Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: vRTOKzCOfrE5JVIbiLeH+BVp7Ak2u3YU+fiYI6KigJM=
Subject key identifier: 94:1E:25:50:F7:E4:7E:6D:18:EC:1B:A6:CA:A9:6C:35:DB:32:9B:E7
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019894ED6DC3031D56E31B4E3C91F85EEF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 146C
Signing time: Sun 10 Aug 2025 17:00:44 +0000
Manifest this update: Sun 10 Aug 2025 17:00:44 +0000
Manifest next update: Mon 11 Aug 2025 17:00:44 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: h0DqLvTonk2Ol1Gp+Oln7nZbRi9zsbr88QkUrqMpDWE=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:6d:c3:03:1d:56:e3:1b:4e:3c:91:f8:5e:ef:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Aug 10 17:00:44 2025 GMT
Not After : Aug 11 17:00:44 2025 GMT
Subject: CN=941e2550f7e47e6d18ec1ba6caa96c35db329be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:4a:4e:e8:1c:76:b5:6e:1c:3c:02:68:00:
c0:41:bb:49:d2:bf:9c:02:cd:a1:a7:5d:da:3b:2b:
ee:b4:6e:a4:64:91:b7:10:f8:ca:f5:be:82:da:81:
4d:2a:fb:c7:62:cd:cc:c7:03:5f:76:98:37:83:ca:
15:d1:4e:0c:44:c4:b9:7b:be:05:e9:b8:5d:83:09:
ae:d4:a5:00:3f:b2:0e:b2:61:90:0f:ff:0a:a6:b9:
e9:e8:68:d8:73:41:fe:db:3a:42:d5:d8:19:29:74:
69:e6:ed:7e:59:b8:2d:c6:e7:65:0e:4d:84:06:a1:
63:e8:da:37:99:cf:9c:2d:1e:06:d9:18:fc:15:d4:
0e:8c:25:4d:54:1a:ef:67:84:a2:12:7e:54:80:47:
92:18:f4:13:af:40:aa:89:5c:90:c8:28:b3:1b:20:
fd:2a:a7:48:fb:11:0d:94:e1:00:31:f4:84:98:d7:
5d:88:15:3c:63:24:a3:e3:4e:39:12:bb:d1:eb:6e:
49:38:49:e2:a3:69:6f:98:4f:55:c5:5e:78:46:72:
a0:e3:21:24:95:4b:ab:b3:b6:19:56:a7:82:31:4f:
4f:04:38:b7:d1:c2:bf:57:42:83:52:14:a5:1c:1b:
7d:a0:3b:2e:c4:a6:62:1c:86:73:eb:80:85:dd:f9:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:25:50:F7:E4:7E:6D:18:EC:1B:A6:CA:A9:6C:35:DB:32:9B:E7
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:cb:fa:c0:14:56:ea:89:3d:66:73:0e:dc:bf:da:74:45:
2a:59:e0:ca:30:af:16:0e:9e:47:5b:96:01:60:a9:33:92:1f:
34:62:5e:cc:d4:18:22:ce:59:43:52:71:02:ac:7a:29:65:3d:
fa:b9:ca:43:2f:23:3a:28:f4:ca:3b:fd:38:a6:f0:33:3c:d4:
4c:7e:00:74:89:91:b9:83:56:7b:d1:7a:38:0f:4d:37:f8:11:
2a:6f:24:dc:47:16:82:16:e5:8a:23:e7:d0:42:78:28:69:93:
a1:71:ee:3b:87:23:1d:89:16:bc:8a:04:3f:59:05:f8:bb:42:
a0:88:08:e0:13:a2:3f:70:48:22:9d:7f:ba:3f:bb:0f:c7:eb:
12:31:65:80:13:6c:95:63:2e:52:db:39:67:c8:12:4f:fa:f0:
f4:cc:2c:91:bf:d7:6a:9f:de:b4:04:3c:96:0e:c9:b3:ef:95:
ab:84:eb:24:51:59:89:19:b4:45:30:46:2e:c3:a6:d5:95:0c:
4d:a4:8e:da:9e:d2:d6:47:7a:4a:1b:22:6a:cf:85:92:22:8e:
37:45:14:6e:0b:9a:21:03:9c:b8:e4:14:60:16:ef:c3:c8:26:
fd:34:49:a0:e0:e7:c3:74:c3:6e:c4:b3:aa:33:ab:45:d4:2a:
59:b6:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:26:45 2025 by rpki-client