Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File: 6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier: GZ0bo3lvUYw8usYCL/BmU1t0m5+l8Mto0+WWw+AuC04=
Subject key identifier: BA:10:2D:AD:51:CB:76:F2:EA:A1:2D:C9:A7:D8:55:49:29:5B:D5:38
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer: /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial: 0199FFC7273D976034F6C640767059D8A137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number: 0290
Signing time: Mon 20 Oct 2025 04:01:05 +0000
Manifest this update: Mon 20 Oct 2025 04:01:05 +0000
Manifest next update: Tue 21 Oct 2025 04:01:05 +0000
Files and hashes: 1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: jjo/+i5QeeyRuhxRkLQ1/szNsJNat2+TvOF07BHkJF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:27:3d:97:60:34:f6:c6:40:76:70:59:d8:a1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Validity
Not Before: Oct 20 04:01:05 2025 GMT
Not After : Oct 21 04:01:05 2025 GMT
Subject: CN=ba102dad51cb76f2eaa12dc9a7d85549295bd538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:53:aa:ea:e7:96:1e:68:9b:5e:fd:b2:e4:
c5:7a:19:d7:54:3f:65:d5:c2:64:f6:08:64:ef:4e:
55:16:c0:38:1b:e1:0c:5d:c4:0a:c8:0e:c7:03:c2:
a0:91:ca:72:60:3d:d6:b7:49:34:8c:36:0a:c6:be:
5c:b7:cc:22:73:1b:60:ec:24:c3:ee:b8:46:36:02:
da:72:e1:7d:df:b4:06:0d:51:b3:cb:8a:82:1e:ee:
5f:62:3f:4f:90:8c:d0:7b:8a:db:ef:6f:09:53:f3:
a6:68:5e:8b:8d:bb:cc:af:e0:cb:88:6f:e6:ae:e4:
7e:e6:fd:75:7b:73:50:08:e2:aa:bf:ab:89:ed:59:
d0:7e:82:8d:ee:8e:9f:8b:4c:01:6a:3c:9c:84:1f:
12:05:15:92:0e:f8:c9:ea:e4:40:62:7d:a2:09:10:
90:8c:90:fd:17:64:44:4d:03:63:16:af:0f:15:e8:
e9:e8:4e:a5:72:60:7a:72:aa:3a:dc:38:03:69:92:
92:01:ae:56:11:e9:fc:a3:64:f0:1c:ef:9d:69:68:
5d:88:2a:08:3c:5a:4c:93:ae:4e:e9:1d:87:8f:72:
be:29:c3:43:53:ae:39:de:99:13:54:50:3a:4f:52:
53:f6:5a:f1:3e:f1:7d:d8:e4:75:ed:d5:8d:0e:02:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:2D:AD:51:CB:76:F2:EA:A1:2D:C9:A7:D8:55:49:29:5B:D5:38
X509v3 Authority Key Identifier:
keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ea:27:b6:2a:43:99:34:9d:24:62:d0:90:a8:ec:41:80:1d:
9b:3d:f0:49:a0:ff:4d:93:41:83:74:32:15:61:26:b8:b0:6d:
97:dd:b7:62:7d:15:4e:c6:b0:8d:c4:39:ec:d7:d0:d0:d7:5b:
65:83:9a:86:50:fd:0a:2a:c6:e0:29:e5:3f:04:e8:ce:83:91:
e1:d3:f8:cb:d2:5b:18:64:77:28:6a:1a:13:60:5a:c7:7d:7d:
ea:74:0c:25:5a:ca:f8:31:94:0d:dc:00:8f:31:45:ac:98:bd:
9e:23:fc:2a:b8:10:dc:1b:48:f5:9f:94:e8:a8:08:61:84:2d:
c1:e6:6b:e5:94:36:ec:46:20:85:9b:d2:a8:a2:54:ee:bf:c4:
5d:70:4a:fe:3f:ff:2d:e6:9f:92:d4:4b:03:a8:f7:f2:97:6b:
bb:9f:31:52:39:59:72:3f:6b:dd:7f:2e:01:71:bd:7e:34:2c:
87:8e:87:18:80:a7:e6:f2:c7:7b:bd:8a:91:95:af:d3:8c:47:
1f:22:01:7b:14:32:83:b5:0e:df:ba:68:e0:5e:d6:2a:03:4c:
79:a7:a3:4e:66:db:f1:c2:9b:6f:cb:3f:22:53:ef:ce:0c:b9:
33:da:81:55:25:09:e6:01:85:bd:62:15:80:98:ab:7f:f3:99:
38:99:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:27 2025 by rpki-client