Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: fPNCzaaxLSVcGPWHshufIhLTE7fLcs1pwGxSyfERrDY=
Subject key identifier: ED:D9:5E:7D:E8:98:45:9C:93:3A:0C:17:50:EF:4C:19:45:F9:27:7E
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 0198D4724179ACC946C61BDADB90787B72EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0D66
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: /Ut+W+iT+GKFm4whTIUlnjAIjY+Y8p42aB5EtM5wV38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:41:79:ac:c9:46:c6:1b:da:db:90:78:7b:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=edd95e7de898459c933a0c1750ef4c1945f9277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:3c:78:af:3c:57:c6:ee:6f:cb:0a:03:b4:
39:96:62:5d:92:aa:0c:92:69:e3:ef:e2:90:9f:e9:
8c:7d:7e:38:87:09:85:93:c0:7e:d9:9c:e5:cd:f5:
29:02:a0:61:6a:67:51:89:73:64:c2:16:98:9d:06:
01:3e:79:19:89:74:14:13:98:cd:fa:2f:5a:b9:53:
c7:ed:4c:38:cb:cd:65:cd:9c:67:af:a4:5d:72:fb:
ec:13:af:57:28:d0:da:5b:bf:eb:44:f7:f8:53:21:
95:c6:bd:c5:d8:09:ea:c6:72:39:93:11:90:1d:63:
ed:9f:b3:f8:ae:a7:59:10:9f:3a:2e:70:91:2e:42:
cc:07:e6:9b:3d:19:6a:a4:7d:71:e6:be:17:21:b4:
fc:4c:08:bd:0e:9e:ed:3d:80:e0:bd:ab:80:79:1a:
7e:04:3e:61:93:f4:62:62:ca:db:c0:9b:7d:9e:e0:
a8:b7:20:3b:15:fb:c3:1e:c8:3e:5d:cd:01:75:4a:
ff:fe:a9:9a:73:40:24:46:c1:61:4d:4f:dc:6c:ff:
10:00:bf:05:16:2a:fa:bd:3a:53:2b:ec:1d:c2:1e:
25:c3:26:e8:55:31:c9:4c:cd:81:7f:2a:b9:fc:fb:
ca:31:93:81:de:07:13:ba:b7:39:b7:c5:1b:44:e4:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:5E:7D:E8:98:45:9C:93:3A:0C:17:50:EF:4C:19:45:F9:27:7E
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:ec:0b:05:08:48:c9:20:2c:51:f9:93:4a:88:37:99:f5:
a0:e2:2e:f7:16:e5:79:bb:2b:5e:62:5b:10:e1:e1:e3:14:58:
3f:96:28:b3:1f:c0:3b:3c:ea:87:3a:ce:c0:c8:63:25:ea:a7:
11:6d:21:bf:e2:01:65:a8:eb:d5:cb:3b:de:05:64:a3:b3:40:
db:29:27:e9:ce:95:d7:7c:b5:8e:fc:99:dc:d5:bc:14:a7:f8:
06:19:ec:9f:54:c6:17:41:ef:21:7d:a7:41:3e:46:7d:25:dc:
d1:54:ee:6b:ae:45:20:f4:6f:48:9c:4d:bf:74:48:ba:2d:9f:
e4:a1:e7:ee:9f:cb:7a:20:c4:35:ff:b1:c3:5f:9e:2c:4f:95:
0e:48:8f:e9:7b:ab:d7:8f:5f:4f:08:74:e6:02:f6:0c:2e:bb:
a7:26:b5:cd:d3:4f:0a:3b:de:36:0a:3f:22:09:3e:a2:01:8b:
ee:c0:03:b6:b8:c4:b0:c5:b5:2b:c5:23:25:15:b8:37:96:f5:
a2:42:30:93:5a:a8:f8:46:05:87:52:b1:ae:27:c5:36:c0:1e:
6f:da:f3:fd:63:ad:f1:94:3a:67:6c:f9:b1:6c:a5:99:c5:0f:
18:3f:e6:27:ad:ba:29:ed:8a:90:46:1a:61:a5:78:d5:aa:7e:
f8:c1:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:09 2025 by rpki-client