Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: h+4QkQ9OZDkBFz4Bf4v8iLInN40/awLenQ0co173UHY=
Subject key identifier: 2E:90:05:CF:00:7A:0E:92:CC:4D:82:00:15:F7:37:7F:CE:EB:F6:95
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 0198D4E029F45623A91B60285DF765DAA1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 02E4
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: kstzYy/tuH4M78/AVcQ6xRCtrrpQ58+zkZfzruNIKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:29:f4:56:23:a9:1b:60:28:5d:f7:65:da:a1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=2e9005cf007a0e92cc4d820015f7377fceebf695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:7b:f2:6b:7f:cc:2f:20:2c:6b:03:5b:ac:
f9:61:dd:51:e3:68:69:74:ec:84:eb:b9:f1:67:50:
ed:e4:11:a8:a9:5a:00:f4:3c:a4:71:13:e7:27:ec:
33:fb:2f:4f:46:d9:0f:52:38:0b:9f:98:50:f2:47:
06:47:f1:4c:6d:2a:6f:71:df:ba:14:33:07:c9:7b:
41:65:9a:09:87:96:91:9d:0a:a7:21:57:e3:86:90:
c5:84:06:96:3f:a1:8b:c4:ab:94:7f:38:5c:61:ea:
b6:d5:60:d7:91:9d:21:95:3a:95:bf:96:3e:7b:69:
84:97:eb:34:0c:2f:3e:97:9e:34:b2:ed:04:3c:f2:
2d:1d:ba:ba:57:9b:59:f7:4d:ba:c1:4a:eb:35:0e:
ff:71:09:df:63:9e:d2:3e:a1:ed:ef:4b:d2:cd:fc:
c7:eb:2e:02:c0:12:b8:b4:2f:54:32:64:5b:39:b3:
77:76:84:3d:61:79:69:87:d7:c3:65:4e:47:fd:2c:
3c:fd:6e:bf:a6:fa:b5:99:73:20:f8:62:b7:3b:b0:
33:d0:2d:02:27:01:c2:8c:53:a2:ff:6c:40:d3:70:
30:bc:d0:29:45:37:46:81:7a:cf:20:f6:c3:25:8b:
b2:fa:98:5c:b5:dc:e0:ee:71:49:41:4f:df:8f:57:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:05:CF:00:7A:0E:92:CC:4D:82:00:15:F7:37:7F:CE:EB:F6:95
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:df:09:f2:a7:e4:37:2d:1f:18:fe:89:22:81:c8:ce:94:
54:b6:d4:7a:8b:d6:23:7a:c8:d2:de:d8:9b:a1:09:63:bb:1c:
0f:8a:37:df:b2:7e:96:1d:d1:2d:b5:53:ea:37:25:c9:0b:c4:
91:2f:34:e7:86:0b:0c:23:eb:aa:62:77:f5:81:f1:ed:47:13:
0c:90:5b:da:55:4b:42:4c:5a:d0:9f:c7:09:4a:4f:33:d9:69:
08:38:df:80:53:f3:c2:71:e3:39:14:d2:b1:bb:7e:68:21:a3:
25:d3:7e:40:7b:ce:4e:ba:11:05:35:c5:b5:1e:84:88:20:68:
b8:73:ad:5b:c2:ae:84:4c:41:e1:5f:b7:40:aa:27:28:af:11:
0c:80:a5:07:dd:48:9d:bc:a7:e7:24:13:5c:cc:84:25:02:c8:
fb:24:f6:dc:8d:a9:81:34:54:84:16:96:cb:a3:55:f7:3a:22:
b5:a2:83:2e:4b:52:74:ae:60:ee:ab:be:ff:05:bd:98:a9:67:
12:2d:4f:d9:18:cd:5d:1b:4d:14:a7:f4:7d:35:92:a9:4b:40:
a9:73:e3:bd:a2:60:32:e1:1c:b7:b8:a9:7b:c8:2e:ee:0f:07:
3b:6b:1a:be:a2:50:af:c5:a5:49:fd:06:e4:24:0d:4e:61:61:
14:6a:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:19 2025 by rpki-client