Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: J2grtyvs4YrTiKkRodHNS6h1+yh/c6qWg33Qne/rTrs=
Subject key identifier: 90:EA:9A:C3:E3:8D:E5:35:7E:21:81:33:90:B6:E9:6F:E8:6B:EC:09
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 0198884441C9CC9A9CA6B0FCE82197FF7173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 098C
Signing time: Fri 08 Aug 2025 06:00:31 +0000
Manifest this update: Fri 08 Aug 2025 06:00:31 +0000
Manifest next update: Sat 09 Aug 2025 06:00:31 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: op9cuxJwvTuS00uFDQ6BYD1qU8QV5JpgNBQiSWgCpxg=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:41:c9:cc:9a:9c:a6:b0:fc:e8:21:97:ff:71:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Aug 8 06:00:31 2025 GMT
Not After : Aug 9 06:00:31 2025 GMT
Subject: CN=90ea9ac3e38de5357e21813390b6e96fe86bec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:19:35:f8:5b:0d:a6:9f:33:0f:98:53:42:
f7:dd:2d:c8:e3:4c:f4:94:2f:c2:b2:a0:ba:31:a4:
6b:17:71:03:e5:64:02:70:18:e3:4e:2c:59:01:e5:
be:90:5b:3d:75:bf:c2:e6:f5:ff:f0:23:fc:83:50:
98:10:bc:2e:0c:4c:8f:da:0d:6c:7c:90:d9:e8:b3:
db:06:bd:b0:a7:b8:36:31:14:08:b9:92:08:c5:6d:
69:98:95:44:e2:c2:81:02:e1:f1:c9:01:fa:0e:85:
86:43:d2:84:fa:c0:31:d7:14:4b:a6:b0:54:14:a5:
a8:bc:1d:e0:75:74:58:8e:cd:ab:d9:19:ce:e9:81:
eb:07:2f:9b:f2:2a:dd:3d:88:cf:2f:3b:eb:ac:33:
60:48:02:25:7e:ff:7c:6e:25:b9:22:c2:32:2d:66:
3d:db:29:94:04:4c:0c:a4:69:34:98:0b:be:50:c0:
ea:b2:eb:9e:5d:4d:7d:ec:db:14:58:ae:1e:0c:9a:
35:17:d4:43:2c:b5:f0:bd:44:92:9b:79:a7:30:86:
95:86:8b:34:d0:d8:64:44:cc:59:68:5f:27:35:af:
e5:7c:1b:bb:04:52:f5:49:69:5f:04:40:55:1c:ae:
e3:e0:45:41:bb:fa:6a:6d:30:80:1e:4f:47:e0:ea:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:9A:C3:E3:8D:E5:35:7E:21:81:33:90:B6:E9:6F:E8:6B:EC:09
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4f:a4:d6:09:63:10:01:99:79:4c:44:f5:c9:20:fe:d9:76:
9b:8d:af:17:c8:ae:6b:bf:1b:2c:59:28:1f:01:68:22:8a:a6:
9d:6f:fc:20:d0:6f:85:43:14:9b:84:59:1e:11:cf:dd:2e:ff:
97:65:d2:d1:dd:80:00:d9:63:4b:86:e2:bd:5d:00:59:bd:ac:
9c:f8:5e:6d:86:55:49:0c:42:ac:49:04:20:5d:2d:db:66:36:
8f:36:54:aa:f8:3e:ed:e1:79:12:df:a0:d7:c9:39:96:cd:e5:
b2:2d:90:fa:3a:2a:47:46:c8:80:03:a9:f7:f2:c7:f8:ed:63:
56:bb:48:1a:03:72:21:67:31:1c:09:61:9a:7b:ca:a7:aa:76:
6c:02:92:59:71:72:be:b9:7d:e4:59:30:2c:43:f7:04:4d:3c:
df:7a:f9:d1:03:40:8f:0e:ce:1a:e9:8c:aa:36:c0:af:f4:38:
cd:b0:22:69:df:ce:f9:9a:c0:55:ac:63:c2:ba:16:6f:85:2e:
02:6d:e7:34:d5:46:69:f1:7a:00:61:0b:3a:68:37:48:7d:21:
51:0c:76:8c:16:e5:18:f8:85:e5:4b:a6:16:82:3a:cf:36:ae:
70:7f:44:cb:23:02:eb:c0:de:78:bb:e2:58:2e:d0:2d:38:b3:
f4:b6:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:22 2025 by rpki-client