Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File: 6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier: DEdm0RX3DuhI7UCyWicI6Sg/mXfDl5gVg0C+h8i6ipg=
Subject key identifier: BF:28:21:77:E5:6E:65:5F:C7:9E:8B:A1:5A:8A:52:8D:75:2B:4D:6C
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer: /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial: 0198D8504D04B0F819BF12DCF08053DDDE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number: 053D
Signing time: Sat 23 Aug 2025 19:03:17 +0000
Manifest this update: Sat 23 Aug 2025 19:03:17 +0000
Manifest next update: Sun 24 Aug 2025 19:03:17 +0000
Files and hashes: 1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: L/XLdgUf/RlpXWZJfQBcMr/AU2whiJJAKTPBqQdSKcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:4d:04:b0:f8:19:bf:12:dc:f0:80:53:dd:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Validity
Not Before: Aug 23 19:03:17 2025 GMT
Not After : Aug 24 19:03:17 2025 GMT
Subject: CN=bf282177e56e655fc79e8ba15a8a528d752b4d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:fe:34:1e:75:bd:29:a7:a1:03:1a:3d:53:
69:46:74:8a:c5:d2:0d:5a:cf:d9:b0:31:e8:e3:f2:
66:c4:38:f3:8f:ab:f2:2c:5e:8e:56:a0:48:a3:20:
d7:bd:96:0c:7b:47:72:f6:5e:ca:38:ae:5c:21:a7:
9b:13:2d:ed:66:2e:15:90:c5:d4:d9:c4:db:52:d0:
48:bd:05:6e:43:98:ea:be:2e:b6:16:be:81:03:3e:
d1:23:3c:ab:ec:3a:41:8f:59:d5:ed:31:3b:0b:4f:
28:1a:11:bd:fb:d3:c8:de:ba:84:45:96:c0:9a:a4:
27:a7:76:37:ff:bb:08:44:fc:89:31:75:d1:41:cd:
5b:16:16:65:66:63:0e:f9:9b:bf:73:e8:4e:54:77:
9e:7d:a9:af:f4:f2:31:d1:da:39:db:15:f2:5f:1f:
db:05:47:36:f9:19:a7:99:fb:ff:86:b9:84:b3:e1:
b4:31:03:88:3c:e2:59:b0:bb:a3:f7:9b:3e:65:75:
3d:cb:0f:60:76:47:5e:e5:bf:8a:b5:2b:ce:f7:37:
35:d3:df:ac:1a:ce:a4:9c:99:a8:28:c0:eb:89:f3:
2f:43:0d:10:9a:20:36:1b:23:ad:20:fa:89:20:7a:
93:05:ed:be:bf:30:56:94:d8:b8:b1:b4:8c:9a:ca:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:21:77:E5:6E:65:5F:C7:9E:8B:A1:5A:8A:52:8D:75:2B:4D:6C
X509v3 Authority Key Identifier:
keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:85:fc:d6:39:a1:0f:4d:22:35:ed:da:37:80:ee:55:ce:ae:
9f:6a:18:b2:0e:ff:11:bf:8c:5f:ca:cf:04:15:b5:c2:1b:68:
74:7c:07:ec:51:67:74:d1:65:b2:e1:46:2d:5f:9f:4c:fc:74:
31:5e:ef:00:2e:ca:e1:52:5e:e9:36:94:28:e8:9d:3a:53:b8:
7e:6b:8c:a8:8c:4b:35:00:57:fb:c5:11:bc:5e:aa:61:20:23:
82:9f:c7:30:50:51:3f:eb:b2:01:a1:68:f2:4c:84:92:34:7e:
eb:e8:05:78:24:ff:6e:f4:b3:96:62:80:bc:1a:56:cc:20:29:
0c:16:94:b5:59:4d:91:6e:26:5c:09:d4:4a:e1:01:22:0d:5e:
6f:e5:e8:31:05:3c:43:6b:14:46:3a:c1:74:9c:5b:49:bb:2b:
da:48:c7:12:2b:91:ac:76:81:76:e7:b1:02:33:2b:04:10:43:
c1:4f:55:58:c4:83:1d:ca:40:ab:e1:4d:74:36:1b:c2:08:dd:
d5:45:30:c7:73:c8:be:db:28:31:e1:90:5f:09:c5:9b:6d:27:
07:51:e1:aa:d1:8c:03:b1:7e:1e:4a:3e:f2:c9:e2:5a:6f:aa:
0a:1c:cb:10:6c:44:c7:64:b0:ee:41:94:e9:97:a1:f5:36:24:
3b:65:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:57 2025 by rpki-client