Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: HjLMxwyUhmvOq4fx2D+L2Hf2mTG+Y+8pTJrq71OUdlw=
Subject key identifier: A8:C0:FD:21:CD:93:58:E6:E7:50:CF:27:ED:EF:48:18:BA:F7:0B:BC
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0198936CF260D95F6605D098DDCA7950FC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 10:00:47 +0000
Manifest this update: Sun 10 Aug 2025 10:00:47 +0000
Manifest next update: Mon 11 Aug 2025 10:00:47 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: zXz59T5eJhKoI66ouwBFhiIoLrJzCHEuzEFLMgWVgJY=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:f2:60:d9:5f:66:05:d0:98:dd:ca:79:50:fc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Aug 10 10:00:47 2025 GMT
Not After : Aug 11 10:00:47 2025 GMT
Subject: CN=a8c0fd21cd9358e6e750cf27edef4818baf70bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:53:d2:08:74:39:c0:90:ae:f7:59:cf:f1:
57:53:0c:09:9f:a4:a4:90:5c:be:09:d9:4e:3b:3c:
4a:25:62:84:d7:b7:6b:8c:d5:e4:3b:32:8b:80:72:
c7:6b:17:c0:ba:b3:78:72:ea:34:fe:25:65:14:ee:
6e:87:25:bc:08:7d:85:7e:43:12:fd:79:6a:03:12:
9f:13:22:3b:a7:94:1d:35:df:50:24:6d:2b:90:8f:
22:04:a3:97:39:39:53:83:54:e8:dc:77:24:39:73:
42:0c:d9:fe:f4:45:85:8a:e6:5a:eb:9d:d0:f4:3c:
ba:3f:45:ee:48:4c:4b:cb:fd:f2:55:7b:16:a1:fc:
12:da:e1:01:51:f2:cf:ea:2b:4c:bd:7f:29:47:42:
e6:c8:9f:15:84:ee:f7:01:46:4c:11:e8:10:ae:d3:
c8:2d:26:9b:77:04:82:fb:6c:25:41:e6:c7:3c:8c:
f5:c0:4c:59:d3:d1:f5:70:18:17:db:ed:26:ae:31:
b6:e0:c1:49:86:95:48:46:e5:54:32:6d:44:8d:65:
25:6c:0c:9b:d8:82:dd:65:d1:17:da:89:09:1b:e2:
3b:b4:69:94:61:67:d8:63:7a:d0:16:43:a4:de:26:
72:f1:d2:ca:c3:dc:6d:d2:e4:23:62:cf:1f:52:33:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:FD:21:CD:93:58:E6:E7:50:CF:27:ED:EF:48:18:BA:F7:0B:BC
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7d:d0:a9:eb:4d:c2:0c:84:20:64:a7:2c:2f:1e:51:bc:30:
85:81:21:cc:05:9d:67:60:a9:a3:c0:2a:79:c1:3c:80:d9:3d:
44:8e:ab:93:aa:a1:a1:40:93:21:5e:41:76:30:c4:a9:5a:7c:
a2:17:1a:82:82:a2:3e:d3:d8:b0:bf:b1:96:25:ef:b5:83:ab:
b9:fd:25:3a:85:21:f8:2a:3b:3d:28:57:de:47:1f:ac:f4:1a:
32:86:2c:c5:ff:0d:7b:5d:20:cb:2c:98:1b:1c:48:92:5c:ef:
33:19:60:5d:b0:d8:80:a2:81:8f:42:d9:91:5f:77:11:72:d3:
67:7c:5f:97:0b:c8:82:96:2b:e1:74:60:2c:7d:54:1a:1f:7c:
cd:2f:93:62:d4:0f:ae:13:54:33:d9:af:2e:98:b8:d0:d8:2f:
b0:00:3d:ca:5f:52:bd:20:60:62:93:6e:34:2a:78:6a:9e:a4:
23:53:44:75:df:13:06:f9:89:01:3a:d1:89:40:a0:61:26:89:
97:42:36:57:75:4e:95:15:1b:6f:cf:52:03:c1:5a:ac:3a:a8:
b9:41:2f:b1:dc:af:81:88:22:c0:c9:69:1a:1b:e5:e0:8d:d9:
d3:c0:a8:59:6f:5d:73:b4:94:d4:2a:35:db:fe:a0:6d:31:f4:
6a:1d:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:35 2025 by rpki-client