Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: 5Ina5ikU1WoPqaqrFhHtSO7mNsmfzzq1NTuH5bI9bG0=
Subject key identifier: 34:4E:70:BB:97:2C:B6:19:9B:75:E7:E3:87:64:A5:DA:02:19:CB:9D
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 0198D4E01676090847E1845EFC6C1B952462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: h9uDtVHQZH4nQlKXFjU/k7ZOA2y75sS6kj2LyHctYLg=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:16:76:09:08:47:e1:84:5e:fc:6c:1b:95:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=344e70bb972cb6199b75e7e38764a5da0219cb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:3e:f0:0a:ff:4c:bb:8e:c8:de:d7:c4:8d:
14:7f:02:e3:3f:39:10:9b:ea:00:f7:ab:5b:d8:50:
cb:51:94:70:20:1b:c4:d0:a8:a3:63:da:ee:2d:7e:
62:59:cd:a8:c4:20:23:80:18:d8:23:c7:de:6d:d1:
6d:51:0c:f9:8c:a0:d7:1c:8a:dc:d0:34:cf:6d:9f:
9d:88:18:16:41:bf:2c:fd:6c:f6:8e:ef:c2:03:f2:
e2:15:4b:b0:3e:4c:57:d7:9d:b7:a5:de:8d:49:a9:
ca:d3:9a:e7:e6:1e:a0:78:c9:6c:6a:73:da:65:1a:
ed:23:bc:1a:39:9d:c1:cc:b2:99:18:c3:e5:17:92:
89:ad:13:94:d2:39:71:7d:4d:05:6a:72:00:95:50:
65:f5:8e:20:3e:0f:e1:55:65:41:ba:2f:96:89:c3:
ab:ae:7f:0d:34:1b:fe:74:b5:f2:94:d9:03:d4:fc:
a6:19:b1:e4:ff:b0:df:da:1e:02:21:c3:df:79:0a:
46:16:1d:25:8d:c6:7d:b8:0f:f5:19:27:b1:c2:6a:
82:6b:df:e3:02:1f:94:25:bb:95:30:68:a0:b6:86:
95:68:8a:b5:37:35:74:ef:07:54:ca:42:ec:3a:1b:
00:e6:e2:77:0b:5b:0e:52:f2:b5:8b:f3:ec:2d:05:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:70:BB:97:2C:B6:19:9B:75:E7:E3:87:64:A5:DA:02:19:CB:9D
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cc:38:ef:ee:30:6c:14:c4:05:2b:4b:d2:2b:a4:5b:9b:1b:
b7:66:4b:e6:6d:38:96:e7:ad:85:a9:73:4e:d2:53:c9:f2:22:
c6:83:07:d6:5f:ec:09:d9:50:ef:4d:50:3b:77:99:52:ea:24:
03:74:80:37:21:62:32:da:87:62:3b:12:0c:56:47:1a:ca:e1:
74:b0:e0:db:9d:2e:cb:76:d0:fe:ee:65:76:4a:5b:79:6a:84:
2a:d0:2d:eb:da:02:e9:66:8f:54:b7:65:5c:eb:52:26:bc:92:
3a:46:00:04:59:43:e6:f8:f9:b3:ed:0d:3f:b6:44:9a:af:93:
58:9c:db:e5:00:ee:47:b4:17:10:8d:ba:eb:d4:e6:bf:8e:7f:
63:2b:b6:bc:3d:93:08:6f:3a:e9:3b:76:d8:15:73:0e:43:af:
1a:d9:34:87:b2:2a:65:ca:a3:ef:01:7f:5a:e4:3e:ce:2b:53:
fb:b3:4d:32:8c:4e:83:ee:f7:9f:e5:a9:6f:d7:70:7d:fd:b8:
f5:7a:76:35:be:1f:80:e7:91:22:ad:24:a7:43:35:3c:a7:99:
be:f8:84:13:af:5b:4f:15:01:1e:10:af:cf:d9:3d:4b:e6:38:
90:89:51:3a:0b:f0:79:e7:00:22:bd:8c:8f:06:81:92:1e:d7:
92:a1:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:03 2025 by rpki-client