Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: 2xZ5q7fPkEoN79C1VQKgkst7y8Y2FzNu2FK09jFt5ow=
Subject key identifier: D9:BC:C0:FE:73:11:40:36:1D:E6:93:7F:52:18:55:CC:A4:DB:EF:11
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019880F8BAEE8684CAB26EE59A3F099E1D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 05C9
Signing time: Wed 06 Aug 2025 20:00:40 +0000
Manifest this update: Wed 06 Aug 2025 20:00:40 +0000
Manifest next update: Thu 07 Aug 2025 20:00:40 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: oM7puZLlyGoOeKwgHkBYTS+7fQ9QS3qabSCdLH8ZTh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:ba:ee:86:84:ca:b2:6e:e5:9a:3f:09:9e:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Aug 6 20:00:40 2025 GMT
Not After : Aug 7 20:00:40 2025 GMT
Subject: CN=d9bcc0fe731140361de6937f521855cca4dbef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:8e:7c:8a:3d:d0:e8:56:47:93:86:9e:3c:
ee:91:ef:ca:e0:27:71:d8:3a:75:ff:a9:29:d7:52:
22:07:c3:3b:c8:cb:99:57:1a:76:1f:f2:81:36:8c:
b7:1d:9c:af:f0:01:58:f5:9d:4d:48:da:3a:aa:90:
bc:9f:5b:9d:1d:28:3e:f0:2a:fa:83:f8:02:27:ea:
b9:ae:5b:aa:49:66:4c:ff:cc:c6:53:a6:77:27:ce:
3c:5f:3f:f0:90:73:dd:94:ef:a9:06:1f:1b:0d:4c:
7a:81:86:7e:c5:db:26:55:ed:bc:1e:8f:3f:51:5b:
fd:c7:3b:24:ec:94:64:f5:d7:01:e2:15:e8:55:f8:
e3:92:90:ed:e0:9a:0e:76:f2:d6:6e:1e:00:b8:bf:
c9:5a:89:fd:c4:25:c7:c7:86:99:b8:d2:ad:58:0a:
3b:27:70:66:dd:ef:4a:e6:f4:fe:91:96:ba:b7:57:
4c:51:8d:d3:c7:d4:5a:5c:86:29:7c:a9:73:5e:e2:
f3:80:d9:7c:2e:4c:30:a0:f1:b2:72:df:f2:36:f2:
3c:0f:ad:ec:d1:93:6c:8d:c0:05:6f:14:ae:d9:7d:
83:fe:e6:4c:73:0a:f6:f5:4f:12:a5:55:2d:31:72:
85:cd:87:f6:f9:f9:8b:f5:94:4e:b6:c3:7d:30:48:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:C0:FE:73:11:40:36:1D:E6:93:7F:52:18:55:CC:A4:DB:EF:11
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:32:fe:a1:2a:4b:d5:9b:02:ee:22:e0:5c:ad:30:b8:56:
46:8a:03:34:bd:fa:eb:d3:b7:41:1f:ab:25:34:c2:f3:e3:0e:
70:b6:b8:f5:f0:b8:43:e0:0a:19:b3:86:e0:cf:be:4d:02:85:
82:78:65:eb:29:7d:27:79:9a:78:48:4d:74:bc:01:7f:a1:7b:
32:8a:29:ad:2d:f3:e6:77:ef:ab:36:c4:28:66:0d:51:bc:76:
a1:2d:3d:5a:ad:ff:e0:ae:8f:d9:77:c4:85:2a:fe:49:d2:18:
66:4f:7c:30:7f:21:66:3c:47:50:36:7f:4d:6b:10:a2:ed:03:
84:e4:20:dc:a1:c6:6c:f7:9e:78:db:0c:4e:5d:e1:99:38:23:
a1:32:8f:3b:2e:a9:93:1a:e2:9f:ca:cf:fd:4e:02:95:58:27:
a4:e5:67:51:1a:af:9c:3d:a7:c1:10:3d:74:e5:45:71:92:e9:
ef:ff:8e:41:40:38:15:4a:65:23:a3:3a:82:cb:98:8a:c8:6d:
f1:7b:5d:62:95:94:09:c1:ac:2e:dc:81:f1:3d:35:6a:ac:cc:
c3:56:1a:d3:97:82:ef:23:45:69:e6:c7:ea:a5:5d:57:cb:1b:
7a:ca:76:f5:b3:92:e2:d1:27:9c:9e:7d:10:77:7e:42:d8:4e:
04:75:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:04 2025 by rpki-client