Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier: bBWYqo/cg+I43oafGlr/XAz0lGG6erncYcH9IErFY5w=
Subject key identifier: 4D:23:5A:EF:DD:3D:36:DF:71:95:32:3F:89:6D:93:71:BA:2F:3D:EB
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial: 0198D4DFECE82E798525616B2512E9AB4161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number: 0135
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: l0D5VcjLe4Sk9GRawrpvkJWM67hp71GJoE0RGjfN8fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ec:e8:2e:79:85:25:61:6b:25:12:e9:ab:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=4d235aefdd3d36df7195323f896d9371ba2f3deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:03:8f:c1:eb:e0:c5:01:54:e2:c8:ba:c8:
40:79:c5:ce:40:92:a4:5d:b7:1b:dc:88:42:4a:8b:
d1:df:f7:39:7d:33:81:81:13:06:65:95:7e:f5:c6:
60:98:0e:84:78:41:cf:3a:9c:c1:dd:85:32:c0:ed:
d8:96:af:67:e9:2d:c4:55:b0:f4:cb:cc:d0:34:1e:
50:19:37:e2:2e:69:78:f5:a0:28:5d:ea:cc:cd:b3:
99:03:c3:93:29:ef:d5:02:1e:01:39:0c:37:67:16:
25:de:c8:e8:f6:64:e4:89:19:78:ce:05:c4:54:60:
1c:a8:bb:a0:bd:5d:8b:a8:a0:1b:56:43:5c:b2:2c:
a1:11:7f:17:92:c6:90:b2:91:68:f2:e7:9b:9a:be:
6e:65:e0:2d:90:89:d7:b6:19:61:22:ae:91:d1:34:
13:00:f6:50:2d:a2:7c:fb:31:04:eb:88:6f:0b:49:
18:c6:b3:2d:6a:61:47:b6:42:16:19:d6:bb:67:6b:
c0:ba:db:29:cc:4b:36:c4:a0:f9:47:f1:a3:a0:d9:
f2:2c:6d:45:8b:c1:b0:53:4e:fe:e6:48:63:7a:5c:
9d:25:19:c1:c9:1e:fb:8f:ca:7d:62:92:13:cc:41:
ac:84:84:da:51:43:3a:20:3f:70:73:1f:52:15:e5:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:5A:EF:DD:3D:36:DF:71:95:32:3F:89:6D:93:71:BA:2F:3D:EB
X509v3 Authority Key Identifier:
keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:d2:cd:bc:36:9d:38:ba:ae:b4:1b:02:29:dd:17:7f:82:
a9:5a:d3:4c:18:b2:25:57:d7:5b:65:28:72:ec:65:df:8b:fe:
05:5e:1b:39:01:d9:d5:7a:a7:a6:70:2e:89:c3:02:ad:62:3b:
9d:af:9a:01:bc:8f:89:01:b7:0e:c2:1f:ae:63:5b:f1:95:9c:
aa:35:7d:1f:2d:21:a5:4d:1a:c9:1a:2d:99:0c:06:f1:fe:87:
a7:4a:78:bf:7a:44:30:8b:70:06:14:3d:03:89:5b:da:e6:f7:
19:36:8f:d0:5f:c2:2a:a8:1b:2c:99:33:53:dc:45:e0:e5:12:
b8:3c:4e:9f:fd:b0:0b:06:48:67:56:d6:c4:df:66:2f:64:13:
ba:2e:72:bb:b0:44:b0:d1:10:91:44:17:46:24:94:09:74:94:
94:6a:9e:71:2d:b2:ad:29:a0:ad:3b:49:43:e1:1a:be:e2:8a:
05:d2:45:08:c0:4a:dc:52:7d:cf:33:e7:57:94:9d:46:79:c7:
e4:de:e4:f9:81:c9:28:9b:1c:c4:5c:7d:ef:62:bb:bf:6a:7b:
3b:10:70:c7:ec:57:de:e1:a6:00:88:57:a3:35:70:70:ff:d7:
db:14:f5:b6:95:4a:c6:9a:4c:e4:f6:69:aa:39:43:fe:68:a2:
65:39:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:39 2025 by rpki-client