Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: ZYdkZ+iL3nn2sV0XW0WntMmhpAWZApZD9t8pPCrTt/Y=
Subject key identifier: 02:06:FA:DF:FF:B9:85:44:CB:9B:67:3E:F5:D1:75:FB:3E:E4:45:BC
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 019873E29336CFC2A7C3575C2508BEFAE72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 07:01:25 +0000
Manifest this update: Mon 04 Aug 2025 07:01:25 +0000
Manifest next update: Tue 05 Aug 2025 07:01:25 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: B89Fjs/qmRSKseWAKCHke8KBEX+M+i38en0XG8fz1fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:93:36:cf:c2:a7:c3:57:5c:25:08:be:fa:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Aug 4 07:01:25 2025 GMT
Not After : Aug 5 07:01:25 2025 GMT
Subject: CN=0206fadfffb98544cb9b673ef5d175fb3ee445bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:13:a6:89:5e:5f:d7:58:b2:e3:31:66:95:
8b:e5:5b:2f:fa:a4:5f:0c:89:ad:ad:3d:47:80:4b:
c3:d8:78:c0:86:a9:22:e4:4c:23:66:b4:0b:85:d2:
8e:7c:5e:94:2a:f6:41:58:03:3f:05:57:55:34:ea:
bc:f8:41:0d:96:b3:4b:78:03:ab:b1:e8:34:b1:97:
d0:55:f4:b0:fc:46:7d:12:85:39:d3:74:e8:d4:07:
f3:ab:1c:c9:29:d6:00:b2:c5:2f:7d:02:a2:86:60:
b7:82:7d:27:dc:ca:cf:2c:90:32:0c:e6:79:65:63:
d1:36:a1:e7:9a:39:b0:b8:03:1a:78:e5:45:29:ac:
c9:f9:73:40:44:5d:e2:6b:9b:78:4a:04:04:2a:c7:
1e:da:51:7f:86:4f:e2:71:35:a1:4e:fe:d5:ac:3d:
f3:13:8f:e2:a5:83:ac:ca:2b:0d:a8:fa:4f:d6:35:
b9:16:bc:a0:18:dc:6a:09:d8:f2:65:66:5a:01:20:
07:60:97:cc:b8:1a:c2:5d:35:4a:e4:47:ba:0b:66:
e4:0f:3d:c7:af:5e:ce:04:46:c1:37:12:04:6e:8b:
9f:99:e0:42:6c:e5:3c:c8:ef:49:eb:82:52:c5:e5:
15:47:50:80:12:1a:97:c8:5d:a1:c7:df:b7:72:df:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:FA:DF:FF:B9:85:44:CB:9B:67:3E:F5:D1:75:FB:3E:E4:45:BC
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:05:d6:27:44:29:95:f6:ad:db:6d:2c:d9:c7:7c:76:fa:
fd:b5:3a:69:01:23:2f:06:a6:d3:5b:9c:0e:04:11:36:ce:3b:
12:34:4c:44:58:19:7d:ca:c4:42:ed:ed:63:0f:e2:b8:7c:92:
eb:2d:c5:de:09:b7:2b:c0:40:62:89:93:16:64:71:23:0f:1d:
32:97:af:9a:86:66:bf:18:63:7e:27:3f:96:91:0e:67:f2:6e:
75:7e:2c:d1:ee:cb:c5:2e:74:59:04:09:e8:66:db:c5:a4:85:
7b:5f:bc:39:47:2e:4c:03:c2:41:f1:0c:c1:2e:99:4b:25:93:
53:2c:dd:87:02:c8:81:5d:9a:05:a4:80:59:f8:6b:3e:40:5a:
b6:8f:68:29:c7:89:c8:d4:54:fa:00:bf:b9:e3:cb:0b:48:a7:
bd:19:a1:82:d9:ed:c3:88:01:a4:7f:78:71:7f:17:c4:b0:66:
d6:47:62:c3:8d:6e:65:05:a3:7c:3b:67:48:e9:e6:b6:88:2c:
17:0b:e4:87:f8:e7:96:95:8a:46:b2:50:70:79:75:05:11:4a:
e8:8c:71:7e:cb:e2:63:94:56:0c:55:f4:5d:ea:b8:cd:2b:e5:
dc:71:46:c0:bc:bb:eb:91:a9:fc:b1:33:18:92:7a:14:96:a7:
18:55:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:42 2025 by rpki-client