8f:
25:9c:37:2a:95:4a:35:a7:8b:c0:10:1c:78:0e:6e:93:54:5d:
3b:62:6c:90:73:83:e7:ce:a8:9a:73:34:33:ac:23:b6:ac:e8:
a5:08:29:10:20:11:45:b7:82:55:7c:ab:fd:c5:ca:ef:f0:c5:
28:0f:05:b9:06:20:44:c1:7d:e2:58:fd:45:69:9d:9e:2c:ed:
40:dd:c2:d8:75:53:ba:87:da:52:d9:e6:a7:ce:d7:65:58:e8:
9f:3c:90:3a:52:93:dc:69:ca:5a:e3:1f:27:6c:b3:00:a9:fd:
0b:56:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:09 2025 by rpki-client