
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: Rbnn11YsEWXJHWajXa7ycsf9sdKPAOLRj6B2hCNvXyo=
Subject key identifier: E9:78:8C:AB:4D:83:F4:F2:71:77:B2:A1:64:3D:0B:93:94:32:1A:8E
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 01987CE5377655122E7C55450B5EFD3E8A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 1387
Signing time: Wed 06 Aug 2025 01:00:53 +0000
Manifest this update: Wed 06 Aug 2025 01:00:53 +0000
Manifest next update: Thu 07 Aug 2025 01:00:53 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: OOrErKFFObc0d/L4g/l2fOzIPZRlsyGT+b9KRN5nMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:37:76:55:12:2e:7c:55:45:0b:5e:fd:3e:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Aug 6 01:00:53 2025 GMT
Not After : Aug 7 01:00:53 2025 GMT
Subject: CN=e9788cab4d83f4f27177b2a1643d0b9394321a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:56:8e:01:e4:bc:d7:db:22:c2:7d:8a:86:
98:4b:ab:cb:4a:36:78:d6:79:f7:8e:02:36:e9:02:
2e:32:b5:83:98:92:bc:6e:ef:2b:a6:1c:19:f5:b5:
2c:2f:8b:99:ed:59:34:96:9d:2b:e9:45:32:4e:02:
e3:a7:d1:c0:d3:36:96:d4:de:6d:c0:4e:f1:58:56:
e6:98:24:23:77:af:a9:e0:7d:16:1d:ba:73:b9:cd:
4f:5d:d2:ed:cc:ba:8d:03:57:32:3d:b4:ad:5a:13:
89:bd:fe:d7:59:51:71:4b:43:2b:ac:3c:e0:14:8e:
32:08:9c:65:f9:cb:1c:09:b5:6f:ad:cd:3e:e8:0e:
bb:14:09:93:53:1e:9b:e9:71:40:f1:ea:fe:0a:65:
af:25:4b:77:5e:45:38:2b:da:cf:21:15:1c:85:03:
8e:de:e9:38:b4:3e:e4:4e:75:fa:d9:69:41:1d:17:
06:d1:d6:ba:94:dd:02:31:7d:e7:3c:b2:f0:2b:33:
19:80:3c:d6:57:e9:f6:9c:64:17:de:11:67:ca:a4:
b9:1a:3f:5b:fa:e7:f7:5b:d8:11:f1:d6:4a:79:c5:
36:e3:ab:f4:42:7d:18:4d:ab:12:ef:6b:0d:52:4c:
9c:cd:83:f4:45:6d:fd:f7:32:cf:9c:8e:12:78:a1:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:8C:AB:4D:83:F4:F2:71:77:B2:A1:64:3D:0B:93:94:32:1A:8E
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:40:67:f2:5f:9d:6a:8d:41:83:46:87:ca:07:dc:cc:6a:
12:2c:82:d5:48:d0:aa:c8:2d:c9:d5:ac:7b:c0:66:1e:02:c0:
c4:f6:a2:5e:19:05:d9:50:96:77:08:a4:9e:81:d7:13:db:b2:
6a:d7:a9:60:a3:d2:26:fc:21:16:1c:a0:b0:91:0f:e9:a3:70:
ab:cc:fb:69:13:55:df:fb:fd:f3:a3:d0:c4:21:df:5b:42:fb:
3f:1c:5b:5d:a5:f8:d7:a3:78:1b:89:00:dd:ad:9d:b0:b9:64:
d3:2f:aa:7d:01:23:ed:18:67:3b:30:79:d4:bb:cc:9f:94:a0:
87:13:70:a3:a8:f2:8b:52:6d:9d:20:ee:5e:38:aa:e8:68:25:
e3:5b:dc:00:d8:6a:49:70:dc:49:7c:80:31:58:78:9a:23:0c:
af:58:24:99:0f:c4:c0:96:89:eb:d9:94:96:05:94:7a:f8:94:
0f:70:18:23:1b:79:f5:64:3e:9d:9e:81:0a:e6:bd:e2:b6:3b:
fd:97:fe:7c:55:23:71:91:00:58:79:66:8c:25:2a:e8:7e:b0:
ad:83:4c:4e:e9:f8:fd:d4:4e:be:61:05:27:bf:63:b9:33:c0:
c5:3e:c8:6a:00:57:b7:c9:e9:12:69:aa:58:10:2c:f8:03:59:
d7:13:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:50 2025 by rpki-client