Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: a8jyzUhYL713er3B31Qf5k9EiQ0spYVApPquvLLVGJ8=
Subject key identifier: D6:4D:78:47:91:9F:28:B6:AA:95:74:89:4B:06:D1:BD:46:81:D1:1A
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019884684873AD8BCC9827D7CAEFCC98226B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0646
Signing time: Thu 07 Aug 2025 12:01:23 +0000
Manifest this update: Thu 07 Aug 2025 12:01:23 +0000
Manifest next update: Fri 08 Aug 2025 12:01:23 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: aA1aY3xnftKIEc0ipi9InpGztuubUaSUkXLZi5Cg6bw=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:68:48:73:ad:8b:cc:98:27:d7:ca:ef:cc:98:22:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Aug 7 12:01:23 2025 GMT
Not After : Aug 8 12:01:23 2025 GMT
Subject: CN=d64d7847919f28b6aa9574894b06d1bd4681d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:d7:da:e6:2d:bc:a0:bb:6f:6b:26:a7:35:
ef:79:18:72:7c:e5:fa:1a:cc:26:1c:97:22:2e:17:
09:21:35:66:fd:aa:ee:b5:cd:a0:92:e0:23:ee:dc:
f2:43:5b:4a:04:14:53:34:58:0f:09:6b:e3:77:3a:
0a:ae:e4:81:08:b8:75:60:45:98:b0:aa:34:e9:b7:
80:b5:2d:54:ec:3b:4e:56:0e:95:dc:3f:75:7c:17:
0a:e8:1e:56:60:9f:c8:02:92:f7:06:1d:80:94:e3:
87:8e:ad:19:18:0e:4b:85:a2:47:7d:f0:e4:71:f2:
b7:c4:57:ba:f1:29:41:9e:3b:68:df:dc:99:82:9a:
de:e3:50:56:a4:af:c5:27:b1:f3:27:e8:ff:f4:f7:
3a:ac:e3:a6:86:b6:37:9b:3f:ab:27:15:b5:ae:90:
5f:2f:d3:01:b6:8e:72:6d:23:18:e3:e9:2c:6f:75:
a9:03:8d:ad:19:70:82:a2:79:e3:f6:24:bc:93:e1:
93:83:45:8d:62:6e:c9:3a:5f:45:d2:35:2e:52:df:
44:df:e2:1a:46:70:c6:e3:7d:bf:34:8b:44:14:27:
1f:a2:f7:f2:fb:e5:62:5e:56:b6:11:9c:5b:ac:2d:
d7:a6:51:88:3f:18:3e:88:03:ea:f8:6e:c3:f8:15:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:78:47:91:9F:28:B6:AA:95:74:89:4B:06:D1:BD:46:81:D1:1A
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:2e:d6:48:2f:47:ec:d9:bc:9c:ca:04:a5:05:34:1d:01:
19:6e:bb:77:bb:36:19:a3:98:37:92:13:53:57:5c:6d:ac:eb:
23:36:38:28:7c:8e:da:4b:7c:d9:50:73:77:a1:db:7a:9f:8a:
ab:38:72:31:cc:ea:ef:03:1c:e9:eb:ad:ca:a4:25:e3:cf:8b:
08:70:9b:a9:dc:8f:d3:9b:5b:2d:5b:c9:13:62:b0:3a:5d:4c:
cf:80:24:af:8a:76:f0:b8:e9:bd:8a:d6:c2:9d:66:9b:6b:ec:
a3:4b:0c:2d:da:ee:31:11:f9:40:90:c8:9a:a9:60:78:df:25:
17:13:3b:a3:96:16:68:9d:e1:90:48:11:06:4c:20:8c:bb:07:
6d:05:cf:5f:4c:a1:8b:0c:d2:13:ce:0c:e9:ce:76:bf:18:f2:
64:fa:f9:0d:44:03:52:b3:e2:f5:25:49:39:95:f2:9b:7b:97:
ae:73:46:53:a3:2d:ae:54:43:c7:70:74:a9:10:0e:41:58:48:
3c:fe:c6:4a:c4:a6:e8:bb:d2:a2:56:7c:a2:db:ee:1e:c5:2e:
05:8d:98:2d:84:67:23:1a:c6:99:a1:7b:53:c2:46:0f:29:58:
e8:36:dc:3d:2b:73:f7:48:5e:b5:1a:c7:04:63:88:1c:31:b0:
ff:8f:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:38:53 2025 by rpki-client