Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: H8IgGAHnlj1ixQdv6Ffz+vhleQNj/hp7mpQa8ELSzUw=
Subject key identifier: 0D:F6:A4:9E:D0:AF:3E:DE:AD:BB:A7:93:7F:EB:D6:DC:F6:6B:41:43
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019892C8CD2444692F7DFC9E2E3C78FB6ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0B70
Signing time: Sun 10 Aug 2025 07:01:29 +0000
Manifest this update: Sun 10 Aug 2025 07:01:29 +0000
Manifest next update: Mon 11 Aug 2025 07:01:29 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: EnR2drOY2waCMlol+lZIIcEoV20nh+KVQBt6VmiP360=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:cd:24:44:69:2f:7d:fc:9e:2e:3c:78:fb:6a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Aug 10 07:01:29 2025 GMT
Not After : Aug 11 07:01:29 2025 GMT
Subject: CN=0df6a49ed0af3edeadbba7937febd6dcf66b4143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:2f:2f:73:5a:8b:0e:af:8b:0b:c6:0f:8c:
92:14:04:95:a4:13:b1:44:ef:c2:e0:e0:11:1e:59:
90:ee:4e:0e:37:7b:24:68:fa:5e:5a:60:ee:f7:e0:
b5:79:41:17:e2:24:cb:61:6f:a5:8e:66:33:3f:b1:
65:3a:f8:e6:7f:f3:cb:13:1c:15:3f:13:53:31:28:
bb:44:cd:3a:db:9b:44:1b:eb:3a:b4:61:61:61:7b:
88:c4:31:6a:12:b3:91:7f:ab:fc:f3:fd:70:0d:22:
ba:b9:6d:7b:1a:f5:4a:1b:66:41:4d:03:9d:27:26:
5f:f9:c6:6c:00:cb:71:42:e8:06:a2:45:d9:52:76:
df:07:e0:ad:e6:95:d0:23:13:21:2c:6a:28:4f:b9:
07:4d:40:fc:d9:2f:ad:54:1a:10:48:f7:41:fc:63:
96:ec:49:e9:ce:c6:74:04:2f:57:c0:83:2b:bc:f2:
71:fe:30:87:c6:e5:2d:6b:de:a4:53:fe:93:b2:c5:
36:32:4a:e8:75:f0:b5:87:6e:cf:77:cb:c8:fd:b6:
c1:81:e6:12:b3:0c:02:00:af:db:d6:63:22:05:d4:
f7:ff:31:b0:3a:3c:f5:51:8a:27:69:84:fd:05:93:
81:d5:cd:a3:bd:24:c4:24:4b:e0:69:6e:ad:f5:f8:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:A4:9E:D0:AF:3E:DE:AD:BB:A7:93:7F:EB:D6:DC:F6:6B:41:43
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:61:7e:4b:21:32:37:cd:a5:61:eb:90:07:a2:8c:69:95:
55:38:42:74:1b:d9:6c:7c:86:16:8a:0c:70:cc:f9:76:29:12:
d1:6e:68:e4:b0:2f:a0:f6:0d:3a:22:5b:08:5d:67:10:0c:6c:
f5:15:d0:38:db:4f:68:f9:b0:2a:d1:96:c2:a5:4d:e8:05:ec:
a2:8e:1c:d6:6c:e0:7f:c0:6b:39:96:cb:84:ad:75:13:f8:3d:
5b:85:c4:4f:5b:92:25:7c:14:4f:65:77:eb:35:15:11:60:0e:
0e:34:55:34:1e:c5:14:b4:9e:d1:c9:e3:17:7e:11:79:ca:0f:
53:7b:71:a8:64:ee:e1:37:72:a3:b8:b9:53:e3:d1:09:a8:b0:
bc:c7:ee:18:13:07:ff:18:59:ec:5f:a6:70:25:8f:e3:d1:ca:
06:93:df:61:6e:c0:3b:5d:04:45:34:cd:62:23:cf:fe:7d:c5:
f2:63:ba:d1:e6:ff:a7:50:24:db:5e:8b:69:d7:60:ea:93:a1:
46:34:d0:72:96:dc:93:40:00:cf:2b:6d:3e:b3:ee:f8:f1:9f:
b0:a9:65:61:7e:85:af:10:27:f3:6a:c7:71:2d:90:a8:7c:df:
ed:82:e6:21:dd:2d:d5:e1:6f:2d:ae:10:d2:4e:00:2e:25:7d:
91:e8:9b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:54 2025 by rpki-client