Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File: a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier: JnX6KAigpXcKrYi5fqKxJjc3DJ5eznZeHaQDq6Wpjeg=
Subject key identifier: 5A:60:8F:89:39:CA:14:7F:9D:A6:46:68:B3:24:CE:0D:23:49:18:F5
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0198744FAE609E71F09B6FC9C8940C7471F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number: 12D7
Signing time: Mon 04 Aug 2025 09:00:35 +0000
Manifest this update: Mon 04 Aug 2025 09:00:35 +0000
Manifest next update: Tue 05 Aug 2025 09:00:35 +0000
Files and hashes: 1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: RpUE1mX1fViolGZypk2yyR75cayit3ntlDUFC0Ius0o=)
3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ae:60:9e:71:f0:9b:6f:c9:c8:94:0c:74:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Aug 4 09:00:35 2025 GMT
Not After : Aug 5 09:00:35 2025 GMT
Subject: CN=5a608f8939ca147f9da64668b324ce0d234918f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:64:be:2f:3e:55:09:fe:3c:b3:c2:99:37:
03:ad:f3:81:d3:27:3a:a6:7b:42:4d:72:9a:06:78:
e8:a1:28:e3:52:dc:7f:9d:b9:bb:01:8f:b4:f7:b9:
f5:89:9c:37:33:a5:76:30:14:1e:96:eb:a6:05:01:
fa:57:98:3c:15:0d:cd:93:28:21:da:26:19:61:22:
4e:50:77:e2:84:07:0c:d9:6b:13:d2:e0:fb:8f:f6:
70:70:f2:ed:4f:a5:ed:06:0e:fc:46:1d:29:c5:b5:
67:ce:38:ea:3a:c6:d6:af:fb:f3:99:2c:6e:fa:99:
fe:72:57:52:1f:4b:54:64:14:ef:60:92:c7:26:09:
33:db:e4:70:3a:99:89:a4:10:14:89:f1:0c:00:f9:
4f:31:c6:b8:6d:ca:88:40:02:14:21:73:d2:20:a7:
1a:b6:13:f3:40:bc:f1:f1:ee:06:b9:a0:5e:07:24:
ba:d5:70:48:6c:8d:ae:fd:68:eb:87:99:a9:ca:57:
37:1c:5f:d0:85:15:26:d0:9c:14:34:32:02:00:01:
0d:9d:e4:ff:b0:7a:be:4f:53:3f:87:98:48:8b:72:
a9:da:16:79:3e:1d:37:e3:b8:d3:16:1e:35:b7:0b:
df:ba:73:50:ab:5b:f4:e5:b0:52:8a:cd:22:81:19:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:8F:89:39:CA:14:7F:9D:A6:46:68:B3:24:CE:0D:23:49:18:F5
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:bb:f7:8f:08:5d:27:49:b9:ed:d3:18:81:fa:98:eb:41:0b:
da:6b:c8:4c:a5:b0:21:a7:61:c1:42:7d:56:16:fc:a0:74:9d:
2f:51:48:43:a8:b8:98:09:05:bd:fc:46:8c:b5:40:08:5d:ab:
dc:c3:b9:a2:c5:6e:0e:32:92:fd:f9:87:81:6c:86:5b:49:b4:
41:4c:ea:82:41:ea:2a:33:3f:9e:e1:2b:73:9e:c9:a4:86:41:
bf:b4:8e:e9:c0:02:22:07:03:0b:d0:90:63:82:48:da:4b:8f:
30:1c:db:ff:2d:78:a1:72:fa:46:96:67:6a:1f:6f:50:3a:52:
9f:d5:7e:a2:03:61:54:0f:e2:cc:30:21:a4:30:c3:61:ac:1d:
30:a6:60:ea:4e:0c:ab:c3:8a:71:b5:d2:47:40:a3:ac:34:0e:
fd:07:cf:c6:24:c9:dd:15:d2:27:70:4e:c9:c1:b8:4c:e6:cb:
f8:5c:11:eb:a3:e3:62:2c:f6:48:64:cf:2b:84:58:c1:4c:7e:
6d:64:00:9b:87:90:8d:5f:43:37:58:56:5c:8e:f1:8f:ac:d5:
d6:22:6c:24:2c:8d:44:45:0f:ca:8a:19:4d:56:11:f0:42:0b:
e0:a8:ef:b0:2b:b2:75:cf:cc:a8:8c:d2:d8:ab:1d:8f:a7:04:
d9:4f:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:34 2025 by rpki-client