Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: XyHg9uHZsKamxYg5h1b86cb8sizdZAncvGUe9GV8chc=
Subject key identifier: DA:A8:FE:AA:01:1B:F3:95:A9:BD:C9:6C:53:EF:7E:89:68:10:FD:FC
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 01987E9C5169E42833BEB2F9608DE63CC3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: E2
Signing time: Wed 06 Aug 2025 09:00:30 +0000
Manifest this update: Wed 06 Aug 2025 09:00:30 +0000
Manifest next update: Thu 07 Aug 2025 09:00:30 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: Ee4ZmEem2o6aOYJ56060oVaMeF/A/V4FzTL+kHR5MDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:51:69:e4:28:33:be:b2:f9:60:8d:e6:3c:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Aug 6 09:00:30 2025 GMT
Not After : Aug 7 09:00:30 2025 GMT
Subject: CN=daa8feaa011bf395a9bdc96c53ef7e896810fdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:6e:35:0b:2a:9f:2e:1a:66:fc:7d:e5:6c:
55:62:fa:70:f3:91:d1:02:3c:9e:12:3f:1b:47:96:
68:ff:ee:64:93:e4:33:18:97:91:cb:f3:e7:1a:19:
4d:2f:37:e5:9c:6e:2b:83:e4:fc:3e:ba:c9:05:83:
6e:f7:d3:c2:aa:58:9a:65:81:d1:c3:70:e7:8c:34:
af:bb:bb:45:96:91:fa:24:5a:cd:3d:9a:3c:f8:a2:
9b:6e:28:ba:1e:f3:34:07:2e:bf:17:07:2f:e8:9a:
6e:ee:48:25:76:c2:49:5c:90:d4:bc:a4:b0:33:bc:
ea:89:08:23:f6:25:0b:f8:82:e5:ac:89:0c:78:ad:
fe:33:31:72:05:3c:82:67:ec:dd:3f:6f:5b:5a:63:
44:f6:e1:05:83:4f:46:1a:12:3a:13:cd:a4:ab:2e:
9c:86:fa:93:d2:2b:b4:f9:23:75:0a:24:1b:25:5b:
b3:03:e6:9a:8b:ee:22:54:30:f4:67:df:9a:a9:10:
f1:87:6f:01:cb:4f:f3:23:77:32:5d:61:76:87:a0:
b2:53:50:77:69:9b:2a:fe:6f:1c:82:50:9e:06:20:
2c:e8:49:91:bc:64:f4:7b:1c:cd:c4:20:41:10:bd:
c7:9e:98:71:4b:ac:c9:41:63:eb:5e:5c:57:64:df:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:FE:AA:01:1B:F3:95:A9:BD:C9:6C:53:EF:7E:89:68:10:FD:FC
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:98:02:73:39:42:3d:74:c9:88:f6:2f:88:bc:5d:a2:90:99:
01:27:ba:21:64:79:ad:62:41:16:6a:a7:da:a0:87:99:17:7d:
37:85:42:63:88:2f:fa:91:11:c3:c3:ac:24:bf:59:57:0f:e3:
1c:14:7a:2a:ca:36:f7:d2:c1:f5:a0:34:07:01:84:e3:6b:c9:
be:41:ec:2d:31:55:07:19:28:27:75:b7:52:d5:43:29:41:4b:
fc:a3:7d:64:a7:e3:21:f9:96:a2:86:a8:e9:ac:60:f4:01:89:
7e:be:44:5e:b5:a0:cd:64:78:bf:0c:03:b8:53:4d:3c:67:7f:
a2:db:93:31:aa:46:3d:66:8a:57:f6:40:ad:6f:f6:10:40:0e:
34:3b:5e:83:f1:20:4b:b8:05:fc:ed:3c:47:c9:0c:54:5b:d5:
39:a5:e1:98:19:ad:6e:34:be:5f:7b:80:5a:3f:0d:0c:b4:fd:
37:0b:15:90:11:41:28:13:1d:9f:1c:3c:ad:b9:e2:c7:c7:f1:
c8:0f:ca:c8:d0:cd:5e:71:5e:85:df:9c:ec:31:8a:e8:7f:19:
28:37:c9:3c:da:ea:83:25:a2:56:25:7f:ed:2e:69:4a:87:6b:
9f:d8:c9:ec:c1:58:b9:c8:a9:39:1a:4f:8f:9e:3a:53:63:9e:
a8:2c:a4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nFFp5CgzvrL5YI3mPMPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk
ZTg4YTYwHhcNMjUwODA2MDkwMDMwWhcNMjUwODA3MDkwMDMwWjAzMTEwLwYDVQQD
EyhkYWE4ZmVhYTAxMWJmMzk1YTliZGM5NmM1M2VmN2U4OTY4MTBmZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSZuNQsqny4aZvx95WxVYvpw85HR
AjyeEj8bR5Zo/+5kk+QzGJeRy/PnGhlNLzflnG4rg+T8PrrJBYNu99PCqliaZYHR
w3DnjDSvu7tFlpH6JFrNPZo8+KKbbii6HvM0By6/Fwcv6Jpu7kgldsJJXJDUvKSw
M7zqiQgj9iUL+ILlrIkMeK3+MzFyBTyCZ+zdP29bWmNE9uEFg09GGhI6E82kqy6c
hvqT0iu0+SN1CiQbJVuzA+aai+4iVDD0Z9+aqRDxh28By0/zI3cyXWF2h6CyU1B3
aZsq/m8cglCeBiAs6EmRvGT0exzNxCBBEL3HnphxS6zJQWPrXlxXZN+haQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqo/qoBG/OVqb3JbFPvfoloEP38MB8GA1UdIwQY
MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt
NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1
LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZgCczlC
PXTJiPYviLxdopCZASe6IWR5rWJBFmqn2qCHmRd9N4VCY4gv+pERw8OsJL9ZVw/j
HBR6Kso299LB9aA0BwGE42vJvkHsLTFVBxkoJ3W3UtVDKUFL/KN9ZKfjIfmWooao
6axg9AGJfr5EXrWgzWR4vwwDuFNNPGd/otuTMapGPWaKV/ZArW/2EEAONDteg/Eg
S7gF/O08R8kMVFvVOaXhmBmtbjS+X3uAWj8NDLT9NwsVkBFBKBMdnxw8rbnix8fx
yA/KyNDNXnFehd+c7DGK6H8ZKDfJPNrqgyWiViV/7S5pSodrn9jJ7MFYucipORpP
j546U2OeqCykdw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:06 2025 by rpki-client