Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: JSPDu1YjyBtZtBKlYd5oZw0bvZyZlShtiow5eQ0n6os=
Subject key identifier: 88:8B:70:AC:38:9F:CF:05:2A:96:2A:79:AB:E6:06:F1:75:D0:44:AD
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 0198D66084ADF2F86FF22B6C983649CE1DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: J0xn1k/uxf3mu0tzjgqaeVlR9XgL2XS6aWSs+D1uGUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:84:ad:f2:f8:6f:f2:2b:6c:98:36:49:ce:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=888b70ac389fcf052a962a79abe606f175d044ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:18:83:9c:54:e2:2c:4f:ad:9c:63:bd:66:
d0:65:4b:7e:dc:29:8a:b9:6f:cb:b7:50:3f:96:58:
b0:17:94:ea:5e:de:47:78:db:f6:b1:92:c8:bd:48:
36:ff:24:0f:82:d1:96:25:7e:b4:4f:d0:fb:81:8d:
82:e1:35:42:ce:c0:85:0f:70:70:3f:bb:89:0d:86:
05:fa:79:81:b7:57:03:df:e4:af:fa:cb:16:dc:11:
26:c1:97:5f:33:9b:45:32:1d:07:33:2d:37:1b:07:
03:59:00:e9:49:e8:47:d9:1e:ce:50:78:ab:27:76:
86:7e:dc:83:d9:20:e1:1d:5b:64:a3:e4:cc:a2:4f:
0a:7b:04:4e:d0:76:30:3b:0b:02:bd:31:da:dd:3a:
86:b4:14:f1:76:57:be:2b:66:78:d2:6e:43:b3:c3:
2b:05:40:f2:0d:1e:1a:79:2b:5f:61:2e:5a:0f:d4:
74:d3:60:bd:bb:12:ed:95:a3:16:f0:a0:e2:c8:ee:
ab:04:7d:cb:44:bb:72:70:0d:12:bb:96:9b:ec:1d:
4d:a7:51:b7:3a:f6:98:dc:1d:7f:b9:93:c4:60:8e:
aa:4b:95:59:fc:73:95:96:f5:5c:33:20:7a:4d:ff:
00:7f:19:26:8f:89:f7:66:8e:9f:44:76:09:ab:56:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:70:AC:38:9F:CF:05:2A:96:2A:79:AB:E6:06:F1:75:D0:44:AD
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:bc:0d:e6:28:d1:b3:da:32:44:36:21:38:4d:69:93:48:
97:ce:f1:30:21:3d:f6:3b:d4:bb:d1:d2:0d:bc:40:69:dc:ce:
9f:56:b3:d4:f3:fa:4e:8e:30:de:42:6a:41:e7:77:83:e7:5f:
25:ad:ae:ec:5c:6d:06:93:a0:fc:1d:78:76:b5:2f:47:24:35:
48:c8:a6:e3:73:26:9c:a6:ac:f3:af:69:84:c4:88:d3:eb:d7:
a5:1c:db:e4:af:d1:3b:c4:64:f2:b0:61:ee:5d:ae:13:33:84:
64:64:18:e2:d2:95:2c:e5:5e:bc:fc:5e:c1:7f:16:86:a0:74:
32:a3:d4:82:33:2c:8b:5c:c2:5b:01:4d:bb:9c:72:3b:d2:c7:
2b:bb:55:75:6a:4e:cc:66:3c:90:99:b3:e4:fd:0f:da:3d:03:
a1:73:6e:8f:69:86:86:04:27:07:cb:cd:23:6f:e3:30:d2:08:
0d:22:05:b1:f1:a2:a1:72:77:40:b9:41:a4:66:8f:aa:d6:92:
41:38:49:5f:e1:72:02:da:2a:6f:16:14:6e:3f:8e:05:0d:38:
0f:56:c2:d2:76:6d:2b:53:fb:10:47:ae:23:f5:c9:c2:bb:8a:
99:46:79:9f:43:0a:b9:41:2e:0b:10:34:71:95:c8:68:94:e1:
f7:b9:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:22 2025 by rpki-client