Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: bD9iijR61tGANGBGjeSZmvBY30vekXwTk5UCkqXRzxs=
Subject key identifier: DB:33:EE:FC:7A:F7:66:65:09:68:7B:00:66:55:2C:60:28:05:1D:D3
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 0198D515C08DB48D5FBA6A07981FF5AF285C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 14FC
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: BS+8mO/CvaJSdP8+4fNz5FCjEVNeWtm0W6gu4dgIxeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c0:8d:b4:8d:5f:ba:6a:07:98:1f:f5:af:28:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=db33eefc7af7666509687b0066552c6028051dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:e3:8e:7f:01:bf:43:bb:c7:94:40:36:2f:
34:ff:7f:f9:a8:b0:08:c5:44:81:04:20:75:27:5c:
17:59:30:98:4c:87:87:cd:81:12:64:0c:f6:09:68:
e7:c9:19:c2:42:70:eb:84:86:bf:d6:cf:c8:f0:a1:
64:73:e8:4d:e7:8d:7f:e0:cb:59:1f:3e:3c:24:20:
07:73:dc:bb:ec:d1:af:c6:03:cb:58:db:3f:b7:62:
3d:65:e4:6b:cf:a3:dd:5a:96:ab:da:99:a2:a1:ad:
06:e0:dd:81:a3:24:0b:d0:d4:cb:6d:80:3e:73:b6:
29:ef:28:b0:80:6a:bb:74:ef:59:4f:5d:b0:26:5c:
45:40:89:14:af:62:3f:7f:d6:bc:41:0a:eb:9e:db:
d9:54:ca:0f:ab:73:94:74:42:7d:22:72:c3:ab:31:
fb:44:23:cc:4f:65:38:c9:8b:1c:a2:40:e0:b3:55:
0a:13:f2:83:ab:14:36:38:fb:a9:0f:2a:96:f1:6e:
c2:38:95:1a:b7:50:5b:7e:1c:d8:81:1c:ba:ff:d0:
3c:1d:a2:39:ad:d2:a3:74:52:6f:4b:7f:14:58:38:
bd:6b:28:53:02:41:ff:fa:4e:4b:61:98:21:5c:cc:
3f:d3:dd:67:71:cd:ba:5a:60:bb:40:17:7b:90:65:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:EE:FC:7A:F7:66:65:09:68:7B:00:66:55:2C:60:28:05:1D:D3
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:3b:3f:02:82:59:38:5d:a4:53:4f:01:33:2d:b7:45:9a:
69:77:ad:be:03:bc:8b:ca:06:fc:60:41:9e:95:c8:76:b0:ea:
c2:59:3a:91:4a:bc:05:51:3c:0f:8e:c2:c7:69:77:8b:d2:c7:
bd:29:4e:61:32:b9:46:39:59:c0:65:4f:4f:cd:54:17:8b:13:
4a:fa:4c:e2:fc:b3:ea:db:06:03:2e:2c:08:2c:09:79:b2:9e:
a3:55:05:2d:b2:88:ad:f9:ae:9e:ca:34:ea:1a:5b:1d:2b:9e:
bd:b8:bc:d0:de:44:fd:5b:0e:fe:fd:90:03:5a:5d:ce:ef:cb:
8a:44:06:4d:4f:09:5e:9d:75:21:c6:f5:6d:3c:56:d8:a2:24:
5d:64:2d:34:fc:e1:fa:5b:d4:65:d5:e8:2f:83:db:e9:ac:6d:
5c:09:9a:13:09:36:46:90:ad:ff:c5:6d:b1:62:41:62:af:7e:
9a:1c:a8:2b:cc:40:b9:75:75:b0:98:6a:c4:8a:a4:3a:fb:9a:
c2:e4:d0:8c:ff:3e:05:81:2c:59:1e:e9:fd:70:d8:e8:c7:78:
3b:d5:a2:ca:ce:3f:fc:3c:8e:4c:fb:60:02:68:8e:80:4f:b3:
ea:67:e1:de:52:2c:2a:f7:31:a8:11:2b:b8:69:a7:44:02:33:
a1:d6:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:08 2025 by rpki-client