Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: N+kXVCI2PwQqK/PEAFPj5THfT14QimGnlwRv5VXvRAU=
Subject key identifier: 82:C9:C9:E4:C1:B0:DC:95:F1:27:5F:69:09:CF:B9:A4:63:FD:CC:D8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 019A00359A7BE21911AD81E2ECD29C9800D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 0AD7
Signing time: Mon 20 Oct 2025 06:01:44 +0000
Manifest this update: Mon 20 Oct 2025 06:01:44 +0000
Manifest next update: Tue 21 Oct 2025 06:01:44 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: DQ3s7mXQRZGTm8cJo6lNGfZvE9d442EwgVd0VHXBJ3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:9a:7b:e2:19:11:ad:81:e2:ec:d2:9c:98:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: Oct 20 06:01:44 2025 GMT
Not After : Oct 21 06:01:44 2025 GMT
Subject: CN=82c9c9e4c1b0dc95f1275f6909cfb9a463fdccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a4:88:ea:a1:a8:f7:94:0a:28:fc:fb:dd:ee:
19:54:c9:e8:57:56:14:fd:5d:28:09:ee:25:84:ab:
f7:a8:ea:06:2f:ef:6e:2a:61:24:18:77:77:f4:60:
45:8b:be:a2:d7:96:01:9f:73:8f:a5:82:da:75:c5:
34:60:57:c6:e3:a9:2a:a0:5b:d9:d3:a3:a1:fa:2d:
83:29:4f:39:d6:ec:01:60:e6:cf:77:1e:d7:0c:27:
74:20:40:12:66:07:ca:83:49:f3:d2:5c:af:7d:59:
31:1f:95:c3:9e:84:65:30:7c:24:bf:96:b8:dd:66:
15:f0:95:4b:c9:82:88:e6:e6:7f:e3:9f:bf:01:99:
ce:73:e3:4f:f9:e1:0f:0f:e8:35:2e:ea:c8:37:67:
3d:bf:0a:de:a6:a5:36:b6:fb:cc:85:dd:d2:fe:33:
91:b6:9a:65:10:fc:43:b7:71:77:8f:5e:ba:c0:ee:
b7:3e:56:be:48:df:2e:3f:84:b5:35:70:85:bc:7a:
6a:c4:ce:8b:58:5f:24:36:36:cd:25:fb:4b:80:87:
93:0e:88:cd:54:1d:c2:de:21:30:81:54:15:46:0d:
ab:53:ee:09:2c:0f:5c:ca:e3:6f:7a:1c:3b:52:85:
40:72:4f:33:83:8e:8a:ca:26:76:aa:10:a2:dd:4c:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:C9:E4:C1:B0:DC:95:F1:27:5F:69:09:CF:B9:A4:63:FD:CC:D8
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:78:25:ef:30:11:80:a7:51:40:dc:69:b2:a8:39:24:5f:
3b:84:cb:b1:83:24:08:20:33:cb:9c:77:10:b5:e5:d0:ba:9e:
d0:8b:0a:6f:47:5f:af:8a:92:b3:f4:f2:cc:27:6d:ee:07:86:
45:57:8c:4b:9c:29:55:07:38:14:a2:5c:46:44:7d:93:2e:b2:
ba:28:ca:1b:a7:5e:74:14:7c:92:8c:9f:66:46:b2:05:b2:f9:
38:67:44:61:ec:46:8d:c6:1a:78:26:fd:99:0a:05:c6:a6:2e:
97:71:68:7d:5f:dc:f0:97:91:5a:85:4f:8f:9a:96:2d:90:74:
6c:37:7f:e4:17:54:ea:5d:b8:6c:28:0d:9d:fe:14:75:8e:94:
97:5f:29:eb:de:20:7e:83:4b:4f:6f:78:ae:77:f7:ac:0c:79:
02:7d:ef:79:56:7f:42:70:b1:d1:02:67:3c:f1:77:18:0e:c3:
8b:b9:3c:2c:a8:bc:39:8e:d2:f8:b6:6a:13:c0:9a:b8:f2:db:
34:16:c0:f3:ca:75:b9:21:4d:6c:af:3f:71:c0:0e:ba:9d:cc:
7d:e7:01:c1:fb:92:cf:54:ef:6e:4f:01:6a:97:cc:d1:cd:9c:
50:65:13:18:8f:8f:68:c0:a0:67:9a:b8:bb:56:19:06:7d:a9:
55:5c:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:47 2025 by rpki-client