Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: 1vyLTPaFeEteirgHnwCxiQyU+QLexfOcFAwnkSYJqBA=
Subject key identifier: 56:8D:8E:B9:3B:D8:4A:58:07:81:51:7A:89:D5:67:D1:7D:46:46:73
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 0198D705A832B28C7C3E816EEF32F7CE3905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: lxsL1c5eioE1XcfOGVKahc6ZJz1nEdtgwReKX5e40M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a8:32:b2:8c:7c:3e:81:6e:ef:32:f7:ce:39:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=568d8eb93bd84a580781517a89d567d17d464673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:9c:85:44:ad:e3:1b:b0:e1:ab:73:0a:81:
7e:ec:d8:f3:06:44:ca:d3:65:81:03:2f:13:08:09:
65:9e:ba:cb:dd:20:7a:55:40:91:e6:80:48:43:2f:
4c:3a:c9:dc:27:67:fd:51:93:51:0a:93:a0:a0:3b:
da:9c:70:3c:59:64:7d:58:a4:06:22:c1:64:30:1e:
eb:e3:fd:19:84:fe:0b:e7:6e:2f:4d:c2:a9:32:fb:
9f:2c:69:44:4c:77:61:d9:3b:05:09:1a:b2:ab:30:
09:01:33:8b:be:3e:12:32:d7:cf:60:32:e7:2a:26:
6a:1c:5a:65:76:8f:e9:21:6c:62:6a:68:fd:4b:39:
13:27:e9:15:6c:d0:e5:62:a0:f1:d9:c3:0d:14:27:
e5:a2:e2:39:62:8c:3a:94:4f:20:20:e1:66:cb:f6:
b0:46:dd:57:22:73:dc:bf:2a:8d:d8:c5:bf:d3:06:
52:ba:11:2a:76:51:51:95:14:49:86:82:30:36:60:
77:54:b3:0d:5e:80:0a:82:83:b5:35:c5:bf:0e:c2:
f6:30:17:99:b5:2b:e8:34:fa:a9:e6:f5:87:61:f6:
74:ab:ec:79:7d:f1:92:04:42:e9:ee:26:df:27:4a:
fc:40:d1:7a:45:cb:74:de:56:bf:13:d6:b6:75:91:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:8E:B9:3B:D8:4A:58:07:81:51:7A:89:D5:67:D1:7D:46:46:73
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:57:d5:df:90:7b:d0:43:72:78:ec:cf:ad:cd:07:5c:d0:a4:
e6:13:08:6a:53:65:97:d8:78:7a:6e:f8:f0:85:2b:96:be:04:
7a:e7:3e:01:0d:3f:07:e8:91:93:0e:4e:cf:3c:81:6e:49:65:
53:75:94:4a:1c:ba:53:6b:eb:b9:17:4a:49:41:8a:a4:a5:9a:
5f:12:67:2a:ab:d8:04:a7:48:be:15:79:51:29:74:3d:f4:3d:
0e:c1:f4:00:af:4d:91:e4:8b:7d:47:6f:1c:b6:de:f4:ab:95:
d7:08:db:b5:8a:a9:37:07:81:4f:bc:8d:24:70:a9:f5:63:b6:
50:f2:f1:e0:5f:be:d8:a5:2b:ba:a8:33:16:ad:89:a2:80:09:
85:eb:94:a5:75:17:b3:3f:92:40:76:fa:04:32:bc:09:e7:2c:
d9:0f:08:81:95:85:c4:91:a3:48:d9:ed:5c:31:de:f2:88:5a:
cc:2d:a0:3d:96:f8:39:0e:ac:66:e5:2c:ee:a4:f4:e6:0e:3e:
4b:a2:2f:52:48:f7:bc:d8:e2:6c:d5:16:b2:ce:41:5f:85:be:
4a:e2:ec:6a:0e:94:46:16:29:e2:dc:21:79:1f:5d:40:e3:90:
d2:96:fc:df:fa:1e:2f:6a:21:20:7a:d2:e1:8a:cc:0c:10:15:
8f:70:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:19:45 2025 by rpki-client