Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: Y0727+IgWOt/1hac9dg6dOom9v8wklPo3Em58pibT8Y=
Subject key identifier: DD:51:7F:7F:17:51:38:B8:9B:96:B7:7E:6E:67:77:86:98:5A:D0:43
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 01988FFDFFA00F066285E7B0B64B73C5EAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 162D
Signing time: Sat 09 Aug 2025 18:00:44 +0000
Manifest this update: Sat 09 Aug 2025 18:00:44 +0000
Manifest next update: Sun 10 Aug 2025 18:00:44 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: O8+IKDNyYIOBRfCLzl4EYoLGjKthuUqGPVu5S1wwI74=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:ff:a0:0f:06:62:85:e7:b0:b6:4b:73:c5:ea:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Aug 9 18:00:44 2025 GMT
Not After : Aug 10 18:00:44 2025 GMT
Subject: CN=dd517f7f175138b89b96b77e6e677786985ad043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:1e:07:8f:fb:65:ee:fb:41:24:21:f9:e5:
79:40:2e:4f:14:c3:b3:72:e4:3a:17:59:8d:1c:79:
83:c7:95:e4:d9:8d:94:cd:d0:ee:d9:d0:8e:94:2d:
7b:c7:96:8a:29:a0:78:2f:4f:f4:7c:dc:42:8b:be:
62:d1:72:89:a1:2e:cb:ef:0b:25:75:12:0a:5c:1a:
b9:c5:af:94:66:69:0b:b9:5c:69:b0:70:91:30:86:
a8:fc:78:86:f1:47:05:5e:fc:ec:77:a4:9f:d6:48:
40:a6:7e:88:07:2f:9d:58:a0:00:46:6b:dc:e1:91:
9a:10:d2:aa:a7:29:27:99:30:00:e6:76:8d:59:72:
32:35:2e:bc:56:78:49:d5:a7:34:25:b4:56:02:a2:
b1:ed:58:2b:d6:4e:68:a6:6a:0c:53:87:d9:e1:4d:
8b:c8:06:22:e3:31:82:16:a2:c2:02:e5:c8:98:00:
ea:c3:e7:d1:1f:e2:61:5d:33:0c:d6:24:de:4b:0c:
d9:56:7e:99:03:d6:26:e5:cf:ad:b9:7b:d7:5f:57:
cb:fd:01:25:39:60:dd:9d:56:32:8d:a7:b0:9c:c1:
ee:20:1c:18:d1:4a:37:f5:55:e5:8f:2e:fe:0a:38:
aa:af:a4:e2:f2:0c:e7:bc:86:cc:30:9f:af:48:d0:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:7F:7F:17:51:38:B8:9B:96:B7:7E:6E:67:77:86:98:5A:D0:43
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:39:56:2c:1c:05:cc:c0:32:f7:f8:84:87:78:70:75:79:
34:4c:73:0a:6d:78:bf:8e:52:24:e4:3b:d1:d2:fd:c9:9e:57:
3f:99:ff:82:31:4b:c6:61:d0:50:8b:f0:a3:39:66:02:13:4c:
c0:b9:0a:71:f1:36:d4:1d:70:2b:c2:cc:e3:93:e0:d0:7e:ce:
92:d6:0e:a2:a1:d1:f0:ef:04:93:b1:8a:76:52:8e:93:0a:29:
3c:85:6a:52:57:a8:bf:53:1e:21:72:4e:49:0b:1a:66:50:a7:
3c:e0:71:50:ea:f3:08:9b:90:b7:3a:83:31:db:b3:a8:d9:df:
86:18:82:76:a1:26:22:ba:3c:5f:10:0b:a2:60:2f:23:2e:68:
27:dc:63:60:ed:c1:e9:39:5a:03:3d:1d:fd:c0:60:7d:98:8e:
57:be:c0:a3:8f:bf:04:84:5e:84:6d:f5:9d:70:ef:20:9a:53:
7f:27:df:da:9f:04:ec:04:ae:fd:14:8a:d6:85:c7:ff:39:33:
da:4f:7e:8a:26:b9:56:d8:37:5b:95:66:26:1e:4c:c2:61:0c:
6c:68:e5:45:d7:7e:de:86:ef:35:2a:a5:ae:48:73:08:85:12:
38:cd:8f:21:90:ce:ab:82:a7:66:50:27:2c:31:1b:98:68:02:
71:72:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:36 2025 by rpki-client