Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier: +goLjaprYmK5oLYfMiz8b4tw6SYz2qqeSs2Tz35ZUrs=
Subject key identifier: 37:DC:F3:4A:3B:26:60:B6:16:94:14:CB:08:BB:05:44:43:3C:74:A6
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial: 0199FA69FB9B4DF01368A63D672A36CE3ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number: 7A
Signing time: Sun 19 Oct 2025 03:01:13 +0000
Manifest this update: Sun 19 Oct 2025 03:01:13 +0000
Manifest next update: Mon 20 Oct 2025 03:01:13 +0000
Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: TCnP9RMfggNdGGGBo0ar6Py4oJSQftJF0gFqCBapJmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:fb:9b:4d:f0:13:68:a6:3d:67:2a:36:ce:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Validity
Not Before: Oct 19 03:01:13 2025 GMT
Not After : Oct 20 03:01:13 2025 GMT
Subject: CN=37dcf34a3b2660b6169414cb08bb0544433c74a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:d0:a9:c0:ac:14:59:0c:3b:e4:5b:e9:c6:
fd:34:c8:80:87:4a:1d:2b:06:db:5f:35:cb:c7:c4:
6b:3e:ed:6b:e4:2e:5f:8a:e3:cd:a1:ab:71:bd:77:
52:b9:f5:10:51:d5:ef:97:7d:99:b8:9f:78:64:9d:
98:d3:95:01:16:9c:d1:09:70:3a:65:90:8d:25:79:
5c:3a:1a:2f:21:1a:29:ee:48:e7:b8:20:06:c0:d4:
52:90:30:14:1a:2e:68:86:03:ee:de:1a:ff:77:e5:
f4:af:c3:48:71:92:ed:2b:a0:0f:17:82:a2:a4:5e:
46:38:7b:4f:cd:c4:2d:53:e0:14:66:cd:15:28:22:
3a:6e:d9:61:20:62:d3:b1:41:50:7c:5b:6e:3f:c2:
aa:b6:1a:09:39:aa:ca:9c:b6:fb:89:35:50:24:0c:
18:a9:d5:32:a4:1b:59:28:15:19:46:63:73:43:06:
b8:f8:6c:65:51:ff:fe:eb:08:34:b6:38:7a:d4:0a:
b4:65:2e:e8:7b:63:db:53:b1:41:39:6d:69:eb:99:
52:74:b5:8d:c0:46:41:5d:48:cb:bc:35:b0:c4:67:
15:9f:a0:8c:24:43:7f:96:4e:4f:d6:88:15:fb:b9:
34:04:8f:8d:48:f8:f4:a7:e9:a1:83:73:ef:f3:93:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DC:F3:4A:3B:26:60:B6:16:94:14:CB:08:BB:05:44:43:3C:74:A6
X509v3 Authority Key Identifier:
keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:61:42:86:ed:03:e2:c0:98:5b:fd:9c:65:2e:27:f2:f6:
dd:cf:fa:e3:20:54:9e:53:b3:de:81:62:76:6b:95:d4:cc:be:
c2:e7:12:96:42:99:07:e3:49:ba:b4:07:0a:3f:b8:31:bb:a7:
42:8e:99:d0:22:93:b6:8f:92:f2:d5:a5:01:49:62:b7:6c:4f:
78:ca:b4:41:03:42:7a:29:e6:a0:19:5f:fd:ae:7e:5f:67:54:
54:11:e7:10:79:34:ef:0e:59:45:74:db:e5:f8:06:26:66:12:
c9:94:cb:48:9c:48:db:5b:01:f9:db:ee:96:85:82:68:6a:41:
eb:de:eb:31:8d:a6:7d:bd:4f:af:b8:93:3b:dc:21:54:85:0c:
7c:18:86:6b:23:ab:d9:9e:10:5c:f9:af:35:20:62:40:8f:4b:
f7:b4:92:bb:ad:65:36:30:87:66:77:f3:3f:5b:fa:0d:f7:ad:
31:5e:bd:75:9a:6c:b1:36:ad:20:1a:09:d1:91:d4:f2:0e:26:
00:9c:b2:54:fb:72:09:0b:7d:6f:d7:b0:de:6a:70:70:f5:64:
e6:a4:3d:a3:f9:f5:e2:2d:29:a9:90:5c:0b:c6:ca:29:2a:d9:
22:6b:5d:04:2b:d2:89:7c:70:1a:0d:18:6d:38:06:1d:7c:b3:
05:bf:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client