Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: HXCBzxoxD+B8EiPJx+4NYfcF0QelfCXq+utf+3ri4eU=
Subject key identifier: 44:44:91:4D:B9:D7:36:9A:87:39:D1:5F:89:68:8C:D9:E4:BB:E6:53
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 0197488C5DDB4D250CCA3E03554D652BEE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 08AE
Signing time: Sat 07 Jun 2025 04:00:47 +0000
Manifest this update: Sat 07 Jun 2025 04:00:47 +0000
Manifest next update: Sun 08 Jun 2025 04:00:47 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: Y19LqBAJZArQtPx/WgMJASK2cN/rGKl+PiJmB1NA9DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5d:db:4d:25:0c:ca:3e:03:55:4d:65:2b:ee:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Jun 7 04:00:47 2025 GMT
Not After : Jun 8 04:00:47 2025 GMT
Subject: CN=4444914db9d7369a8739d15f89688cd9e4bbe653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:83:3f:6b:af:5b:93:c8:7c:b9:60:e6:fa:
3b:d7:46:e6:2a:49:21:e0:15:6b:0c:d6:a9:61:f3:
7f:5e:b4:3b:91:dd:70:65:42:b5:59:4c:e7:68:6f:
24:97:66:72:ed:88:78:18:42:15:26:a3:5c:11:0f:
6f:4e:ab:61:a2:96:51:79:81:81:1c:3c:4c:dc:be:
27:81:de:82:4c:e8:70:4e:21:f7:e2:e9:fd:c9:21:
78:fa:14:4f:c6:19:7e:14:fe:5b:2c:96:51:fb:96:
89:21:22:e4:83:ab:9e:2a:18:76:38:7d:94:a0:db:
2f:62:db:bc:45:29:cf:22:5c:51:5f:03:80:70:ee:
63:f1:77:af:b5:46:64:b6:1b:f2:7a:28:0a:f5:81:
0a:76:40:94:0c:98:46:59:61:c7:2f:0e:08:79:d2:
09:73:6c:8d:82:4a:0c:c7:9b:c0:6d:89:07:89:ae:
61:22:9d:4c:8f:ee:dc:fa:b4:b0:da:16:78:b9:42:
f4:20:4e:aa:46:cc:29:9c:fc:c1:87:f3:de:fc:79:
ff:46:6c:7e:64:9a:a2:fb:8b:ab:a9:d0:a8:71:cc:
02:dd:99:44:91:a3:31:6f:cf:ab:a7:95:e5:2e:2a:
56:48:00:ad:43:3b:3f:74:ca:8f:b9:86:22:21:b0:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:44:91:4D:B9:D7:36:9A:87:39:D1:5F:89:68:8C:D9:E4:BB:E6:53
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:f7:07:c4:53:e4:e5:cc:a2:d1:bd:e1:e5:e6:dc:52:a4:
40:a4:38:51:64:88:36:a5:56:92:1e:6e:78:f1:e5:79:c9:c5:
35:8a:80:42:94:3d:51:7a:82:20:b4:5c:4b:62:71:0c:7a:79:
f5:42:c9:5e:7e:fe:9c:f3:34:7a:f7:98:67:47:26:71:bd:bc:
54:66:ff:72:94:31:ab:ce:a4:cc:13:b5:61:dd:91:eb:ff:0d:
ad:6b:fb:16:26:94:c0:09:7b:f9:3d:3d:d6:44:e7:9c:10:56:
29:21:ac:86:f1:8e:88:8b:75:f6:f6:a2:db:ea:2e:29:40:2d:
c3:1f:9b:8c:06:62:f7:cf:4f:45:16:f1:13:51:d1:2b:64:68:
d3:87:4b:73:cc:a2:d1:98:af:dc:14:27:71:53:79:49:76:ea:
15:f9:a5:15:0f:6c:18:a2:58:ed:1e:54:31:5e:0c:eb:e9:68:
5f:4b:bd:bc:63:17:bb:c4:f3:62:b2:5a:95:f2:02:63:4c:e1:
36:ed:ab:85:75:02:f6:a6:ef:37:0d:55:fb:91:d1:19:5c:63:
9c:92:a2:6d:b4:1a:a6:0a:1c:bb:21:35:6a:38:b1:d1:c3:9b:
58:5d:8e:22:3d:de:fd:00:60:20:dd:41:b6:3c:e1:17:85:ec:
80:17:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:42 2025 by rpki-client