Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: 1hva2uPd+NIa+ITeNRAHYWKXtb6qissloks5oLbb/yg=
Subject key identifier: 6B:A1:05:6E:99:D2:BE:6F:4F:4D:01:67:B4:9D:4A:AD:A4:2C:63:01
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 0198959208811460620F2E22045E898CFF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 0206
Signing time: Sun 10 Aug 2025 20:00:32 +0000
Manifest this update: Sun 10 Aug 2025 20:00:32 +0000
Manifest next update: Mon 11 Aug 2025 20:00:32 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: a4v73J1n84+AokKKbpaynVf402CPk61i4yxZtMhwyDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:08:81:14:60:62:0f:2e:22:04:5e:89:8c:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Aug 10 20:00:32 2025 GMT
Not After : Aug 11 20:00:32 2025 GMT
Subject: CN=6ba1056e99d2be6f4f4d0167b49d4aada42c6301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:5c:b8:4b:08:7a:a3:33:7c:c5:b0:73:82:
07:08:61:e6:08:a7:8d:01:9e:5d:47:ca:81:ca:92:
94:b6:df:d5:3f:2d:4f:22:24:1c:b1:66:27:28:fd:
fb:f3:c8:a4:76:a1:7c:3d:c1:ac:d0:05:ae:cb:75:
30:ac:59:49:05:3c:8a:14:b8:d7:6c:61:fe:08:a6:
df:3c:31:ba:ad:d3:ff:9d:c3:ed:42:ec:2b:97:24:
9d:40:80:7f:54:0f:65:e0:25:df:99:c9:28:53:b1:
a5:7e:58:4a:94:57:4a:c1:4b:2b:fd:5d:57:fd:db:
4e:33:b5:3a:02:78:70:00:3a:2a:ba:64:3e:b0:95:
8b:ab:87:4f:af:87:ba:9a:9d:41:f8:7e:2b:0d:58:
06:d2:7e:29:da:a4:ed:76:58:51:b1:5f:9c:77:6b:
db:de:40:62:8f:67:81:de:19:8e:80:6d:2f:97:f1:
e5:2a:29:60:ab:dc:78:1a:23:fb:cb:2f:9c:34:f5:
d4:34:f0:f4:40:3d:2f:93:be:33:94:12:f7:7b:82:
c2:b8:a7:20:f3:78:40:ed:ff:77:74:2b:7b:5e:fe:
c6:02:4d:bb:bc:de:75:55:3b:f5:b7:6a:06:54:b1:
b2:7f:dc:e7:cf:81:be:ff:05:01:5b:98:93:19:e3:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:05:6E:99:D2:BE:6F:4F:4D:01:67:B4:9D:4A:AD:A4:2C:63:01
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:74:74:91:9b:02:d9:9a:40:f0:15:39:38:93:a2:ee:e1:
70:94:52:84:d9:d2:1a:6f:14:10:6a:a8:b4:02:7e:60:ff:23:
2e:cc:3a:ee:a2:71:9f:a5:bc:79:85:4f:e8:54:19:71:cf:07:
cf:ee:35:76:ea:ee:3f:62:9a:00:0b:4d:db:65:55:e4:1e:43:
39:81:f6:22:23:48:82:05:a0:5c:cd:68:1f:b1:57:08:e8:33:
76:65:27:21:21:7c:f4:e5:33:7a:9b:c2:3f:0f:87:3f:96:a2:
5e:93:aa:ab:28:5d:8e:9a:eb:e1:a9:20:a6:c7:2f:7d:7d:b9:
20:48:c6:77:ec:27:4a:b8:69:16:bf:3e:8e:19:c2:00:bf:50:
c6:f6:6a:b7:0a:43:b6:71:0c:e8:d2:58:8d:8b:07:76:30:1a:
bd:5b:2b:73:a8:02:c0:72:b4:b3:e0:ee:ce:08:06:2e:c2:b7:
9a:19:d6:b2:0e:10:2b:71:76:0e:52:68:ec:4c:2c:af:fc:79:
2c:d8:2f:3e:fc:41:b6:8a:b2:b2:30:0f:7f:49:66:74:e2:f7:
71:12:8a:89:41:00:ea:a1:1f:d4:d6:d6:00:90:da:8b:b5:07:
66:68:ea:63:a6:14:80:2c:6c:0f:b6:95:96:1e:ce:e4:a5:d7:
c4:90:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:45 2025 by rpki-client