Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File: 6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier: RKDvxx0WHPQvMx7adXMw8M1q3h4iJE139TmAjc4BO0M=
Subject key identifier: A5:D4:9B:A1:5D:14:A1:6D:8C:14:20:5C:D0:F7:DD:3D:38:42:28:97
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer: /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial: 0197B70F472AB45D7F79CDB61560007B2AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: YtlR8d1dnuVH8COeljWiPk20qaMCvdwVqE80fCCgBfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:47:2a:b4:5d:7f:79:cd:b6:15:60:00:7b:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=a5d49ba15d14a16d8c14205cd0f7dd3d38422897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:62:e1:ee:00:9f:25:df:25:51:e8:77:8c:
9b:ac:a0:ca:2a:dd:fe:31:65:b6:59:0b:72:e7:2e:
19:96:fc:17:60:bd:c6:2d:b8:90:4e:5c:df:ce:d9:
d6:f0:fd:12:88:92:e0:0e:79:75:fe:89:b7:3f:bb:
b8:b6:06:78:a2:cc:fa:7e:04:be:fe:79:d2:4d:9c:
27:d1:9d:27:b8:e2:54:20:78:45:8e:a4:6c:5b:a0:
f7:ba:0d:7f:bc:8d:ff:a3:80:e7:9a:00:d2:98:c0:
d2:27:87:39:a5:01:ae:e9:ab:a9:36:5c:54:bf:93:
39:86:36:af:1a:ed:3a:48:ed:46:e0:13:ac:d7:fb:
e5:d2:37:38:40:85:e7:90:c8:34:15:a4:66:14:1e:
6f:c6:29:78:ac:5c:65:5d:95:ac:65:e8:83:4e:11:
69:19:6e:3c:f6:55:cd:cf:05:44:e8:7f:70:ff:8b:
33:43:07:60:54:41:a2:34:d7:56:2e:ac:40:a3:98:
b4:48:d8:16:b2:df:b2:46:63:bc:22:af:32:03:af:
28:26:79:97:36:72:22:70:ef:03:c5:be:96:8f:de:
2d:da:d9:e2:8e:26:d1:b1:3f:b7:2d:c9:f0:46:24:
86:a1:8e:84:3e:bf:79:28:92:ab:f9:54:68:a5:f1:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:9B:A1:5D:14:A1:6D:8C:14:20:5C:D0:F7:DD:3D:38:42:28:97
X509v3 Authority Key Identifier:
keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:8a:80:d8:c3:3b:a4:19:a5:b1:24:41:b6:b3:66:27:29:
27:70:e6:dc:f7:70:a6:23:9d:dd:18:ea:c8:18:74:31:82:aa:
91:71:56:d0:f2:b7:73:16:d5:04:d1:e0:09:a6:5d:48:0f:ae:
b4:2f:5e:62:50:7c:07:6d:e3:27:b7:c5:76:05:e8:87:ec:66:
7b:09:6a:31:d6:a5:50:57:9c:f4:37:dc:09:8f:da:be:84:ca:
f5:7f:e3:8b:ec:f8:09:be:7b:09:cb:2e:f9:1a:53:d1:43:16:
0e:d2:0d:2c:ec:c6:57:10:70:b1:ac:b0:05:6b:f5:11:9a:91:
aa:8f:f1:81:aa:ff:20:89:0d:a4:8d:4d:9c:17:8c:7e:c0:fe:
5d:d8:be:f1:aa:c0:90:52:34:48:5e:64:a7:ea:74:bf:29:77:
59:ae:d5:8f:7c:e0:38:63:88:ab:a7:88:f9:ac:75:21:f8:7f:
ed:5d:97:00:4e:8f:1f:b8:78:09:77:a3:2c:31:63:3b:89:30:
53:d0:e1:fc:40:0d:0f:b1:0f:84:9f:b4:52:46:ef:2b:5e:88:
ae:b1:b4:7b:ea:0f:c7:9e:2c:53:70:0f:36:2e:c0:91:02:ed:
e4:7a:c2:16:3d:20:4a:f1:07:31:85:cc:0c:e6:e5:de:f8:fe:
02:83:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:32 2025 by rpki-client