Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: cS5gsGY/WJqEQ+0RWn3F1tFV3bjVC3hfkvCgNk/gjck=
Subject key identifier: 5F:28:67:83:FE:7B:DB:6A:17:B0:54:3F:AC:24:1E:48:7D:95:AA:12
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 0198D7060B337C6218F0FA95C5DF68D21433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 098C
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: 9Dq+zXssixwlUUM7vjMJV/Ten+J2sQ741O9nR+hvghs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0b:33:7c:62:18:f0:fa:95:c5:df:68:d2:14:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=5f286783fe7bdb6a17b0543fac241e487d95aa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:e2:1f:42:5e:6d:d9:c8:69:fa:5f:15:8d:
6a:73:e0:57:7d:a9:da:57:ad:91:6c:55:e2:9d:00:
2c:67:cb:eb:a8:d3:3d:ab:a4:79:93:ad:ef:ed:63:
d1:73:8a:b7:77:cf:fc:cd:17:ae:ce:80:4b:98:83:
6d:ed:38:39:00:e7:79:b6:e9:88:6b:92:83:0b:43:
61:c3:11:cc:a8:57:c7:5a:8d:e8:08:1d:06:7f:7f:
83:93:67:41:cf:4b:90:ac:0b:fe:4d:ff:89:8b:46:
a6:05:87:12:a0:e2:a2:e6:68:c3:33:14:07:cd:99:
3b:09:a0:37:7a:a2:d4:f8:9c:d0:3c:5f:c9:da:60:
2d:c4:51:9c:0d:e2:34:ed:12:20:0f:b9:94:53:75:
28:0c:93:05:ce:53:dd:87:42:57:45:71:ff:ad:d1:
da:58:72:69:f6:57:f9:2a:f0:06:5a:7e:40:ce:80:
df:98:88:bb:ee:14:44:8e:ce:81:2f:58:12:6a:d8:
77:8c:3c:2d:f6:2c:e8:a8:a4:db:c3:b4:db:0e:28:
b7:c7:6d:16:c9:f7:77:28:28:96:41:c5:c5:07:ab:
16:40:20:b0:7c:cc:a5:a5:12:c9:52:55:6e:2c:59:
ba:d7:d4:d3:ac:86:16:1b:cc:25:66:f9:ff:d7:6b:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:67:83:FE:7B:DB:6A:17:B0:54:3F:AC:24:1E:48:7D:95:AA:12
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:f0:e0:64:a4:94:ba:fb:d9:a4:d8:be:8c:41:42:22:d9:
c0:3a:2f:52:83:2a:66:d5:2d:11:35:6e:c1:3e:fa:cf:64:69:
5c:9e:8e:71:d5:79:4f:5d:93:3b:02:22:fe:11:3a:89:ac:79:
1c:34:90:e5:2d:ec:b0:17:23:e8:2c:ea:41:75:cf:84:9e:fa:
0d:4b:6e:74:71:c0:63:88:fe:ef:38:5e:23:7c:4c:5f:3a:d5:
bf:2f:ba:33:88:a3:f0:23:e6:44:4b:dc:f2:6c:34:8c:c9:43:
d9:d1:d0:4c:da:56:55:aa:ae:88:f2:0b:b7:ce:8c:7b:87:1f:
fa:9c:e7:e9:03:df:d6:41:50:c1:1c:e1:34:04:0b:24:22:f8:
17:ae:eb:4f:79:ea:4c:d5:f5:4e:fa:cf:eb:f8:e3:0d:8a:61:
df:fc:9c:39:f5:a2:93:2d:24:5d:e6:6f:28:d9:62:20:b2:a0:
12:8d:47:de:a9:38:d0:6c:2b:cb:f7:2f:53:19:a4:d4:c6:8c:
72:d1:6f:5f:63:3f:0a:a6:52:8c:89:4b:5b:91:5d:32:bd:02:
6e:2e:f3:c2:4b:4b:28:c7:a6:d0:87:a4:7d:15:8b:85:a9:f2:
51:eb:d2:ee:39:1c:97:f2:70:10:a4:45:31:0e:f2:ce:14:b8:
da:73:0d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:53 2025 by rpki-client