Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: uwMxTcLVJrrF7KKclxt/5uvv3VjoiUsasw31AdxKC4w=
Subject key identifier: 63:F3:F9:35:82:33:4B:04:D8:30:F7:83:51:08:4F:6E:DF:8A:64:4E
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 0199228CE9F8C4323CEE208C3FE21A57BC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 05:01:24 +0000
Manifest this update: Sun 07 Sep 2025 05:01:24 +0000
Manifest next update: Mon 08 Sep 2025 05:01:24 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: cddBwf1UbFu5ROueZ90cTLy5ZErBcSBJlmfJsp0NTqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e9:f8:c4:32:3c:ee:20:8c:3f:e2:1a:57:bc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Sep 7 05:01:24 2025 GMT
Not After : Sep 8 05:01:24 2025 GMT
Subject: CN=63f3f93582334b04d830f78351084f6edf8a644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:7d:f2:01:64:07:0c:fe:23:cf:ad:17:20:
11:aa:47:46:2e:23:27:e8:59:62:d5:4f:bb:a5:8b:
1e:11:5f:df:f6:98:97:2f:8b:07:a1:4a:c3:26:6e:
de:fd:bc:62:7e:23:04:8a:a0:a3:6a:8e:ba:de:63:
31:a0:47:26:8a:d1:fe:9b:1f:13:8f:be:86:80:60:
b4:06:c5:bc:0c:56:6a:4e:62:1c:50:00:d9:e8:28:
82:a9:13:0c:aa:8d:8d:b5:56:0e:67:51:79:68:40:
c9:31:a1:25:63:4b:eb:fd:42:0a:f2:03:18:e2:27:
70:99:79:af:66:3c:fe:5b:fd:92:4b:4d:df:90:0f:
f9:f2:fd:84:76:c1:e8:de:32:58:4c:6d:13:77:21:
bd:93:54:c9:2c:74:bd:d6:b4:66:58:ce:8c:f0:91:
77:24:7f:0b:69:f0:9d:73:d6:e8:41:f2:9d:33:50:
d7:08:4c:9a:39:d7:d5:07:5e:cf:6f:68:6e:3e:56:
7c:f3:cb:06:af:2e:10:7e:a3:a3:ec:2c:b5:cc:e9:
41:c1:54:8c:4b:af:d9:f4:a7:51:4e:91:f5:37:c6:
6c:da:fc:88:aa:59:88:ad:bb:53:29:fa:2c:22:7e:
8a:71:d4:4c:7c:e7:52:fb:0b:4f:66:fe:3b:2f:3e:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:F9:35:82:33:4B:04:D8:30:F7:83:51:08:4F:6E:DF:8A:64:4E
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:b9:09:35:29:8b:ad:bc:9d:f1:1f:34:a9:26:ca:87:f3:
63:16:0e:69:f5:34:f7:ff:14:4c:57:dc:cb:cc:a0:b9:01:8f:
c3:d0:7e:ac:0a:e1:fa:7e:70:74:01:46:01:ce:64:d7:25:19:
7b:65:e7:fe:5a:80:67:ae:11:76:7f:78:6e:16:b7:59:d4:57:
06:77:b5:3e:d3:5a:6c:7c:d7:8d:ad:2f:8b:fc:48:e1:d2:de:
13:9f:1b:1b:47:03:2e:27:c3:9a:24:e5:eb:db:ac:80:14:c2:
16:96:f7:11:79:39:22:66:2b:55:7f:bf:ee:7d:61:8a:2d:7d:
15:d6:f3:3b:6e:9c:67:56:44:e5:7c:bd:53:fb:2c:f1:97:d5:
1b:23:59:36:6e:f3:5d:be:48:f0:be:30:4a:0c:cd:e6:27:6a:
7b:79:c2:36:f0:f9:4f:60:67:c2:54:00:fb:44:4e:8c:6e:72:
cd:94:56:ef:f3:8f:5e:e8:c7:87:ed:b9:f5:cd:14:65:57:73:
de:9f:58:b1:1c:d7:3d:3d:fa:54:9d:e4:e3:2b:18:20:b6:8d:
e8:db:80:57:67:74:7b:d5:51:43:57:a6:f6:4b:c0:ee:26:07:
fb:5b:d8:86:d0:0d:fe:c0:c1:25:87:90:08:3e:19:07:59:9f:
1f:27:5f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOn4xDI87iCMP+IaV7wvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTBhNDAzNjY5YmVhYmYyYWQ3NmUwMDFjYjk3ZDE1ZDA3
ZTI5ZDkwHhcNMjUwOTA3MDUwMTI0WhcNMjUwOTA4MDUwMTI0WjAzMTEwLwYDVQQD
Eyg2M2YzZjkzNTgyMzM0YjA0ZDgzMGY3ODM1MTA4NGY2ZWRmOGE2NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3t98gFkBwz+I8+tFyARqkdGLiMn
6Fli1U+7pYseEV/f9piXL4sHoUrDJm7e/bxifiMEiqCjao663mMxoEcmitH+mx8T
j76GgGC0BsW8DFZqTmIcUADZ6CiCqRMMqo2NtVYOZ1F5aEDJMaElY0vr/UIK8gMY
4idwmXmvZjz+W/2SS03fkA/58v2EdsHo3jJYTG0TdyG9k1TJLHS91rRmWM6M8JF3
JH8LafCdc9boQfKdM1DXCEyaOdfVB17Pb2huPlZ888sGry4QfqOj7Cy1zOlBwVSM
S6/Z9KdRTpH1N8Zs2vyIqlmIrbtTKfosIn6KcdRMfOdS+wtPZv47Lz4jqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPz+TWCM0sE2DD3g1EIT27fimROMB8GA1UdIwQY
MBaAFOigpANmm+q/KtduABy5fRXQfinZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDIt
NmFlM2QwMDZjNjRjLzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDItNmFlM2QwMDZjNjRj
LzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXC5CTUp
i628nfEfNKkmyofzYxYOafU09/8UTFfcy8yguQGPw9B+rArh+n5wdAFGAc5k1yUZ
e2Xn/lqAZ64Rdn94bha3WdRXBne1PtNabHzXja0vi/xI4dLeE58bG0cDLifDmiTl
69usgBTCFpb3EXk5ImYrVX+/7n1hii19FdbzO26cZ1ZE5Xy9U/ss8ZfVGyNZNm7z
Xb5I8L4wSgzN5idqe3nCNvD5T2BnwlQA+0ROjG5yzZRW7/OPXujHh+259c0UZVdz
3p9YsRzXPT36VJ3k4ysYILaN6NuAV2d0e9VRQ1em9kvA7iYH+1vYhtAN/sDBJYeQ
CD4ZB1mfHydfEQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client