Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: QBoStXh6/fa613KCCGDOeOQOkF++r1lvFQGqdaXD9IY=
Subject key identifier: 06:F8:2A:3F:09:4E:0A:4C:B6:BE:E3:03:E2:DF:77:79:71:4B:21:1C
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01988F5A0D09057A79B0BFD1DE338C74E453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0690
Signing time: Sat 09 Aug 2025 15:01:40 +0000
Manifest this update: Sat 09 Aug 2025 15:01:40 +0000
Manifest next update: Sun 10 Aug 2025 15:01:40 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: 91159zjuS9t+vLKqJ99F7gqf4Fqd60nZIx3Nkrw9fxw=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:5a:0d:09:05:7a:79:b0:bf:d1:de:33:8c:74:e4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Aug 9 15:01:40 2025 GMT
Not After : Aug 10 15:01:40 2025 GMT
Subject: CN=06f82a3f094e0a4cb6bee303e2df7779714b211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:c8:63:bc:62:c9:4d:55:c3:1f:f9:35:be:
36:f1:92:6c:4a:c4:4f:c3:dd:8f:f3:94:a4:0d:30:
92:39:4e:d7:fe:9c:a7:56:31:76:b5:73:9f:db:30:
e0:cc:c5:13:ba:44:32:31:ac:8c:c7:a5:45:10:07:
e7:ea:79:46:27:f1:ca:f8:1b:f9:2a:80:8e:76:f7:
b8:31:64:bb:f1:7e:1e:3d:0c:6e:fa:4a:bd:b7:13:
f3:cb:da:fb:14:fe:99:2e:6c:fd:e7:f4:0a:86:0c:
86:ca:ca:f0:7e:10:df:c6:0a:ed:22:06:13:2e:66:
54:eb:04:e2:c8:1f:7f:8a:82:ae:c9:fd:28:97:de:
35:d0:18:9b:d8:bf:7c:44:87:73:89:91:63:bc:4f:
e6:6f:c3:d1:bf:ee:37:01:30:a6:f3:42:da:c1:fe:
9b:3f:21:fc:88:08:33:a4:c0:de:f5:ab:4d:08:7a:
2b:2d:84:e7:8e:c0:15:66:74:dd:7d:c0:8c:c2:66:
6e:83:bf:a3:3a:62:66:66:2b:9b:6c:7c:18:9a:e5:
8f:11:c8:1b:39:cb:81:44:49:7a:cb:33:a0:27:d2:
ea:9c:42:c9:a1:c9:47:06:da:81:06:3d:0e:e4:42:
09:19:c2:44:14:7a:c2:5a:78:5a:04:05:76:d1:f1:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:2A:3F:09:4E:0A:4C:B6:BE:E3:03:E2:DF:77:79:71:4B:21:1C
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:41:4e:89:e1:6d:d6:ce:c9:d2:95:96:98:1f:0a:21:53:ef:
3e:2c:77:2f:7e:cb:cf:77:84:24:cf:96:b5:ce:8f:f2:3a:df:
0e:af:33:d3:58:7a:2f:30:c1:00:a6:8c:44:cb:c3:16:e5:c8:
2a:d9:a2:e7:97:f8:c3:0e:dd:34:11:2c:d8:f5:c3:41:e9:75:
96:d7:ef:4a:b0:79:d5:d0:8c:aa:66:08:0b:f3:cf:2d:7e:c6:
95:6b:ff:7a:40:fa:ae:03:cd:77:28:7b:74:6d:c9:ca:57:c5:
ea:55:8f:b3:11:08:e0:41:9f:e5:08:da:b0:08:49:5f:ae:f7:
aa:62:76:a6:41:b4:a9:fd:c2:8b:a2:80:68:0f:43:61:5d:80:
cf:32:ef:bd:98:20:8a:13:f0:44:ae:94:53:19:3d:1f:d9:2b:
b7:84:f1:0d:c2:bd:7f:f3:b5:56:f1:a2:d0:c9:6c:54:af:bd:
dc:a4:7c:57:5e:95:82:cd:de:b8:66:21:4e:17:07:70:3d:6d:
fb:54:dd:f8:f5:ab:7a:bf:0e:5b:16:57:07:db:23:a1:7b:41:
da:2f:74:74:77:32:8d:16:29:a1:aa:d9:a8:66:34:83:c5:11:
69:5c:01:d3:51:cb:7e:bd:df:aa:02:6e:49:1f:89:63:e9:b3:
e3:d4:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:57 2025 by rpki-client