Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: Gv+5RKIfC/rJwinv+R+by9ejYQY1iS1llODoaahSlAw=
Subject key identifier: 46:2F:2B:9D:FA:5B:99:98:79:91:64:34:B6:46:4C:6E:D5:7F:19:5F
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 0198D73B7E728946C4880F883FA4C14DFD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 14:00:57 +0000
Manifest this update: Sat 23 Aug 2025 14:00:57 +0000
Manifest next update: Sun 24 Aug 2025 14:00:57 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: C8vYat7ZgTtpDTOZVOwl491BzPokfXz70BcxxkzTh6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7e:72:89:46:c4:88:0f:88:3f:a4:c1:4d:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Aug 23 14:00:57 2025 GMT
Not After : Aug 24 14:00:57 2025 GMT
Subject: CN=462f2b9dfa5b999879916434b6464c6ed57f195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:cd:5e:9c:f1:f2:c5:72:b4:6e:b1:2d:59:
69:d9:b7:b4:87:33:6c:91:01:32:d8:25:b3:6a:44:
6c:39:c3:de:1e:35:f9:d1:54:6f:b8:df:e4:9f:d9:
78:b8:48:63:b4:ba:66:4a:f5:ad:18:13:e2:38:b1:
85:67:6d:a9:f6:22:8b:0d:3f:64:40:28:cb:8a:0d:
42:83:57:6d:a1:3b:65:e7:d1:e9:97:36:b5:7b:f1:
7c:dc:ba:1c:19:8e:d5:86:3c:57:ed:87:65:3e:62:
89:88:c9:c8:3f:29:f4:76:f2:cf:f3:0e:6d:6e:8d:
eb:d7:5a:23:bd:e3:bb:67:88:3f:32:98:55:bd:7c:
12:71:fd:02:5f:f6:67:9f:be:52:52:9e:a7:9a:e0:
6c:aa:8f:87:bb:6a:33:93:28:db:8d:85:5b:22:da:
22:63:bf:2b:73:08:68:76:be:b4:15:0d:53:4d:dc:
79:56:83:99:6d:fe:a9:30:35:cd:59:cd:22:26:8c:
3a:e5:0c:49:f1:54:67:b4:f8:50:a0:90:f9:b6:ea:
1e:c2:61:e0:7d:82:45:50:bb:74:d6:8c:df:ae:fa:
a5:e7:db:d2:b7:fb:7e:7a:26:bf:e1:cc:dc:76:94:
f2:e0:4e:aa:08:ab:4a:b4:38:34:f1:4b:c0:ce:84:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:2B:9D:FA:5B:99:98:79:91:64:34:B6:46:4C:6E:D5:7F:19:5F
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5a:35:42:f4:be:8d:dc:59:b9:21:7f:c6:a3:25:d4:df:cc:
d6:b0:8b:b8:95:17:c0:30:f1:ab:81:38:d9:33:ab:43:08:d7:
9f:18:d9:21:ca:f7:bb:60:01:e2:6f:f4:26:45:f2:d2:e4:e2:
22:5b:5e:f5:14:e8:05:75:bb:8d:2e:85:f9:ea:2e:dc:2a:9a:
20:68:72:a8:9a:e7:60:7c:23:b7:b4:57:1d:4a:16:9a:f0:bf:
86:bb:9c:b5:b9:a2:71:ee:da:1b:00:e3:cc:fc:75:e9:98:41:
df:32:35:79:22:92:d5:55:26:ec:15:47:53:a9:7d:48:94:70:
65:48:e9:52:44:cf:89:da:3e:0e:1a:71:2f:00:6a:0f:ab:2a:
07:14:17:e7:9a:77:81:36:53:b7:c2:93:50:61:2f:6d:2a:9a:
b9:76:c8:66:f3:15:b3:77:8f:18:3f:88:f9:c9:05:26:8f:e8:
d8:ae:6c:bc:a2:3f:41:40:52:d0:2e:13:d8:37:fd:91:2d:67:
aa:db:a7:fe:37:0b:44:20:c0:37:43:62:2e:d3:7c:5a:cd:e1:
7b:52:f5:4f:f2:6e:99:21:04:30:0b:f1:4d:c5:83:1a:f6:f6:
eb:9b:a7:02:51:2c:0c:e0:3a:3b:99:cd:56:25:17:3f:35:7e:
b8:bd:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:07 2025 by rpki-client