Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: 4hcuDFM0JSy5K2r7FRQkMYNR+mK10PHWixT1MKisrjU=
Subject key identifier: 3B:EE:60:C3:7F:90:16:72:D1:71:FB:8B:29:4F:58:61:45:7F:5E:BF
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 0198D54E6D883FC25757CC4F63E659A3FFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: TwOKnw4VGJv4z9c9p5o9N0QV6lpWMJeVcTfl0CFag50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6d:88:3f:c2:57:57:cc:4f:63:e6:59:a3:ff:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=3bee60c37f901672d171fb8b294f5861457f5ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:aa:d4:45:e4:1d:46:d0:9d:0d:1c:5f:3e:
e1:59:71:b9:d5:d3:58:3e:9e:14:ed:e8:87:16:f8:
25:05:a3:d4:42:5e:18:3c:8e:13:95:01:94:95:60:
f2:d4:7b:ad:3e:10:d9:fa:78:e1:1c:23:81:67:d2:
86:71:1c:ca:b0:70:41:bd:45:fc:69:5b:01:55:bd:
5e:37:c2:8a:0f:d2:c9:84:4a:5c:34:08:a5:46:e7:
84:e0:f4:41:9a:9f:4f:96:55:2c:9b:37:13:51:e5:
2e:71:d2:23:de:db:b7:a2:ad:a4:16:6f:d6:cf:fb:
a0:32:6b:aa:8d:54:d9:60:ca:a4:a8:6e:ab:71:93:
e2:4e:27:0d:2a:1c:0b:62:39:44:ae:d5:c9:3c:3b:
c9:b9:f3:f2:ca:c5:03:1c:a4:9c:ba:66:3b:35:0d:
6a:60:86:87:b0:83:c3:f1:72:a8:ac:42:1b:7e:75:
fc:2b:e3:44:b9:14:8b:88:59:30:f0:20:ae:49:63:
57:8d:b8:73:68:63:ef:dd:c2:04:ac:be:b8:fd:46:
b4:c9:73:68:73:88:10:31:c2:57:fb:8a:66:e6:91:
bf:7d:27:1f:03:8a:03:78:19:e1:5f:fe:f4:c9:75:
60:27:b4:a1:80:10:99:f5:9a:5e:c5:17:73:58:8a:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:60:C3:7F:90:16:72:D1:71:FB:8B:29:4F:58:61:45:7F:5E:BF
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:1a:55:e7:62:d8:a2:52:f8:a4:ce:22:b9:f3:b4:2d:8a:
a1:2e:8b:96:63:dc:ca:e3:79:c4:0a:3e:65:2a:ba:a2:42:72:
4c:ea:f3:3c:59:d4:a6:d9:bc:34:b0:f3:83:5b:64:9a:81:2c:
3d:62:e5:1e:10:70:28:e8:f4:3b:49:3a:ef:7d:b5:c1:d9:47:
40:b2:2c:95:4c:63:06:26:a5:11:4c:b7:70:4d:b4:bd:ac:20:
6d:fe:4e:80:83:c4:a5:13:a1:44:08:a1:13:c7:75:89:dc:db:
62:4c:e5:ac:dd:fd:6f:88:e8:07:dc:06:11:77:82:ee:bd:c0:
69:95:66:80:e1:cb:e9:52:08:c7:68:d7:2e:6f:4c:ff:8b:91:
e9:c5:82:f7:51:fc:b4:22:10:b3:fb:7c:99:ad:f0:e7:98:d8:
83:17:53:63:95:2e:1a:fb:9a:77:eb:60:8f:e7:b6:ec:2c:dd:
1e:80:3f:45:31:80:5e:ce:81:80:27:1d:a8:1e:28:13:41:47:
89:fb:50:2a:8e:7c:e9:a4:3d:a7:d1:90:59:00:60:e2:b9:da:
d6:39:98:5b:ac:8f:56:74:de:dd:97:b5:76:49:77:2e:e5:b5:
a4:42:ad:c2:5b:ab:5b:37:d6:0a:c3:c1:9f:33:81:be:3f:38:
97:75:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:22 2025 by rpki-client