Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
File: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft (raw, json)
Hash identifier: B2S57dqXXRU1495CEsNYUKwzI/p06I1OPZk5qW5Y2NY=
Subject key identifier: 36:EA:25:8A:EC:4F:D3:55:04:F3:B4:3F:38:C1:42:85:43:20:75:93
Authority key identifier: E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
Certificate issuer: /CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Certificate serial: 0199FFC743B0246EFAC9C9A7408A1F34FAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
Manifest number: 1150
Signing time: Mon 20 Oct 2025 04:01:13 +0000
Manifest this update: Mon 20 Oct 2025 04:01:13 +0000
Manifest next update: Tue 21 Oct 2025 04:01:13 +0000
Files and hashes: 1: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl (hash: nTdUXsK90V777JSDzoLbzPo7ohCXbsTXHBShe218Xf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:43:b0:24:6e:fa:c9:c9:a7:40:8a:1f:34:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Validity
Not Before: Oct 20 04:01:13 2025 GMT
Not After : Oct 21 04:01:13 2025 GMT
Subject: CN=36ea258aec4fd35504f3b43f38c1428543207593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:3f:80:1c:ef:ee:11:9b:82:c2:5a:ec:3e:
8f:29:20:be:93:b1:95:2e:a0:3b:d4:4f:6c:f1:5e:
13:39:90:77:df:34:74:70:96:fa:03:3f:91:8b:57:
de:f8:93:19:db:90:3f:5f:1a:da:ed:48:93:23:7c:
04:42:c0:18:7c:9f:3f:2a:94:e7:fa:f5:3a:ce:c5:
ca:2f:90:f7:5f:c4:08:90:f9:85:27:6b:24:49:fb:
3c:00:a4:8f:ce:6a:46:26:7d:58:32:2b:a5:dc:2e:
f8:ea:9f:c1:33:80:4e:e2:03:ee:05:47:36:40:ac:
a7:0e:ca:f1:48:90:90:43:39:40:97:5d:13:df:bf:
f9:ed:37:ee:6e:6f:bf:2a:84:11:31:ce:dd:88:da:
5d:0c:3d:01:72:b2:6e:c6:7b:b2:6f:41:aa:bf:16:
3c:ca:10:70:d0:15:98:56:ea:ed:9e:73:b1:61:8e:
81:62:a4:ff:15:7d:96:0b:b2:45:65:1c:c4:66:f6:
59:75:5c:4e:18:83:db:bc:0f:07:cf:9d:c6:55:46:
21:9c:8e:25:5b:bc:aa:2f:30:70:41:3c:56:e1:35:
a5:c1:fb:a4:cc:da:d0:d2:c3:99:8a:2d:42:2a:12:
f0:b6:c4:96:ee:75:4e:fb:3e:c0:e0:c5:77:26:75:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:25:8A:EC:4F:D3:55:04:F3:B4:3F:38:C1:42:85:43:20:75:93
X509v3 Authority Key Identifier:
keyid:E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:12:59:a5:55:16:ba:d6:ad:69:1a:74:8f:c5:05:9a:4a:88:
0f:42:20:82:51:1c:ca:18:82:6f:74:20:66:1b:c0:1e:7f:3c:
1b:6c:0f:26:38:53:13:35:b1:f6:e4:7d:07:16:9f:e1:e8:83:
c7:bb:be:58:f7:d6:0f:b2:d8:b8:52:d2:72:0c:bf:46:80:cb:
85:54:f0:b2:59:8c:b6:de:1a:c9:01:86:a7:27:c4:fb:65:76:
9c:a0:2a:2a:87:1d:87:ab:21:9a:9a:b0:6d:ed:a3:fe:70:37:
94:0f:ef:61:41:71:56:02:d3:09:38:bd:4a:3f:ea:de:ff:73:
11:4e:2f:c0:8e:22:23:bc:97:29:ff:81:86:9c:11:54:b7:a7:
cb:92:09:5f:73:f6:5b:9f:aa:2e:1a:52:be:57:70:e6:e2:34:
69:11:86:5a:99:95:60:9e:64:2b:c1:7b:f8:ed:79:e0:fd:18:
e6:a7:6c:76:1c:b4:98:41:69:1c:12:51:0e:d0:b4:43:ff:5a:
63:39:1d:52:e8:5d:7b:48:d5:39:c5:65:10:ac:c7:2f:20:c1:
9a:d9:29:4e:26:32:66:31:d7:56:7a:cd:2e:8b:a2:ee:7b:eb:
db:f9:22:6e:9a:6e:94:46:4f:10:45:38:85:ab:8d:a2:d6:5d:
2f:82:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:43 2025 by rpki-client