Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: lebt9CxthhNnSv1Vt6BTJpLUOiBh6gXxxyulWjaJsH8=
Subject key identifier: 87:5D:6E:48:20:91:A9:CA:B2:DA:C0:E9:90:CB:AA:DF:BA:61:8D:97
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 0198D850AC0C76C1ABE1A2155042F0F5ABC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 06D2
Signing time: Sat 23 Aug 2025 19:03:42 +0000
Manifest this update: Sat 23 Aug 2025 19:03:42 +0000
Manifest next update: Sun 24 Aug 2025 19:03:42 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: DI9mG9Se7XKaz04/qxGBgaVRR0I6F+Bc4aDhJj8IDUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:ac:0c:76:c1:ab:e1:a2:15:50:42:f0:f5:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Aug 23 19:03:42 2025 GMT
Not After : Aug 24 19:03:42 2025 GMT
Subject: CN=875d6e482091a9cab2dac0e990cbaadfba618d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:2c:23:fd:8e:03:30:10:d9:a2:01:52:3c:
52:63:f1:fb:0c:da:c3:69:c1:2d:da:bb:cd:11:9c:
4b:17:3b:93:23:75:26:3a:55:30:4f:b8:6c:7c:c7:
09:5b:f2:4c:be:8b:6c:d1:e9:3b:29:8f:b1:af:0e:
c4:de:f5:73:80:19:dd:6f:97:b7:a6:f4:60:14:6a:
13:c3:f1:10:b8:c4:8b:f3:ff:1e:3c:1c:a7:ad:b3:
d7:1f:42:6d:47:4f:94:59:e3:ec:25:2a:68:29:24:
4d:bd:e6:99:15:4c:60:23:6e:83:a6:a4:93:14:56:
2d:71:a3:3f:21:7f:0e:02:7c:ad:78:8e:00:de:41:
24:ae:7e:4c:34:e5:75:dc:71:c1:ba:89:3d:30:6a:
36:8c:00:6f:ac:db:f8:f2:3c:a7:28:29:79:71:c2:
36:3d:54:f8:84:7a:ff:9d:7f:f4:ed:3c:0f:e7:13:
bd:bd:30:cc:5a:23:cf:bf:d7:7f:65:c7:33:b7:e9:
a3:d6:83:68:e6:64:28:64:e6:5e:c9:b2:8d:28:f4:
f7:ba:fd:e0:f4:8f:a5:84:98:da:c2:85:29:62:9a:
f0:d7:c1:12:13:b2:47:0b:b3:3f:ac:a1:4e:96:34:
23:17:57:11:54:9e:36:a5:2b:20:ad:c9:3a:15:b5:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:6E:48:20:91:A9:CA:B2:DA:C0:E9:90:CB:AA:DF:BA:61:8D:97
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:8d:75:76:c5:3c:4a:cd:89:bf:0b:4c:74:d9:ec:79:c0:
b6:1d:57:7e:94:c9:98:6f:38:d3:38:55:59:62:32:b3:7c:a0:
ec:a0:27:69:b4:4b:5d:74:5a:82:38:85:4d:34:18:62:bf:67:
97:bd:7f:1d:33:db:0f:bf:9c:0f:2a:7e:45:7f:22:78:fa:39:
aa:9a:ca:ed:09:20:fc:a0:2f:28:1b:42:48:84:f6:bc:1e:b3:
f0:42:77:97:e9:f7:12:c0:43:fb:ad:da:fd:a5:38:f2:3e:cd:
3f:37:dd:67:32:a5:0a:87:84:74:05:b8:81:f1:8e:a1:ba:0f:
ea:7a:d8:03:f9:56:27:fb:7b:f0:fd:92:ac:02:76:f5:23:55:
a8:fe:b4:79:85:c4:30:0a:0a:93:d1:2f:a6:d0:06:b5:1a:18:
7a:5f:c4:ba:11:64:af:a6:34:ad:b3:2b:76:86:16:5b:b5:6b:
0e:71:c2:09:4c:67:b0:5b:0f:2c:d3:e3:b3:b7:cb:f8:8b:fc:
7f:64:2e:36:6e:9b:ed:0f:c5:4a:d4:7d:1b:50:2a:98:3b:06:
1e:53:e8:9e:9e:2b:dd:86:c9:49:ff:8f:71:a1:57:3c:69:dd:
9e:5e:50:b4:f9:56:7f:6e:ee:0c:6c:8f:54:7c:87:d3:40:f7:
d7:2b:02:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUKwMdsGr4aIVUELw9avIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTcwZmM3NmNiODVmYTQ3NjA2ZDZjNTc0N2M5ZDRhMzg1
OTJiNjEwHhcNMjUwODIzMTkwMzQyWhcNMjUwODI0MTkwMzQyWjAzMTEwLwYDVQQD
Eyg4NzVkNmU0ODIwOTFhOWNhYjJkYWMwZTk5MGNiYWFkZmJhNjE4ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UgsI/2OAzAQ2aIBUjxSY/H7DNrD
acEt2rvNEZxLFzuTI3UmOlUwT7hsfMcJW/JMvots0ek7KY+xrw7E3vVzgBndb5e3
pvRgFGoTw/EQuMSL8/8ePBynrbPXH0JtR0+UWePsJSpoKSRNveaZFUxgI26DpqST
FFYtcaM/IX8OAnyteI4A3kEkrn5MNOV13HHBuok9MGo2jABvrNv48jynKCl5ccI2
PVT4hHr/nX/07TwP5xO9vTDMWiPPv9d/Zcczt+mj1oNo5mQoZOZeybKNKPT3uv3g
9I+lhJjawoUpYprw18ESE7JHC7M/rKFOljQjF1cRVJ42pSsgrck6FbW/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIddbkggkanKstrA6ZDLqt+6YY2XMB8GA1UdIwQY
MBaAFOoXD8dsuF+kdgbWxXR8nUo4WSthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUt
ZTgyODgxYjVlMmQ5LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUtZTgyODgxYjVlMmQ5
LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLqNdXbF
PErNib8LTHTZ7HnAth1XfpTJmG840zhVWWIys3yg7KAnabRLXXRagjiFTTQYYr9n
l71/HTPbD7+cDyp+RX8iePo5qprK7Qkg/KAvKBtCSIT2vB6z8EJ3l+n3EsBD+63a
/aU48j7NPzfdZzKlCoeEdAW4gfGOoboP6nrYA/lWJ/t78P2SrAJ29SNVqP60eYXE
MAoKk9EvptAGtRoYel/EuhFkr6Y0rbMrdoYWW7VrDnHCCUxnsFsPLNPjs7fL+Iv8
f2QuNm6b7Q/FStR9G1AqmDsGHlPonp4r3YbJSf+PcaFXPGndnl5QtPlWf27uDGyP
VHyH00D31ysC+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:24 2025 by rpki-client