Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: NwAaw3JQj4qyk9S6lWdymVnfCPtoN9DYfIeyQ7U4CLc=
Subject key identifier: 64:97:62:A4:F1:5B:3A:92:76:85:E3:A6:2A:CE:43:0F:B0:93:6A:76
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 0199FBEA94E6DA9D9B431743019BB7EC2E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 0A86
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: zWCIMmdYHceoGP73mtdVv2Yf+vBWWw9bmE1VgeZ7IMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:94:e6:da:9d:9b:43:17:43:01:9b:b7:ec:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=649762a4f15b3a927685e3a62ace430fb0936a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:4a:64:a8:9b:0a:c9:d7:d0:96:0a:68:5a:
8a:aa:2a:da:82:c1:d9:00:a2:87:47:13:4b:b5:96:
7b:71:05:9a:e9:76:e3:a4:04:35:8b:d2:a0:ac:d6:
94:95:28:a0:6e:49:2f:79:31:1f:9a:68:f3:00:e1:
c1:88:b6:62:9e:ee:29:76:b1:c2:27:53:b3:4c:c3:
b3:fa:e4:8a:21:5a:f0:68:8e:46:f2:69:9c:df:fd:
22:98:d8:89:d2:ef:71:80:f9:32:e9:db:5f:8c:7c:
d2:0f:dc:b4:c0:36:0d:12:f6:be:f4:01:18:74:e2:
26:61:9f:76:b7:31:8a:53:63:69:3b:27:f8:c2:c9:
72:89:0d:df:4e:fe:17:97:f8:13:83:b7:16:73:65:
0f:12:34:6f:4c:5e:d7:74:c2:ca:13:4f:0d:64:0e:
55:d8:f1:fb:56:cc:26:93:fa:02:ae:18:20:ec:63:
14:28:3a:ec:8e:d0:36:4a:bb:0c:66:af:af:29:cd:
7d:64:ef:e7:82:a1:b0:02:a9:73:e5:8c:25:b5:26:
8c:f4:14:57:84:b4:cf:73:90:6f:aa:ef:6a:09:14:
25:7a:6f:2d:cd:e1:c5:39:67:d6:75:70:ca:6a:a4:
1f:13:03:95:14:f6:e2:7c:37:0f:6d:04:ba:be:87:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:62:A4:F1:5B:3A:92:76:85:E3:A6:2A:CE:43:0F:B0:93:6A:76
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:c1:fd:ec:94:b1:05:43:f7:12:32:86:f3:bc:d2:4a:e3:
15:7d:65:fa:01:e7:56:ab:4e:32:f0:c4:a2:41:3a:5c:46:a1:
af:4c:d6:a0:c5:8d:8e:af:93:fe:a6:9a:7e:6d:08:78:e1:40:
4d:5d:e4:c6:af:ce:3c:df:96:f3:5e:24:62:7a:88:a9:ae:20:
39:46:47:cc:08:3c:7a:30:a3:c6:13:c1:61:bc:ae:4f:6b:83:
06:6e:1c:3a:0c:c5:8c:78:39:3a:8c:2f:f9:81:d6:64:7d:2c:
98:f2:5c:ef:23:3f:19:29:c1:0e:51:74:fc:03:3c:c4:79:83:
12:5d:ce:f9:72:d9:06:fd:71:64:13:d2:f1:97:37:14:1e:9e:
93:c3:dc:ec:26:8e:cc:56:9d:05:14:70:4e:b1:1c:02:01:5b:
53:0e:2d:47:b9:d0:ef:31:cd:99:7c:db:aa:55:38:2c:cc:7b:
9d:28:df:93:97:c8:9e:8c:7e:2e:54:9e:bb:c0:be:6f:a6:4c:
be:0b:23:92:09:6f:46:dd:a3:b1:e1:b3:20:a2:34:0c:6b:be:
6b:17:ab:b9:4a:b0:8d:46:2f:05:3c:fc:b7:f6:43:8d:11:e4:
75:84:46:02:33:03:dc:3c:cc:26:61:db:6f:ed:a5:96:4a:36:
42:9f:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:39 2025 by rpki-client