Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: eFmbgEBuVMY/9ShJQyXvampL8NvV/6Cal2TxvwoPlSo=
Subject key identifier: 4F:06:F7:71:CF:88:58:1D:E2:5E:2E:F5:37:45:0F:FD:77:D6:C3:0B
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 019921B2478BA743C2A8806773FCE9A94396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 1151
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: LlrDxLntwhczfpONYs8z1bTNu++dRWUSws37GzoMuP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:47:8b:a7:43:c2:a8:80:67:73:fc:e9:a9:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=4f06f771cf88581de25e2ef537450ffd77d6c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:f4:d0:33:49:f2:fb:50:28:ad:b7:d6:7e:
c8:44:6d:85:94:5e:1d:ba:50:94:8a:b4:5d:e9:69:
fb:a7:89:d2:33:7b:b6:98:35:db:bf:0e:b8:07:75:
05:83:a6:59:17:2d:37:7f:86:c1:48:6f:09:dd:8b:
fb:ea:0c:32:2f:92:d6:5e:00:34:76:49:ef:b8:7a:
f3:00:7c:2b:9f:73:4f:8c:ba:09:a0:3a:c8:70:15:
ac:7c:21:64:87:de:06:69:1e:81:10:b6:df:67:cb:
6b:8d:fc:6f:d7:57:64:0a:f4:1e:0c:d8:cf:67:7d:
c8:3a:bc:c4:9a:64:14:f8:88:79:6b:07:79:13:4e:
97:6a:0d:4d:ab:e3:a2:8e:b7:e6:af:db:58:09:cb:
97:22:55:6c:14:4c:b0:22:aa:b3:10:4a:d4:67:24:
bc:71:36:9c:a2:61:ba:18:6d:cb:c1:90:bd:02:8e:
61:76:49:32:9e:b1:15:b4:39:9c:87:e8:f5:9d:62:
72:e3:44:d8:a7:53:97:2b:92:47:f4:f9:a3:62:20:
8e:e3:50:be:64:1c:2a:e3:16:49:0c:51:da:0a:ae:
43:0c:70:7a:3b:da:43:68:9f:aa:fc:87:6f:cc:c9:
7b:42:10:23:a6:2e:c4:82:c4:2b:16:1e:9f:29:04:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:F7:71:CF:88:58:1D:E2:5E:2E:F5:37:45:0F:FD:77:D6:C3:0B
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:75:57:5b:1a:ce:10:e4:42:8e:2c:91:1d:b1:82:3f:2d:
71:5d:19:0b:eb:e7:6c:a4:5b:0e:7f:90:38:7e:0f:42:bb:fe:
2a:ff:ad:32:16:ad:33:04:ed:1c:0c:c5:11:9b:2c:db:5f:4f:
87:61:3c:a4:de:c0:91:93:99:98:de:7e:06:39:30:f7:1f:4f:
e2:52:f3:e2:d7:ae:ff:43:a5:37:9e:c0:d6:ff:86:f5:3d:84:
78:62:46:c5:11:2a:40:c2:70:8c:12:49:6f:3c:16:71:19:19:
a2:03:79:12:ea:8e:59:51:07:34:a2:0d:f2:34:eb:9c:0b:b3:
d8:d1:5a:7c:cb:d8:34:27:c8:71:85:f8:bc:cc:b2:6d:0d:7d:
bb:be:2f:e5:2a:eb:88:25:e6:ae:f2:a3:b3:cb:26:14:27:98:
2c:e7:5a:96:ca:ff:b0:a7:d8:97:e4:7c:45:3b:58:b7:3a:5a:
65:ec:10:48:64:c4:2a:21:65:ff:14:8a:b4:8c:9c:3a:02:1c:
64:4a:73:23:cf:6d:fb:d6:aa:b7:54:f5:c1:33:3d:26:f9:51:
ef:62:79:ee:3e:53:15:d7:7c:a0:b9:59:47:82:01:ad:b8:d7:
a9:0a:16:47:56:e3:29:a3:12:c8:93:10:90:88:2c:a6:b5:f2:
2b:ad:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:32 2025 by rpki-client