Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: BJWfv4kQMShdV5rIzgy5Cs8VQnkfBlo/MdOWxBGCFQ4=
Subject key identifier: 8A:77:FE:98:B1:02:5E:A8:38:F5:D2:D1:58:BF:E0:8C:DE:23:27:23
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 0198496717272BD50CA104AFE4A718B46181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 0E28
Signing time: Sun 27 Jul 2025 01:02:29 +0000
Manifest this update: Sun 27 Jul 2025 01:02:29 +0000
Manifest next update: Mon 28 Jul 2025 01:02:29 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: Kc8seZim/XukD93DTQIqAzyKwBDYav2MpGm5TBOqb8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:67:17:27:2b:d5:0c:a1:04:af:e4:a7:18:b4:61:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Jul 27 01:02:29 2025 GMT
Not After : Jul 28 01:02:29 2025 GMT
Subject: CN=8a77fe98b1025ea838f5d2d158bfe08cde232723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:aa:20:9b:99:bd:4b:2a:8e:35:a3:b8:a9:
b0:b5:64:1b:fe:20:24:ea:bd:ed:67:94:b9:68:90:
73:f3:4c:03:14:30:5d:8b:d6:6f:d7:1b:62:9d:52:
9b:76:eb:fa:80:bb:dc:2e:bd:c9:5c:48:db:a7:1b:
d7:e9:04:23:89:de:71:5e:2d:5b:89:d8:ba:07:e5:
2c:a4:55:16:53:9c:cf:bf:bd:80:73:5b:d4:3c:c7:
b6:ae:85:ab:40:11:b1:3c:e2:a2:79:7b:a1:63:5b:
1a:79:dc:c4:fd:58:58:18:25:6d:3f:c2:07:72:62:
12:39:f7:35:fa:ee:45:e3:7f:df:5d:90:c9:32:16:
4f:a6:11:7e:6d:6b:e9:6b:26:41:74:47:e9:7c:c9:
5c:4d:d8:38:7c:81:c8:a7:85:cc:aa:e7:de:f2:69:
30:2c:57:19:b7:e3:25:77:94:99:f2:8c:b6:0a:a1:
61:6b:25:b5:4e:ba:ea:3c:3a:4b:e0:c8:3a:fd:d6:
c8:a1:05:eb:88:ec:c2:38:64:6b:91:2c:a8:57:22:
95:c7:32:c9:11:dd:14:15:85:78:85:f9:f5:c5:74:
c8:5b:c4:49:40:4d:74:f9:84:e3:85:5d:04:72:79:
03:23:23:26:15:55:1b:67:ee:ea:40:29:f9:6a:ee:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:FE:98:B1:02:5E:A8:38:F5:D2:D1:58:BF:E0:8C:DE:23:27:23
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:45:5c:f0:56:b3:e9:b2:69:03:83:76:b0:14:01:c4:84:76:
eb:45:72:46:d8:5a:58:de:0b:73:91:3d:91:82:91:76:72:37:
20:34:66:56:17:6a:77:0f:40:e9:00:05:b2:a1:03:af:7a:77:
d5:00:8f:83:10:bb:ac:cb:2b:cf:5f:d2:7a:e0:10:78:f9:25:
8e:85:bb:35:c9:57:aa:35:3a:8f:43:b0:33:17:b6:1b:14:8c:
b8:4d:d7:e9:4a:87:1d:c7:46:cb:a7:51:93:6f:b4:0c:fa:36:
3c:e5:da:23:ea:65:6a:86:ed:61:ad:c9:ac:f1:af:1b:53:64:
69:ec:44:94:18:f6:c5:de:9d:fb:fc:8a:b8:15:42:55:1f:ea:
08:b8:9f:bc:f0:d2:e5:51:52:6d:bb:26:d0:04:0e:44:b7:4f:
95:9a:46:d2:bd:fc:8d:5f:d5:78:21:96:2a:66:75:67:a2:53:
45:87:36:e6:9b:b2:f7:40:e0:6b:92:2a:27:96:57:f5:22:48:
17:fd:9c:7f:de:b2:ec:5b:31:78:b9:36:20:af:15:54:fc:22:
da:2f:a9:a5:b6:e5:e9:92:9f:b1:e1:bb:98:9c:a5:c5:75:27:
0c:08:22:b6:c3:a4:70:41:65:c9:e2:6d:97:8e:d2:09:ca:05:
89:69:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:50 2025 by rpki-client