Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: mINFvXo30hhgrCwRnnKFMBqD/tWNNyC9E1tL96e3lXI=
Subject key identifier: 6B:D4:B6:BF:C3:CE:7B:06:98:C2:35:30:12:98:F3:E1:DD:EA:30:B7
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 01987908393742974BB803C7594ADB5318EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 07:00:38 +0000
Manifest this update: Tue 05 Aug 2025 07:00:38 +0000
Manifest next update: Wed 06 Aug 2025 07:00:38 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: nLUwld1i/fDmwnzLt5CJbaut3SyD960Oc3xqMLYuvfM=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:39:37:42:97:4b:b8:03:c7:59:4a:db:53:18:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Aug 5 07:00:38 2025 GMT
Not After : Aug 6 07:00:38 2025 GMT
Subject: CN=6bd4b6bfc3ce7b0698c235301298f3e1ddea30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:3f:26:10:66:e3:44:fb:90:38:10:c7:77:
84:85:82:c0:dd:b0:e1:e2:d4:81:87:8c:4b:36:59:
fc:4d:b6:f9:c8:69:30:bf:6d:06:d8:26:0a:04:9a:
6f:ee:93:f6:b0:06:26:b5:e7:cc:3a:f9:f1:f1:40:
14:f6:3b:3b:31:54:10:26:0c:7c:56:05:ae:c1:a4:
8f:60:17:9c:cd:16:1f:97:2c:d6:d3:aa:e6:cd:14:
ff:c3:60:df:96:8d:4e:57:07:0c:9a:94:06:d4:f2:
e6:db:f0:57:b5:0b:87:cf:be:8b:7b:51:e6:81:bf:
e8:f2:18:73:4f:b0:ce:92:1f:65:21:50:e0:fe:0d:
87:68:0a:97:a9:8c:d8:4c:38:09:e2:69:85:1e:6b:
2d:23:e3:17:54:12:07:bb:21:cf:d4:03:1b:c9:7c:
ba:d5:d8:2e:38:7e:a3:29:52:d3:66:1a:02:44:19:
e0:d4:72:02:40:4f:4c:5f:17:4e:69:ee:11:6e:85:
d6:aa:ef:ef:2f:1f:b0:48:f5:fe:c7:46:4c:95:f4:
e7:5a:05:46:9d:2a:cd:bc:df:36:53:0c:79:e4:45:
cc:de:7d:fa:47:ed:11:a9:ba:ba:4d:83:8e:65:92:
99:b1:bc:29:1b:5b:4c:2f:d6:4e:59:9f:b9:9a:92:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:B6:BF:C3:CE:7B:06:98:C2:35:30:12:98:F3:E1:DD:EA:30:B7
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0d:8c:19:18:c1:80:f9:ef:f5:03:aa:4d:ef:45:0b:c3:7f:
e5:1a:e7:fd:24:cf:1d:7e:9e:89:b3:96:0c:e3:b1:e4:4b:cc:
5f:b1:cd:6a:36:bd:37:48:0b:f3:5a:2d:aa:59:9b:0d:35:5b:
8d:0f:b1:26:d8:0d:70:e8:d2:56:bb:66:47:6b:5e:e9:86:ab:
b6:3e:52:7d:82:61:7c:4c:4b:ed:59:48:2d:69:b8:f6:29:de:
72:87:4b:c8:ef:72:21:f3:56:b6:a6:db:3b:81:81:d6:5d:8e:
6d:19:7a:c4:21:4b:f9:98:7d:f1:5c:65:f6:fc:26:1e:93:f2:
9a:83:a4:21:1e:26:63:dd:48:8b:2f:4c:88:f3:c6:2d:28:06:
78:06:64:1b:02:18:41:36:97:ec:72:06:5e:b3:5b:4b:40:14:
d9:f2:17:d7:72:5f:60:0f:98:75:20:5d:92:5a:ac:b5:76:96:
58:a2:60:ee:19:c0:0c:42:6a:29:14:6f:7c:ed:3f:23:b0:91:
1b:cf:35:02:34:05:9f:40:ba:ec:ec:68:7b:c4:72:46:d7:92:
6c:cc:87:88:bd:d7:c0:e7:ca:17:bf:8d:83:34:99:31:9a:eb:
51:2f:d9:c3:f4:79:c8:0e:e7:e4:9e:49:43:82:3b:e6:2a:0e:
03:61:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:08 2025 by rpki-client