
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: 01z903ad9vrtBLcQYJPL1Iusl/qMRa7Lb2vn//DyJyE=
Subject key identifier: B8:53:97:4F:1A:9C:BF:CA:E8:D8:4A:57:17:6B:62:28:DB:11:A8:B4
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0198854492BFACEF958CED1A0E1D2766D587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1440
Signing time: Thu 07 Aug 2025 16:02:00 +0000
Manifest this update: Thu 07 Aug 2025 16:02:00 +0000
Manifest next update: Fri 08 Aug 2025 16:02:00 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: k7UK9VBe9Y0RuLF0sRIoBwzyzLUipYATFGXddKWNrCE=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:92:bf:ac:ef:95:8c:ed:1a:0e:1d:27:66:d5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Aug 7 16:02:00 2025 GMT
Not After : Aug 8 16:02:00 2025 GMT
Subject: CN=b853974f1a9cbfcae8d84a57176b6228db11a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:91:f3:fe:55:68:21:02:7c:55:c0:9e:a8:
15:3d:e8:8c:e4:fd:56:8e:f3:0c:29:e7:d7:ad:9d:
25:7a:e7:3b:98:a2:72:67:f5:d0:ab:ac:e1:a4:1f:
12:74:3f:5e:ed:86:ac:15:1f:6d:cb:30:0b:3f:89:
da:69:40:a9:ad:30:3e:18:da:50:b6:11:f5:0e:f0:
44:bb:17:cf:7e:61:66:0c:26:43:d4:57:75:57:3d:
3e:29:e2:44:4a:65:52:e2:ab:7e:33:63:a5:8c:99:
bd:bb:38:6f:7c:bb:f4:69:d2:0c:4e:19:e5:5b:76:
4d:0e:cf:b0:f9:fe:92:a3:79:35:08:86:fc:06:b9:
a1:7e:8d:a9:97:1b:01:55:ca:22:86:c4:f0:15:b1:
20:5e:d9:93:4e:29:93:8f:bb:59:a5:ae:d2:dd:e5:
81:17:61:3e:d4:e6:c5:c2:e3:8b:1a:b2:a6:27:b6:
d8:cb:9e:7b:93:c3:a4:c6:df:d1:a0:ef:70:16:07:
84:87:34:05:71:cf:f0:4b:02:a8:84:bb:ec:9e:1e:
87:d5:b6:17:60:87:6c:9a:a0:6d:a8:89:c9:6e:c3:
04:a1:a1:6a:54:9d:45:9d:90:83:a3:89:8d:f0:4b:
ac:c8:74:06:0f:84:7d:35:b0:79:c1:8b:ad:ef:86:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:97:4F:1A:9C:BF:CA:E8:D8:4A:57:17:6B:62:28:DB:11:A8:B4
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c9:73:72:1d:8b:07:b1:83:2b:b6:d4:7d:f2:d1:d1:a6:9a:
2c:f6:c3:56:b6:76:aa:8d:17:b0:2e:d9:47:5d:5e:0e:04:4e:
69:51:fd:e8:a0:75:2d:2e:95:1f:ae:93:d4:9c:74:5f:39:b1:
1c:96:cd:aa:24:36:fa:09:24:e3:d9:70:21:a5:2d:80:9f:1f:
e9:c3:c1:39:92:04:f2:f3:b6:75:7e:9d:35:36:f3:17:31:97:
92:c0:ff:ee:40:49:a7:4c:9f:09:b9:91:bf:6f:1d:d3:78:b2:
85:fa:ea:48:d0:f5:83:6d:d3:17:9c:37:64:36:fa:59:43:00:
b6:74:93:14:62:69:13:7c:0e:1e:f2:5d:6a:6b:3c:bd:2a:fb:
21:41:94:3d:23:cb:00:d6:e2:b6:60:9e:5d:a1:17:26:a2:9b:
e8:64:b1:20:4d:0c:d5:8c:1a:2d:f8:28:9f:a9:ee:a0:9f:0c:
c4:d1:65:dc:e9:66:a0:60:62:b6:61:05:90:7b:06:26:61:89:
f6:d8:65:4d:cf:fa:92:b0:8a:58:a0:76:59:3c:9a:47:87:80:
9a:3c:16:74:d7:54:65:c6:86:ec:ba:2e:9c:3f:7b:cd:6b:9b:
83:8e:b2:4e:b6:e2:de:5b:5f:61:35:09:26:3e:4f:93:72:da:
94:90:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:50 2025 by rpki-client