Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: f5sVPQRg/ZQ9mF5JJEK/V8pny85NCX/UrekukQBiUK0=
Subject key identifier: C0:64:80:87:8F:47:1D:EE:4E:4D:0D:89:2D:61:69:5D:5B:8B:5D:CC
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019874193FA1564B44F3C949B4C0FCA44216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 066D
Signing time: Mon 04 Aug 2025 08:01:08 +0000
Manifest this update: Mon 04 Aug 2025 08:01:08 +0000
Manifest next update: Tue 05 Aug 2025 08:01:08 +0000
Files and hashes: 1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: 1ct3oNDDHFG4aCDgX7MtTce3LYmR5lu6K7WrksIN5Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:3f:a1:56:4b:44:f3:c9:49:b4:c0:fc:a4:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Aug 4 08:01:08 2025 GMT
Not After : Aug 5 08:01:08 2025 GMT
Subject: CN=c06480878f471dee4e4d0d892d61695d5b8b5dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:d2:33:8b:10:0b:e6:27:1e:81:88:38:d3:
a4:a7:7b:0b:d3:95:8c:22:c4:95:94:d4:d6:35:19:
a4:ba:b5:48:35:16:79:f8:f8:cb:6d:c6:4e:7e:4f:
36:46:31:44:0e:7a:ef:b5:28:ff:e0:67:02:e8:14:
2d:c8:2f:31:ef:3a:e6:ca:9f:93:eb:db:d6:5c:9a:
54:41:01:7b:d6:cc:17:53:1f:a2:20:f0:e8:a9:51:
9e:9d:63:08:af:80:de:0f:77:2b:92:de:87:ad:69:
fc:27:01:11:78:1f:85:6c:85:87:69:72:f5:f1:f6:
8b:cc:81:6f:01:c6:e0:2b:20:57:7a:63:38:c9:ae:
ea:99:51:f5:6f:36:41:9c:8d:3a:f4:19:fb:25:b1:
55:69:2b:3b:17:79:be:35:00:79:2e:69:c6:e3:39:
4a:6b:84:67:fd:ac:e4:eb:07:a7:53:5b:52:33:54:
7a:ca:59:ea:23:7d:4d:02:c7:78:cd:3c:ff:7a:4b:
84:7a:7c:d0:aa:3c:ec:00:4b:9b:d5:b9:59:ad:ab:
b1:2a:29:95:73:72:2c:68:6c:f0:69:16:c0:8b:a5:
c7:dc:d6:69:f7:b1:61:01:1f:07:10:a1:b7:1d:30:
84:53:8d:43:10:ed:8f:b8:8f:2c:f6:dd:c9:27:4e:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:80:87:8F:47:1D:EE:4E:4D:0D:89:2D:61:69:5D:5B:8B:5D:CC
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:fd:a0:a2:86:55:d3:59:61:4d:6a:05:e9:69:28:b8:ba:
0d:ad:cc:b7:24:5f:56:fd:01:95:a7:43:36:da:4d:bc:b8:76:
e4:9c:0a:3b:87:2e:a3:4a:52:46:e0:93:58:70:c9:1b:0b:94:
1f:08:8e:90:4f:f4:6b:c3:05:68:56:dd:65:1e:73:9c:6a:20:
cd:d8:93:18:e9:de:02:fd:2d:5b:18:12:8a:e0:24:6f:53:cd:
93:54:8b:e8:5b:7c:aa:57:ac:4a:33:32:c9:ba:13:f4:6e:b0:
bd:5e:07:d7:e7:f0:6c:08:cc:b1:5c:72:08:51:44:86:18:13:
a9:00:45:82:ac:f1:fa:94:8f:e0:3c:14:08:69:48:28:49:fd:
e9:4f:b7:da:17:63:4e:b9:0b:fc:ed:10:01:f6:43:79:a9:35:
48:9c:5c:58:94:10:e8:c1:fb:88:6f:84:a7:9e:cf:f8:c7:dc:
66:89:c9:2b:19:26:06:95:a4:de:47:cf:44:63:6e:93:6a:9a:
50:e1:ac:8a:f4:6d:e8:4e:9d:96:d1:5c:2c:99:d5:63:3a:69:
c9:73:48:fe:7e:f8:64:77:e5:a4:6f:62:af:8d:29:d0:3f:13:
53:65:e3:1d:56:dc:17:de:93:00:c7:23:7d:e9:6b:d0:a4:c3:
9e:40:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:30 2025 by rpki-client