Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: XTl9qyrPgjsPsmTuIsN5SegUwWc8Wdq0BxuwbilS/V0=
Subject key identifier: C2:76:DB:EA:79:35:79:63:21:86:80:23:2B:0D:AB:D3:44:DB:D2:5E
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 0198D65FD1D334C0CACA40239CA69A56C528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 0E71
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: V+n65QC2FhL5mjDcp/H/JMxpzvDTWMCTU9ZuRIv096A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d1:d3:34:c0:ca:ca:40:23:9c:a6:9a:56:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=c276dbea79357963218680232b0dabd344dbd25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:c5:28:05:92:d0:f5:1f:a7:31:cb:27:ca:
65:0a:9b:4d:5e:fd:a9:71:a6:21:12:ed:4c:e2:43:
49:c2:64:ee:38:d3:f1:1b:f9:e5:75:4a:a3:ad:15:
b1:47:bf:b1:4b:cc:8f:ca:0e:0a:20:b7:27:75:65:
41:81:8b:fe:86:1d:b9:bf:22:6e:e4:4e:d6:af:7e:
92:77:05:2b:b9:e0:a6:f4:ef:aa:6b:b4:60:6a:17:
e5:97:b4:cb:16:bc:da:35:f7:1e:f6:83:f8:94:9a:
d9:af:a9:b0:7d:a5:3a:6b:4a:26:90:f9:6e:1e:70:
22:29:fd:bc:14:6d:16:06:86:b1:86:1d:a8:e4:e9:
04:fd:d7:87:a2:e7:73:87:65:9c:e0:63:20:d3:72:
d0:58:93:97:46:1b:da:66:3a:39:0f:61:5f:b2:92:
92:b2:01:9f:77:2f:e6:49:41:5f:e2:c0:cf:db:9a:
77:79:97:e1:47:95:e4:1d:98:82:eb:d0:5f:7d:cd:
92:c4:87:b1:15:6e:a5:23:4f:c2:68:ca:8b:8b:b8:
45:1f:5c:92:c8:ea:99:8e:c9:37:cc:b7:e1:0c:b9:
8a:26:2a:fc:6a:43:44:33:57:ca:7f:07:46:4d:fc:
68:1d:ef:c4:f8:91:18:93:0d:89:06:e0:29:47:2c:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:DB:EA:79:35:79:63:21:86:80:23:2B:0D:AB:D3:44:DB:D2:5E
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:77:21:64:53:d8:c9:41:a8:17:3c:11:4e:02:8e:61:0d:db:
e6:f1:d4:40:62:af:bb:b0:bd:e2:0e:94:ce:e9:25:dd:99:17:
04:c4:c8:c4:32:fa:91:c3:2f:79:ea:a2:e5:8e:5e:5c:99:88:
a3:b2:9e:cf:4c:e7:42:3b:79:c0:07:e3:5b:25:a2:0a:cb:4e:
e0:cf:a9:de:98:c0:7d:ef:96:4b:4c:6a:a7:cd:6f:f2:b9:68:
c6:0c:57:a5:1a:8a:14:41:37:46:36:70:26:5a:54:9c:f4:0d:
6b:e4:44:e6:d0:21:11:9f:1f:87:c6:12:44:bd:92:0b:a2:c0:
63:e3:c7:25:36:9b:73:86:8c:c4:e1:4f:1f:0b:be:1d:6e:0c:
3b:68:ae:7c:92:ec:19:f8:2b:b4:af:f0:32:81:a7:73:ec:91:
58:99:db:8b:b7:8c:2d:9d:0f:dd:c4:c9:f8:29:52:94:86:1b:
6b:5c:ee:07:a2:da:30:61:57:ed:af:30:00:87:4e:5a:f9:52:
16:e0:20:d0:a8:a1:dd:05:68:58:e1:e5:08:97:2a:3d:1d:b0:
7c:a8:75:90:c0:2d:2f:31:7a:db:b3:88:9f:27:42:f9:ae:a2:
43:b4:55:f0:c0:66:5c:90:91:1d:87:7c:30:d7:28:6a:d5:7d:
24:17:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:24 2025 by rpki-client