
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: /r5dJGAplY9cN4Stg25gRggzqJKi537/Obxxzv1MN0A=
Subject key identifier: 15:A1:8F:02:07:C2:81:7E:E1:D0:1D:70:93:7F:C7:32:74:CC:90:AE
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 019879AE088FB3D5869FBAEF715B07FEB020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 08E1
Signing time: Tue 05 Aug 2025 10:01:45 +0000
Manifest this update: Tue 05 Aug 2025 10:01:45 +0000
Manifest next update: Wed 06 Aug 2025 10:01:45 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: SeePSPJ2E2rLORG3lRwkHYyeuTCUrfbpq0jK4wp8v88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:08:8f:b3:d5:86:9f:ba:ef:71:5b:07:fe:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Aug 5 10:01:45 2025 GMT
Not After : Aug 6 10:01:45 2025 GMT
Subject: CN=15a18f0207c2817ee1d01d70937fc73274cc90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:f5:9f:1e:5d:b7:cf:d8:ab:75:b1:97:60:
aa:73:25:04:b3:7e:d2:a5:fe:cf:2f:cd:d4:9d:fe:
08:98:06:72:a2:7c:40:f7:73:a4:50:74:9b:51:fa:
43:40:66:d8:f5:8f:ee:08:24:e0:b0:68:b7:d2:91:
79:cf:e5:79:3b:ea:53:b6:62:75:92:6e:90:9f:a5:
2b:2d:32:e1:84:7c:b5:8e:a9:da:c0:52:c8:e4:f4:
d1:ed:37:80:fa:73:d2:46:22:2a:6f:29:c2:68:9c:
1f:22:48:43:59:10:3d:7a:9c:a5:f7:fd:fe:4e:c2:
8e:be:eb:26:80:6b:82:f0:9b:e7:ff:a8:87:43:c8:
d2:cc:29:ec:81:7c:be:c7:51:ef:ba:a6:ad:2d:99:
e5:96:1a:03:76:cc:ab:99:ee:f6:86:be:a3:68:52:
76:b4:4d:09:7b:1d:78:fc:3e:cb:b4:1f:87:a5:cb:
96:8d:7b:2d:7f:d1:13:e0:db:b1:77:0b:6a:f9:b5:
23:c7:69:c5:40:b1:e6:41:ed:94:cf:d2:f0:22:2a:
1f:bb:5f:8c:32:c8:8f:c7:25:85:de:8d:85:82:4b:
3c:20:d0:df:52:5a:23:53:ba:d2:7f:18:28:b6:44:
33:a3:9f:c6:6a:83:db:ee:c4:cb:7c:75:54:5f:4b:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:8F:02:07:C2:81:7E:E1:D0:1D:70:93:7F:C7:32:74:CC:90:AE
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:38:de:dc:e5:8b:96:ab:fe:0b:41:b1:56:56:12:81:a7:00:
b0:bf:3d:de:62:6c:cc:55:58:1c:cd:16:01:67:a6:51:0c:1b:
fc:71:34:e8:ff:68:39:e3:95:6f:5c:de:38:19:48:f0:19:bb:
3e:36:b4:94:51:4b:2e:f6:61:fe:7a:62:de:ae:dc:4f:58:ef:
b2:2a:cc:77:53:75:aa:05:0a:23:42:65:95:1d:47:ea:aa:a5:
d0:00:65:cd:46:28:bc:6e:90:9c:42:0b:8a:dc:04:d5:fc:60:
fc:28:e5:c6:06:fe:fb:2e:77:dd:46:0f:6b:e3:17:56:d2:af:
79:cb:ab:ac:e9:76:88:95:a2:5b:ec:02:d2:5d:99:a7:30:90:
78:34:e6:2e:31:bf:f0:2c:f0:ac:aa:82:3b:f0:4e:74:17:50:
17:05:48:29:72:5a:ce:ad:e7:e4:90:3d:fe:b3:47:3c:7c:ac:
f8:2b:40:62:58:e9:2a:f4:2c:cc:92:d1:42:3e:3e:8e:86:e6:
c0:dc:91:a1:92:66:e0:af:28:30:6e:e5:91:ac:1e:03:b5:7e:
ac:ab:5e:07:e9:f0:27:f2:06:a4:74:b1:c6:de:bb:21:7d:5a:
0c:6e:12:e6:a5:7d:85:d3:b8:02:f1:da:8f:bc:e5:9d:12:f9:
a0:05:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:00:14 2025 by rpki-client