Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: Kkx6xWdxyILzJPy1XEYRcyCvv5JwmBTVAaNjIqk0dBU=
Subject key identifier: 47:ED:D6:7B:91:38:93:13:16:23:60:B2:74:A7:AC:7E:49:D7:BC:42
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 0199FB7C9ADAF8E950D62EF6562159EE01EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0ACA
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: qi1p5CEc64KL4sLaHIxdU3Kfxgbe3Bnk+xfvcEDTRwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:da:f8:e9:50:d6:2e:f6:56:21:59:ee:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=47edd67b91389313162360b274a7ac7e49d7bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:dd:cb:96:f1:52:fa:bd:9c:db:4e:8f:73:
49:17:9e:32:c7:08:b9:d8:98:7f:9c:40:24:0d:d5:
3a:01:34:97:0b:74:77:46:51:1e:79:98:9c:32:f8:
fc:78:9a:3b:e6:58:d4:ae:72:98:82:c4:b3:61:b9:
f4:b8:de:79:97:69:51:f4:d6:32:3c:59:c9:c7:ca:
83:1b:34:fd:e1:d2:14:1b:da:18:a8:18:93:cb:25:
f9:2e:79:bd:ce:5a:22:c6:80:d5:1d:92:a3:00:bf:
3e:a4:3a:b6:36:48:ca:c4:65:2b:cf:a3:18:62:c4:
28:ad:24:07:0b:01:39:32:03:eb:83:34:c1:7c:b4:
a9:5b:7c:2a:6a:18:bb:c0:fd:50:37:6d:8d:ea:05:
7d:e1:cf:99:a2:67:30:98:13:de:c9:f9:39:98:3d:
e6:08:78:6f:eb:0c:a5:60:db:cd:41:76:20:4c:de:
4a:d5:8e:78:75:a0:56:31:54:14:a8:13:39:b0:2f:
5b:ba:b5:d8:fe:c7:41:b1:54:7d:00:4c:20:48:3d:
11:d7:5b:d8:b3:37:2c:09:fd:68:02:10:4f:56:57:
82:95:8d:03:28:22:92:dc:ff:ef:d1:a7:31:98:fd:
06:76:17:f5:cd:0f:1a:97:44:c3:f4:ca:e3:64:8d:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:ED:D6:7B:91:38:93:13:16:23:60:B2:74:A7:AC:7E:49:D7:BC:42
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:64:94:64:60:07:d1:a3:77:47:b1:4b:6d:6e:e8:1b:9a:
20:17:d0:ca:30:b7:fa:8f:e6:68:3a:28:e1:b6:9f:4b:df:cc:
24:5c:63:8d:0e:fa:22:68:53:f6:12:08:c5:52:57:20:a1:89:
27:fa:a3:a6:fc:28:f8:86:23:bd:5d:6a:22:75:8c:54:b0:23:
fc:12:62:c8:48:88:c8:21:5e:92:e3:e0:92:42:d3:df:8a:80:
6a:24:89:86:0c:34:cd:6e:86:ea:35:96:6e:ea:aa:cf:45:75:
e1:d5:6c:34:4a:a5:1b:ba:96:47:ad:f8:ba:fa:88:22:11:9a:
4b:3d:68:d7:2e:e8:9b:a0:90:9a:85:e8:a9:7f:1f:b1:aa:af:
75:30:01:9e:47:25:80:2d:61:98:4d:0b:2e:6f:e0:e4:c5:c4:
d3:8c:61:02:cd:99:97:9b:4a:33:35:2a:2d:45:88:49:71:9d:
a1:75:e5:2b:f5:f9:a5:77:cd:5b:0f:35:30:5b:49:19:2b:52:
10:e3:d7:3c:50:a5:48:a5:f3:6b:2b:24:31:e7:ea:5e:c6:e9:
79:68:9b:5e:e1:77:84:00:4e:6e:77:7e:4d:ce:f1:fe:88:52:
b5:9a:f3:e7:d3:5c:8f:e8:1d:0c:5a:1e:1e:75:91:6e:0d:5b:
e4:0c:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:50 2025 by rpki-client