Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: mct9l/ed1soIt3aKA7OPgxgXzzMRU92QeVMaWN0b0SE=
Subject key identifier: 2F:9A:DA:7F:BB:25:AE:12:07:2E:23:2D:F8:1C:90:D5:9D:83:DC:6E
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0198808B88C74E8E6446C471DCEDBC5CF2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0BC8
Signing time: Wed 06 Aug 2025 18:01:24 +0000
Manifest this update: Wed 06 Aug 2025 18:01:24 +0000
Manifest next update: Thu 07 Aug 2025 18:01:24 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: nVeK0V2IihBJc2K5OmsVo86muFdhfpoeUXThfYk8roA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:88:c7:4e:8e:64:46:c4:71:dc:ed:bc:5c:f2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Aug 6 18:01:24 2025 GMT
Not After : Aug 7 18:01:24 2025 GMT
Subject: CN=2f9ada7fbb25ae12072e232df81c90d59d83dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:57:02:2f:be:1c:57:6d:5a:3e:52:b9:5c:
7c:2b:dc:b0:e0:fe:33:3a:82:ba:bc:f3:a7:f1:a1:
f2:51:82:90:41:8a:07:a9:9c:dd:53:b9:e3:eb:2b:
51:a2:f2:2f:77:56:93:ce:57:60:75:49:22:22:90:
bb:c0:b8:96:95:33:75:0b:6e:ff:ef:b0:d0:84:a1:
0f:be:01:96:b6:ff:e1:2c:bb:77:16:0c:e9:0f:78:
96:3b:da:c8:89:e3:c0:01:b9:bd:1b:3a:fe:90:51:
fd:6d:10:94:0f:54:e6:ea:1d:37:9a:39:f4:3a:29:
67:ab:97:2b:74:7b:80:c4:5a:40:47:5c:64:4d:ac:
07:ca:5f:44:a3:fe:c3:7a:90:61:84:27:a4:ea:f9:
0a:af:4f:89:4a:87:93:bf:3f:39:a6:1d:6a:7a:66:
d6:b6:aa:c9:76:d5:48:1a:4a:28:29:c9:95:bb:73:
82:1a:51:68:69:28:1b:0b:cc:cd:59:e6:9d:a2:dc:
09:3c:c8:19:01:39:98:65:85:45:f8:7b:fb:40:07:
5e:c4:c3:80:15:f4:a2:c3:c7:82:4f:45:85:40:45:
e7:7c:b5:14:59:f2:96:a8:b2:90:74:6b:c4:97:c9:
2c:76:d1:49:34:6b:3f:68:b0:a5:64:59:f1:cc:96:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:DA:7F:BB:25:AE:12:07:2E:23:2D:F8:1C:90:D5:9D:83:DC:6E
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:e8:07:55:88:b0:51:a0:44:2f:95:cd:ed:a1:69:89:1a:
7e:0a:3e:fe:7e:fd:9b:64:2f:25:72:f3:2d:42:dc:28:be:c6:
a6:1d:5a:4d:02:07:ad:9c:63:ff:7d:2f:84:dc:03:0c:b7:48:
24:b3:34:92:b3:01:4a:f0:b5:20:35:58:db:12:34:37:36:5d:
95:1d:52:fc:9f:f5:c5:8f:47:82:01:fe:34:9d:78:28:3c:31:
ca:31:19:1d:a3:b8:84:02:cb:6c:f2:7a:90:fd:f1:cd:2a:e4:
82:17:fe:a2:a5:1c:a0:8a:10:fb:1e:d9:ad:7b:91:f4:e8:e3:
40:ba:99:f8:12:86:b8:1c:28:ec:d8:cc:b0:bd:2e:d3:15:46:
23:1b:3f:44:09:da:54:fd:0e:61:a3:40:cc:90:3a:ff:ad:1d:
9b:06:2e:b0:54:dd:33:78:88:ff:14:be:79:16:05:bd:37:63:
5b:46:aa:30:24:e2:12:0f:e0:09:76:15:26:26:2b:d6:be:52:
cd:70:d7:ca:50:9f:1b:5c:41:94:c6:bd:c1:40:70:58:df:e2:
aa:80:ba:8c:53:6d:eb:6c:89:5d:c0:11:40:73:d4:0a:d2:2e:
e0:e4:38:2e:6f:3e:53:65:2f:75:10:ed:d0:dd:ce:c0:63:3c:
d9:77:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:00 2025 by rpki-client