Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: Fbj3v5LxsfBeWz63VoP5lXXVMyZczztvqubCNpuY5k0=
Subject key identifier: 9F:F6:F7:5C:2C:9B:8A:AD:DE:DF:54:F6:65:F8:F7:39:0F:50:95:13
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 0198D404D1BD8CC278C663EC31943092673D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: A2
Signing time: Fri 22 Aug 2025 23:02:22 +0000
Manifest this update: Fri 22 Aug 2025 23:02:22 +0000
Manifest next update: Sat 23 Aug 2025 23:02:22 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: WCNtIaA44vJNchCeIVfxLkgfml2T8W0rHcgsm5mn4mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d1:bd:8c:c2:78:c6:63:ec:31:94:30:92:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Aug 22 23:02:22 2025 GMT
Not After : Aug 23 23:02:22 2025 GMT
Subject: CN=9ff6f75c2c9b8aaddedf54f665f8f7390f509513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:6a:5c:cc:6c:8a:98:89:c6:20:c0:29:56:
1f:fe:0c:61:6b:60:a8:5b:fb:89:d6:25:dd:d6:ae:
f3:cd:4f:da:ad:18:97:a7:26:d1:32:c8:9f:4d:4d:
c0:16:bb:a6:4d:5b:c3:df:e6:87:1e:f4:81:46:06:
bf:a1:47:90:ef:79:ed:9c:75:02:81:81:89:de:e1:
dd:d2:46:96:d7:07:6f:97:cd:dc:b5:9d:c4:f1:aa:
c6:be:50:ed:b6:c0:25:13:92:90:8d:8c:0d:4d:11:
8b:47:2a:ef:0b:9b:ca:c3:c9:ca:40:4d:8f:bb:90:
48:c8:64:94:3c:78:81:47:39:b2:32:cd:d8:ff:df:
70:cc:10:e1:a8:2d:b8:bb:40:36:6a:47:1d:75:c1:
b4:f1:be:a3:d8:72:32:5d:31:1d:81:54:a0:2f:cb:
5b:59:52:9c:9b:c3:d0:2c:10:92:94:0f:de:3b:6a:
96:7e:f0:08:5d:3b:ff:e4:99:c6:1d:0c:fc:93:d3:
e3:52:09:c6:ec:36:5e:5c:ea:d5:7f:cc:03:62:ab:
05:de:33:66:11:31:4c:61:45:c5:c3:9b:3a:87:7f:
30:a4:e6:5e:75:07:09:f5:de:dd:ea:77:b4:17:31:
0f:ed:8b:bb:09:ca:60:52:b3:7b:e4:4a:54:86:02:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:F7:5C:2C:9B:8A:AD:DE:DF:54:F6:65:F8:F7:39:0F:50:95:13
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:06:40:3d:dc:4f:cd:ad:1e:99:71:a3:7c:b5:2a:28:82:
f6:48:b3:e4:ab:6b:29:e6:9e:fd:e1:17:26:d1:2f:be:17:31:
95:5e:25:c7:7f:fd:69:c3:4a:18:5d:c6:ef:cc:f0:e9:b5:11:
b9:32:9e:ac:30:12:6f:f9:81:dd:ce:32:b3:f6:83:ff:9a:9b:
00:1c:d9:ca:3a:9a:3d:95:ae:f4:b8:86:32:67:ff:ca:b7:c5:
f7:df:a8:f9:ad:d2:f4:10:c6:82:57:3c:48:85:99:e7:7d:e3:
0d:0d:aa:33:df:16:fb:0c:bf:99:9d:28:04:9b:23:e7:94:b6:
56:2b:67:67:7a:61:95:d1:49:70:c1:73:be:fd:80:30:f4:6b:
a3:42:59:ef:01:af:e1:92:42:59:24:57:db:8f:0a:51:e0:61:
89:a0:79:8d:3f:49:b1:e3:da:76:47:89:e0:f5:9a:e2:59:4d:
c2:83:9e:89:4d:b2:42:00:4a:55:1e:ce:18:a4:34:55:0d:dd:
7c:f6:48:16:d5:6e:ad:b2:b8:6d:d4:a7:45:ed:a7:30:c4:83:
0d:93:d7:5e:22:fd:3a:78:03:f6:6e:13:cd:ae:53:91:0a:ff:
d4:d7:1f:42:ba:36:67:01:16:4c:82:32:18:2f:e3:19:34:5d:
01:94:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:03 2025 by rpki-client