Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File: 6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier: L3laGHsV7a4Ok2JGot3ddX2rc80GcxWBMaP0mDQ1t1E=
Subject key identifier: C9:98:36:15:5F:64:79:58:43:CD:4F:FB:D8:DC:E7:6F:5D:E2:62:1C
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer: /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial: 0199FBEBB2070933C086C66D0B9F35E5E02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number: 13A4
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: Z27lVo5I1cOXJBuABvZmHMQVc0B8MU1324rs5+SBGYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b2:07:09:33:c0:86:c6:6d:0b:9f:35:e5:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=c99836155f64795843cd4ffbd8dce76f5de2621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:a2:ea:27:22:3c:f9:87:3e:20:a1:e3:f9:
d6:48:3b:c8:41:a1:15:98:33:a0:69:7d:32:03:0a:
de:f5:d8:b0:00:65:39:bb:97:d5:cc:79:d9:6b:a8:
97:b3:fd:a0:9d:46:ba:4b:d3:1d:3c:81:71:f8:b2:
5c:10:78:b1:d7:c1:1f:81:5b:7e:a9:b6:9c:7b:c7:
8d:45:41:e4:e1:73:c5:74:7b:f7:dd:65:f3:e9:ee:
77:bf:b9:40:a7:9f:1e:c6:ef:7b:ca:19:1e:64:70:
6d:ab:29:3e:f7:0a:1e:da:87:b0:d0:38:17:fc:72:
72:23:16:ff:6a:9a:d8:db:b9:90:76:de:d3:f0:63:
60:df:a2:cc:3f:c8:25:99:c7:66:1e:1d:a0:e6:19:
c4:b6:8a:cf:68:38:a4:79:95:ba:67:48:b4:e3:ef:
e8:f3:b1:24:36:3f:c9:12:e1:cd:a0:ba:0d:6d:d7:
49:f9:a2:1e:b0:3c:11:17:96:22:26:eb:b3:37:01:
06:e3:d3:91:da:fd:99:e3:d6:fc:79:64:8d:09:e2:
48:f3:ef:85:d6:50:45:78:ee:34:0c:35:61:ae:a0:
74:bd:b3:e0:10:34:6d:e6:dc:80:88:8f:0e:72:c6:
97:d2:95:df:28:b1:79:94:49:3a:1b:e4:40:bc:a1:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:36:15:5F:64:79:58:43:CD:4F:FB:D8:DC:E7:6F:5D:E2:62:1C
X509v3 Authority Key Identifier:
keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:70:ca:77:58:02:e1:0c:4d:a4:65:73:6c:4d:30:03:29:a3:
3e:8d:ed:08:b7:d5:c8:2a:7d:24:76:8d:75:00:0e:7f:2d:3d:
86:fe:f2:46:ab:b1:25:7c:52:87:be:8b:e2:8d:76:d8:1e:7c:
ab:34:d3:5f:59:80:3a:c1:40:04:8d:44:5f:4c:b2:58:84:c9:
3e:a7:48:80:32:b6:ea:c4:53:79:a7:62:cc:eb:02:6a:6d:f9:
77:d1:d8:14:64:9b:ee:5d:4f:b9:22:71:58:f5:25:20:98:46:
65:1a:88:f1:3f:c5:c0:04:59:b0:6a:6b:59:fe:9f:3f:50:c6:
91:d5:a5:19:4b:56:a5:88:98:97:55:6e:b1:0a:db:f7:fd:86:
a2:77:be:cf:b4:df:a6:7b:05:5f:24:38:9d:5e:49:ce:0a:22:
5e:47:d9:14:58:91:13:cf:8b:17:06:dd:43:33:22:7e:80:67:
60:a2:1d:41:61:9a:c2:22:4b:25:20:22:52:9f:84:eb:b9:47:
71:1d:f6:be:3f:89:ce:32:23:94:e3:9d:fd:6d:f8:9b:52:a4:
4f:41:cd:d3:c7:69:9b:04:5d:2b:b4:e7:55:98:1a:e5:f2:d7:
f1:13:eb:a3:2e:f6:d1:e1:1b:b4:82:3a:3b:97:7e:32:91:9e:
97:64:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:38 2025 by rpki-client