Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: 9dZk3deKhLkI2MA/gmwy3nKRcT2n6f1XYzizwqqv+ec=
Subject key identifier: CE:91:DB:92:D2:7B:29:C3:A7:88:97:7F:EA:B1:2B:65:4B:36:C6:5F
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 0198D5160D864AA1A6AAE1100D837C6BEADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 09B4
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: 6Hdlex0gDgDuJePgo1Zda/pYcxfSRw1/WiaIwsbE0UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0d:86:4a:a1:a6:aa:e1:10:0d:83:7c:6b:ea:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=ce91db92d27b29c3a788977feab12b654b36c65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:a8:c3:25:a3:e1:6b:f6:a4:3c:b1:ff:e6:
31:71:c3:ed:52:cd:2f:5d:9d:b8:bf:f7:b0:1f:ca:
72:9f:22:e8:05:55:de:e8:b9:e2:21:0b:a1:f1:cf:
b4:3d:c1:41:2e:cc:52:99:76:d7:7d:7f:b1:d8:4d:
b4:9e:9c:8f:18:be:52:b6:1f:3d:ce:95:62:61:6c:
ab:bd:15:15:2f:2a:d0:7c:3e:6a:d4:b8:bd:d5:b1:
f0:41:8e:df:2d:7d:12:cc:f2:a8:00:01:8a:0f:88:
91:68:f5:5b:a9:e9:6c:24:bc:f2:04:28:78:5a:1a:
e0:7e:a3:4e:aa:c1:46:a2:89:0b:34:11:df:80:1b:
2e:80:9f:6a:8a:6b:7a:a7:53:13:6c:98:6f:cf:70:
61:68:a0:df:20:5b:3e:8f:c6:75:5f:a8:69:bf:7d:
ec:44:16:5e:6b:42:60:69:e6:2f:13:5b:0e:a7:d7:
72:92:f0:a2:55:5c:c1:4d:a1:c3:51:5e:1b:62:56:
1c:c3:41:85:76:0f:c7:81:0b:75:29:fc:a4:dc:48:
61:be:fa:4f:e3:57:b5:c3:29:5a:11:77:3e:d5:08:
a3:50:11:49:03:21:e5:31:97:49:17:96:b5:17:ed:
a8:dd:05:a7:13:7c:a4:63:d7:26:3b:91:d8:20:d7:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:DB:92:D2:7B:29:C3:A7:88:97:7F:EA:B1:2B:65:4B:36:C6:5F
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:49:f7:fa:62:b0:8e:9f:af:9b:df:0a:29:83:80:ae:38:
d7:b5:d4:2b:86:ff:b4:40:26:e9:3a:25:d8:4f:a9:e9:1c:ce:
ee:d3:7e:a0:d3:ae:c1:7f:02:14:ea:35:63:b4:ee:b7:fc:17:
14:84:23:cb:9d:24:29:96:9b:1a:29:e1:03:9f:ba:f6:dc:d8:
78:1e:f8:4c:72:07:cd:c8:9f:e7:31:c9:79:0c:9e:ad:55:7f:
67:d9:21:28:8a:1b:5f:06:7c:b8:68:da:19:1c:ca:3f:64:f4:
88:da:fe:be:4e:09:f9:3c:db:cb:b5:a3:a2:70:cb:80:95:9a:
d6:79:fb:96:24:0c:86:a6:e5:b0:ce:b6:85:b3:eb:0b:66:0a:
f2:5f:38:8b:0e:6e:74:0a:bc:34:46:e3:36:f5:ca:28:74:69:
97:12:e4:26:5d:1b:3d:74:a0:4b:e1:1a:01:2b:d9:6c:25:04:
2d:bd:74:48:26:ad:d3:af:da:d6:80:10:db:36:be:95:b2:46:
24:04:35:d4:ab:9c:8f:dc:17:e9:c5:d8:d4:28:f6:33:1d:f4:
87:b9:49:7a:7b:e5:72:46:38:45:90:c8:1c:e5:c7:a8:c6:e9:
a6:26:2c:bc:bc:ca:b1:13:e0:88:82:71:60:e8:f1:46:5d:24:
fb:0d:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:44 2025 by rpki-client