Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 5lfk+C4s4itqNq/eP5b+IiRyKOu8c0cirIJAaL2fTRs=
Subject key identifier: 19:4D:9E:97:40:37:66:17:F1:D6:95:2F:FE:5F:A4:D3:A9:8E:D0:D1
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01988732E48D6BC926ABBB2A4293A780C6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 092A
Signing time: Fri 08 Aug 2025 01:01:55 +0000
Manifest this update: Fri 08 Aug 2025 01:01:55 +0000
Manifest next update: Sat 09 Aug 2025 01:01:55 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: jZ9NUF1lU/x8i8NCRN732Cx8FI6cg4Pb1d4aAcG21X8=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:e4:8d:6b:c9:26:ab:bb:2a:42:93:a7:80:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Aug 8 01:01:55 2025 GMT
Not After : Aug 9 01:01:55 2025 GMT
Subject: CN=194d9e9740376617f1d6952ffe5fa4d3a98ed0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:09:4f:12:24:e9:cd:4a:d4:46:de:76:c1:
b6:35:1c:55:dd:47:75:b3:e8:d4:f1:42:ac:74:05:
94:d2:87:af:79:b0:7c:38:15:60:8a:3a:1a:ef:2c:
ec:51:8b:46:63:72:3e:f1:13:98:ed:a4:6b:4b:ab:
58:ac:3f:64:75:50:57:7b:0c:1e:04:5c:00:c6:3b:
bb:c4:9f:b9:08:13:40:c0:fe:8f:48:c3:63:30:87:
6b:f9:73:ce:d8:5b:09:5c:7e:3a:35:ea:4b:06:5a:
24:67:9f:d2:8f:0c:26:42:c7:52:9e:dd:96:59:24:
52:33:02:2f:75:eb:f8:9a:25:75:3a:fb:d6:4b:a1:
85:ec:a0:e4:6d:6f:d8:f4:07:7f:9c:5f:d4:9a:f9:
bf:f0:f2:35:d5:a9:5d:c5:14:9f:1d:e5:a9:6d:08:
f9:61:fb:ca:62:b1:3f:6a:90:9f:04:cf:75:cf:da:
dd:5a:88:f6:46:08:94:cf:e6:b6:7f:36:18:4c:44:
78:94:73:bf:98:ce:55:27:13:88:ab:23:f4:06:b9:
f4:6d:1f:02:fe:a8:8f:16:68:a9:8b:4f:3e:89:65:
b1:bb:d6:eb:95:7a:1a:62:28:45:64:42:3b:0f:71:
cb:d3:a2:b7:eb:a3:4d:5e:f1:6c:74:52:f6:ca:5e:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4D:9E:97:40:37:66:17:F1:D6:95:2F:FE:5F:A4:D3:A9:8E:D0:D1
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:27:1d:57:05:ae:64:b3:e3:87:7e:c9:21:36:e7:70:6b:ee:
ac:b8:27:49:b3:04:48:9e:85:d8:37:91:5f:6a:d8:5b:1c:c9:
7b:24:8d:fe:ba:e4:dc:71:a9:ec:e8:cc:ec:5e:5a:d1:03:f3:
b7:29:f0:88:74:d4:b6:6c:c3:74:78:b3:ed:a3:4d:db:00:ba:
9f:f2:48:53:5e:5a:29:d2:c1:20:78:bc:2b:a7:85:09:d3:92:
8b:be:37:ba:4a:d7:4d:be:c2:b7:26:74:ca:f0:a3:83:4c:5f:
fa:45:b2:ac:cd:88:4d:d0:87:c5:02:53:09:25:2f:68:f8:0a:
8c:62:78:5c:67:7a:42:ed:a8:7f:47:ea:19:cf:93:c4:6a:50:
11:40:55:9d:24:33:96:7c:83:dc:85:fe:ef:db:44:b4:0a:52:
73:ad:36:da:99:bd:e3:93:09:0c:e7:72:e1:10:4b:b4:d7:7b:
b0:29:23:e9:de:fa:ac:ab:25:42:7d:52:fa:d2:b4:61:23:53:
74:79:f6:93:19:21:9c:cd:4d:e3:3a:48:9a:c1:7f:f9:00:d9:
ea:e3:8d:61:a1:c5:dc:7d:fa:0b:5b:fd:d5:1c:90:37:8f:bf:
de:2c:b5:a4:86:8c:77:c9:f2:f7:3e:cf:0d:8d:ed:86:f8:3b:
7b:05:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:07 2025 by rpki-client