
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: cfSaZDyRTUET6dx70nhah+dav/0DzIpFRl5xi1RN7zE=
Subject key identifier: C9:AF:22:3A:11:6C:0F:F7:77:F6:E5:16:CD:96:CD:13:BB:D7:D8:90
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019828233FDEBC81CD9354C23C8A7FD57A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 49
Signing time: Sun 20 Jul 2025 14:00:55 +0000
Manifest this update: Sun 20 Jul 2025 14:00:55 +0000
Manifest next update: Mon 21 Jul 2025 14:00:55 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: bjdpkO4tR8goNvFPwu4Gu8DbT8LJ+18CInvzdsNeb3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:3f:de:bc:81:cd:93:54:c2:3c:8a:7f:d5:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Jul 20 14:00:55 2025 GMT
Not After : Jul 21 14:00:55 2025 GMT
Subject: CN=c9af223a116c0ff777f6e516cd96cd13bbd7d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:47:13:08:16:3b:0e:87:7f:17:35:00:29:
09:c5:15:2d:4a:71:a3:a9:d9:24:84:78:60:94:d3:
54:a7:81:0a:8b:5b:b4:88:ad:31:28:55:39:9b:a7:
06:ca:10:b9:f0:78:98:4a:08:58:3e:65:eb:37:b2:
2a:bb:ee:14:af:16:4f:44:eb:04:62:13:df:fe:47:
cd:2f:ba:9f:2e:a6:e4:33:c7:c4:96:1b:69:c4:d9:
d8:7d:7a:fe:eb:88:1b:26:71:f2:d0:3b:39:42:92:
37:db:dd:11:96:e8:30:03:22:e6:cc:7c:a1:16:31:
12:5f:d9:8c:26:e1:3d:2a:ec:76:08:cb:73:f2:d3:
a8:3c:50:78:75:4d:c9:70:cc:66:cc:57:93:75:1b:
e8:3f:77:d3:4c:28:f0:54:b2:c6:c4:0c:08:30:71:
f2:02:52:90:10:aa:96:e8:6f:8f:12:af:8a:d5:0f:
02:11:a7:8e:c7:be:c3:b7:0b:9a:c0:7b:c7:a2:7b:
77:c6:33:4e:fc:00:02:76:58:70:0e:a4:69:65:d9:
49:8d:d1:19:4c:5f:e2:72:c5:97:1c:a5:25:93:c6:
4c:ff:cb:e2:55:40:23:1f:35:42:c9:1d:de:44:71:
a5:20:9e:b2:62:e1:7f:e5:13:45:19:ef:11:a2:42:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:22:3A:11:6C:0F:F7:77:F6:E5:16:CD:96:CD:13:BB:D7:D8:90
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:79:f9:4a:2e:6f:e4:a1:bd:2f:3c:ce:18:6a:10:b1:b7:62:
43:5d:9c:93:43:65:b0:af:27:9c:72:d3:96:14:9d:db:66:0a:
0b:2f:34:24:c4:2a:ea:6e:26:41:5f:9b:e3:3a:32:42:33:c0:
4d:00:15:36:9d:ec:8f:43:77:20:1b:57:4b:de:50:a3:ae:8b:
64:7c:b3:a5:64:42:15:1c:96:11:e6:83:21:a2:1c:06:1c:03:
76:24:a0:ec:4e:1e:61:11:23:55:49:06:96:6c:90:44:f7:51:
d3:27:57:10:1d:62:bf:88:9f:ca:02:52:08:55:51:5e:3f:29:
c3:bf:fd:85:82:28:74:fe:39:37:d1:6a:fb:18:28:fa:b0:16:
a5:1c:8b:00:e3:36:97:e4:3d:8a:15:99:3b:26:a1:5a:ea:65:
18:d6:73:30:bb:8d:15:00:95:ee:22:25:2d:22:3a:dd:25:41:
e4:9c:64:7e:9c:60:cc:aa:f9:f4:ef:c4:90:86:50:12:c0:8b:
b3:6c:83:23:14:2d:c3:26:15:3d:10:97:c5:ad:66:68:2c:05:
b6:18:0f:f1:07:09:e5:f9:13:ff:30:6a:44:50:76:e4:fc:e8:
48:84:06:d1:3b:19:bd:b1:84:1f:ef:fc:e3:3c:66:c8:b6:d0:
6f:37:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:21 2025 by rpki-client