Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: Yba/XOr6A48wMLBsb2zKGpvQna0FNZaUtNm0osNJk0o=
Subject key identifier: 6B:6A:5B:D9:38:41:0A:2A:1B:FE:57:FC:AC:D6:8D:61:FB:DB:13:90
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 0198D65F5E99D7DA2A98A6529A2FD9DED04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 112A
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: +T3CjWtcrwZbFWlFahxOgNM6SmwlmTiuuwPda3QJMY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5e:99:d7:da:2a:98:a6:52:9a:2f:d9:de:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=6b6a5bd938410a2a1bfe57fcacd68d61fbdb1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:00:94:e1:c1:62:eb:c3:14:20:cc:f0:a8:
3a:15:19:22:88:35:ac:90:6f:13:e0:fb:7b:b7:b0:
47:bf:6c:dd:a6:bd:ef:bd:ed:bc:e4:ad:d0:7a:a7:
92:7d:1a:36:67:11:f1:e0:98:87:19:e1:3e:18:0d:
25:c8:0f:32:66:ca:15:bc:ba:16:ba:7d:39:66:8b:
1f:4d:f6:03:73:cc:e6:15:5a:a7:86:9f:97:89:ad:
a6:b6:7e:e9:c2:fe:45:00:3c:42:a5:ed:c6:7b:cb:
7a:9e:88:a8:6e:8a:c0:c3:95:04:b0:69:61:8b:d2:
d5:f5:0e:b5:5b:3e:93:4c:54:45:b8:ab:38:69:45:
70:63:82:4e:ff:cc:cf:9b:1a:b7:90:96:0d:60:ef:
b4:2d:44:04:4e:8c:6e:74:f3:2b:4a:ca:2b:1e:aa:
66:54:9d:b0:ff:e0:0c:73:40:49:a2:ca:91:26:1a:
f7:df:44:f1:54:6e:3b:ee:04:08:7c:e3:f0:5b:6b:
ac:58:13:67:c3:f4:ad:da:6f:83:eb:5b:35:56:29:
e7:f2:6d:c7:9e:cb:31:3e:18:bf:ad:34:70:ad:a9:
ab:b6:48:ac:b6:91:14:9d:10:88:23:3b:ef:7d:5f:
7e:b3:52:65:55:c3:74:7e:b2:65:50:54:a2:b9:fa:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:5B:D9:38:41:0A:2A:1B:FE:57:FC:AC:D6:8D:61:FB:DB:13:90
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:01:82:8e:92:95:fa:45:b1:bc:b6:ad:47:57:97:c6:eb:23:
a0:5f:9c:1e:7a:d4:cf:95:96:99:12:d2:42:0c:27:21:5e:5d:
bf:e2:29:8d:e1:68:ce:01:6d:ab:77:03:e1:5e:72:d6:0e:7c:
a2:80:04:92:50:80:75:63:d8:68:c7:ea:9e:df:58:f5:6b:1d:
7e:e8:ef:ba:f8:c7:c3:c8:51:ef:cb:8b:41:f3:a4:b7:86:24:
94:6d:86:71:f0:b6:81:dd:24:fc:33:10:bf:40:07:2e:53:27:
a3:0f:56:df:cd:b1:77:5b:ef:64:5c:fa:94:7b:22:59:6a:cd:
1a:88:b5:b6:b2:6f:9f:dc:63:52:42:23:79:c7:ff:95:31:f1:
ad:0e:22:21:5b:9a:13:59:f2:95:a5:fe:a9:54:1f:b9:8d:ee:
fd:cf:de:be:9f:ab:84:68:0b:87:f2:c1:31:7f:fa:38:52:02:
0f:b8:68:29:e7:ca:aa:82:a3:6e:00:11:ef:c1:2f:b5:ab:17:
32:82:0d:58:08:e9:a7:be:fe:f6:cf:d6:b4:f2:7a:92:50:77:
56:24:ab:3b:49:b3:49:37:05:fe:78:a5:a5:68:6a:fa:61:42:
8a:1d:44:14:80:39:1f:43:4e:35:7c:a0:87:a1:b7:0c:91:76:
1b:ff:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:33 2025 by rpki-client