Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: 9LXQAfqvZ8vAgvr8x0otvLRzaZzbEHQl0nAXlTL8St8=
Subject key identifier: 6D:ED:5B:BA:F5:D5:2A:89:89:4D:20:B9:C4:C9:6B:CE:57:79:A1:E4
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0198D515CDAF84E50035837458AA9F5A2A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 14CB
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: aHBpRMruRdE5QLU+WeF7Aa04WWK9qe+U+U7JnL6nbLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cd:af:84:e5:00:35:83:74:58:aa:9f:5a:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=6ded5bbaf5d52a89894d20b9c4c96bce5779a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:05:9c:f4:7f:30:a6:59:c6:df:bd:73:53:
4b:5d:5d:e2:31:80:9c:be:00:92:d9:4a:45:3d:e1:
ef:6d:0a:30:ba:4f:36:00:84:85:b2:37:41:3a:d6:
b5:36:f2:c0:71:ad:cd:3f:c6:d5:71:88:1a:23:cf:
c4:d8:69:15:22:e8:50:ca:97:a1:49:65:c6:0c:bc:
75:d5:76:9f:93:94:02:e2:25:29:cb:41:99:ce:6b:
90:17:70:c9:bf:8d:a1:0a:e0:33:5a:26:17:a3:f8:
84:fe:9d:a1:a3:e7:d7:a4:ba:2b:a2:3a:56:99:92:
64:1b:1c:6f:3a:7f:74:8c:3e:fa:14:8f:4f:b9:1c:
a7:f5:ea:a4:76:b2:ac:91:a5:21:0a:38:39:31:d3:
d6:8f:92:5c:06:7f:e3:3c:9c:a0:31:12:03:f5:c2:
ef:51:f2:24:f6:8d:e2:49:83:49:d5:fc:7c:91:55:
ba:c7:6b:92:ae:cf:52:e1:25:ce:92:63:09:52:c5:
28:2b:d6:c3:d2:a7:df:5e:fd:67:f8:1a:6f:ec:5c:
08:5a:51:32:d4:6f:ed:31:1b:d2:46:b9:02:38:1e:
ab:bd:71:97:94:6d:8e:4b:d3:f9:62:4c:8d:fc:54:
d4:d4:7b:ec:6e:dd:9c:07:ec:20:21:a1:b3:93:36:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:5B:BA:F5:D5:2A:89:89:4D:20:B9:C4:C9:6B:CE:57:79:A1:E4
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:35:b2:e7:73:2a:ed:8b:4b:91:b4:f5:5e:7c:3c:b3:78:
cd:ef:5a:30:4b:94:08:07:09:82:19:db:f8:07:1b:a7:13:ee:
0b:c2:e3:21:85:c2:70:25:fb:2f:87:68:3d:54:17:8c:6e:23:
4c:e6:be:9b:2d:9d:1e:3a:8a:61:de:a9:c6:e0:e7:11:54:57:
2e:91:fa:c2:60:48:b4:aa:32:92:de:91:36:a6:3c:39:98:27:
e6:de:c2:66:33:b7:7f:66:43:bc:24:1d:70:81:31:87:f5:4c:
35:93:39:e3:19:99:23:75:11:c9:20:60:b4:b5:42:0f:42:54:
8b:f8:be:77:cc:92:bb:72:32:92:93:fe:36:a4:83:8f:4f:20:
88:08:e2:5f:a3:b8:4f:83:d1:63:6d:ad:c9:01:f0:74:77:a7:
ed:b0:f0:9f:89:0f:8e:9e:9b:0a:8c:c0:b3:2b:43:71:e3:ac:
7a:d2:e6:de:0b:47:b8:20:ab:84:fc:6f:e5:b8:e6:a1:89:7e:
13:d1:a4:9c:65:44:9a:4d:dd:b8:6f:5f:f0:01:66:3b:db:6b:
9f:a8:d0:5a:3d:aa:df:3e:17:c6:29:13:5f:b1:b5:72:f9:27:
43:8b:a8:c5:33:44:dd:11:a1:5d:08:21:33:e9:5e:87:22:8f:
94:ad:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:35 2025 by rpki-client