Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: G4qWVE2PtSMkWwWr7bzam8oYVCbVsgJzC0os33uZW54=
Subject key identifier: AF:96:DA:D8:A8:76:BE:25:61:84:45:29:CF:8E:0D:8C:AF:97:EA:FF
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 0197B77C0EE6482C22898A37B932F1125666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: yOHh2cfCI4AJv5jk7wz0OQRdkTvKU4y/oCzO7b8SNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0e:e6:48:2c:22:89:8a:37:b9:32:f1:12:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=af96dad8a876be2561844529cf8e0d8caf97eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:cb:b6:32:e0:d0:40:1f:24:6f:a9:48:1f:
0b:b9:c2:80:47:ba:8a:3f:0d:0d:e4:5e:66:24:b2:
e2:b7:b3:5d:eb:c3:cd:69:92:cf:a5:0c:b7:bb:97:
6b:9e:c6:62:a1:f5:30:07:76:99:06:eb:34:be:31:
98:6f:c6:94:2d:d2:4e:82:76:6d:ce:0f:79:50:7d:
ef:37:67:23:33:37:8e:d7:67:4b:32:e9:56:01:87:
70:9f:54:f3:aa:10:95:62:bd:3f:dd:80:12:eb:15:
a0:89:56:e0:10:a0:bd:7c:14:14:85:09:57:ec:34:
a1:f6:4c:70:72:5a:24:de:27:cb:dc:e0:5a:e4:ca:
db:df:d3:ca:57:87:32:ff:4e:ed:d7:9e:04:01:1e:
85:6d:95:65:e4:9d:f2:60:33:8b:95:9c:78:56:d5:
99:f1:5d:93:aa:e3:fd:17:e3:4a:73:e5:79:8f:98:
85:4f:57:9c:6d:2d:c6:27:26:86:bc:7e:b6:cc:1e:
c1:e6:f5:24:ec:c1:e6:20:7c:55:ec:02:44:bd:c8:
e5:06:5c:95:80:7d:67:fb:6c:38:3b:1d:2a:e9:b9:
51:48:47:bb:26:44:43:58:2d:da:50:64:bf:45:69:
8e:77:a1:d3:2d:99:3b:ec:9c:aa:3b:95:a1:3a:03:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:DA:D8:A8:76:BE:25:61:84:45:29:CF:8E:0D:8C:AF:97:EA:FF
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:44:98:eb:4a:cb:18:07:aa:14:1e:a9:71:b1:b3:16:ef:15:
b5:99:eb:5e:94:ab:26:6b:64:5f:0d:1e:f6:5d:54:2a:79:f3:
23:a8:c8:ba:4d:51:95:04:fb:89:20:e3:48:0d:d3:b6:78:ac:
0e:3a:86:a3:74:5f:3f:20:18:ab:9a:27:71:70:b5:cb:b0:13:
8e:d5:ba:ba:18:e1:8a:ce:f4:c4:f2:39:37:b3:5c:34:84:69:
3d:8c:f0:ca:b9:19:82:05:58:45:61:c4:4f:e3:26:fa:77:41:
8f:8e:61:f1:e0:28:1f:8c:d7:9d:02:90:8f:ee:d7:80:ce:fc:
29:96:cb:18:0f:f2:18:b4:69:f8:b9:19:79:cf:b9:2f:b6:26:
0a:fd:6e:00:3e:af:ea:a2:d7:5a:9a:76:47:d2:de:54:0e:53:
0f:4a:d1:db:3b:09:ef:c0:b5:db:69:5e:67:a4:c0:c7:ec:05:
61:cd:53:2c:8f:25:e0:d5:20:93:9e:5e:70:f0:41:58:34:e6:
21:6e:92:a0:6c:73:91:b1:09:f4:cc:b9:d7:63:ce:94:14:14:
93:10:c9:28:18:8f:0e:6d:c6:51:ea:b0:a3:35:86:7a:80:cc:
cd:6e:a4:42:29:04:b7:dc:aa:e6:7e:52:fa:f2:0f:20:4b:77:
79:00:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:57 2025 by rpki-client