Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: H7AhO1S8/iJX7X1dlJSkliA3W42FBrgBjh3wffpOsRo=
Subject key identifier: 29:98:0E:93:58:68:F1:7A:64:74:A3:F2:5A:29:15:49:81:54:C9:73
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 0198D5BBABC1F46F541220663A2B637E559D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0521
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: OT0pCeu5BSOxK6YiajAraOTN0i0gipy3bpgNLgsXS2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ab:c1:f4:6f:54:12:20:66:3a:2b:63:7e:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=29980e935868f17a6474a3f25a2915498154c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:a7:0d:b5:13:53:56:36:32:e1:0c:ca:f0:
c3:df:54:48:fd:4c:a1:d0:36:63:6e:15:f8:2a:50:
76:da:43:60:b2:dd:5c:f2:69:bf:b6:2b:77:31:d5:
67:ac:0b:c6:26:06:ca:24:a8:41:2e:8b:06:40:5c:
ba:b6:23:49:e2:ec:70:b9:12:d3:63:36:6c:ac:11:
f2:4b:de:90:31:8f:59:93:af:fc:45:9a:a1:9b:94:
e0:d4:d8:2a:63:d0:f7:60:fa:19:e2:f3:ed:51:79:
ab:f3:92:f1:c9:15:79:50:18:73:d1:e3:7b:36:82:
e6:d9:da:2b:c6:68:5c:74:50:9e:13:a0:f8:0f:0e:
32:cd:40:31:bd:20:71:bb:72:3b:09:c4:8e:65:25:
ef:d9:bb:1e:3a:f1:70:7e:fe:4f:d8:42:e7:98:e5:
40:c9:a5:2e:3b:36:7d:9a:a0:b0:a7:2d:0b:0a:d4:
49:11:a5:95:f1:0e:c9:51:ce:ce:fc:c5:fe:20:12:
2a:21:32:14:82:72:09:0a:b8:39:42:7d:6a:31:0b:
db:2f:3e:01:52:8c:ba:c0:9b:73:68:c8:6f:24:7a:
72:20:50:27:32:96:01:4f:b6:f7:35:66:a4:08:a7:
e9:3d:d3:e5:3c:a4:fe:9e:18:8d:41:47:67:b1:c6:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:0E:93:58:68:F1:7A:64:74:A3:F2:5A:29:15:49:81:54:C9:73
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:df:9a:52:57:16:ce:a8:12:db:3a:92:eb:1b:22:9e:16:
f1:ae:92:89:a1:d9:04:74:df:3f:93:a3:54:12:7b:4e:32:fc:
50:ee:f0:3d:9f:c9:d7:1c:3d:bf:c2:28:91:dd:64:60:5a:7f:
7c:ed:f9:7b:2c:19:19:0a:0b:a3:02:92:54:78:4a:03:9b:64:
fb:a9:a4:29:25:12:ca:4f:b9:b4:d5:ef:f6:22:ea:dc:1e:77:
7f:ce:fa:11:c6:01:30:fc:e6:64:8e:d0:0a:4d:5f:71:05:0a:
1c:80:a1:1f:3b:6a:83:09:84:24:63:b3:62:a6:d5:39:af:73:
0f:41:f2:53:c2:ba:da:54:67:7e:dd:f5:13:08:e2:35:2b:7b:
25:76:ff:cf:73:ed:9a:b6:08:de:5f:ca:94:2f:53:4b:ac:c5:
5d:3b:84:6d:ab:54:3a:a1:e4:54:c1:8e:d1:27:7e:f0:24:2c:
15:cf:e3:fb:3f:e5:56:75:3b:0d:1e:f2:2a:bc:ef:79:2a:1a:
ba:d2:53:de:09:5d:86:b7:01:84:76:43:bf:ad:03:05:3e:9e:
fa:98:ac:7c:f9:f7:91:26:7c:e7:31:6a:de:46:34:9c:22:d4:
80:90:d9:02:85:c0:75:a5:a6:82:c6:76:ef:8d:8e:07:aa:4a:
99:e4:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client