Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: T/sfAw3gXUpg2XlUxz0B9qFaxf/7WYek46XMp/rJ3/Y=
Subject key identifier: 53:29:95:91:5C:E6:7A:15:85:28:29:F8:6C:B9:B2:B6:78:AC:80:4C
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 019922553CC16878BAEC5EA9B129471D8C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 09DC
Signing time: Sun 07 Sep 2025 04:00:35 +0000
Manifest this update: Sun 07 Sep 2025 04:00:35 +0000
Manifest next update: Mon 08 Sep 2025 04:00:35 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: VMVPPOB+zjgGB8kHvtirAodItk2mj4yWia8UUNuubQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3c:c1:68:78:ba:ec:5e:a9:b1:29:47:1d:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Sep 7 04:00:35 2025 GMT
Not After : Sep 8 04:00:35 2025 GMT
Subject: CN=532995915ce67a15852829f86cb9b2b678ac804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:fc:12:5d:6c:c3:8b:94:9a:ee:27:bd:c7:
5a:e5:24:31:68:de:97:cb:fa:c9:09:31:93:3e:2a:
93:29:02:e6:ba:ca:90:6e:78:03:41:b6:da:55:6e:
3d:49:0b:11:93:47:09:7f:cd:75:7c:fe:cc:9f:cc:
eb:17:6b:63:33:c8:3f:69:5b:1f:0a:b0:67:68:78:
44:8a:d5:ef:f7:7e:cb:3d:88:13:c0:77:1c:bc:ec:
45:7a:35:3d:d5:97:19:32:d4:b8:8c:22:75:6f:68:
6b:1d:2a:6c:38:a4:6d:eb:6b:0f:75:70:a6:c1:c0:
06:6c:2e:f0:9b:be:b7:4d:cf:02:9d:86:87:53:97:
17:e0:98:6f:70:4c:2f:f3:64:2a:05:03:16:8a:b8:
25:bd:3a:c9:cb:3f:06:c5:60:68:61:31:37:f0:96:
46:14:3b:a0:3e:06:c8:aa:83:4e:22:87:ba:7f:60:
42:cd:ac:38:23:08:6f:d1:67:d4:45:5e:b3:f1:75:
70:7e:41:8a:42:70:e5:b1:83:88:f3:42:f4:29:53:
2d:01:35:d8:44:48:76:80:5e:0e:70:9e:8f:3a:ec:
46:c2:a5:69:cd:22:b0:d0:40:55:1e:5e:7c:4d:e9:
21:48:91:45:61:2e:3e:fc:a2:96:42:90:e8:44:19:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:95:91:5C:E6:7A:15:85:28:29:F8:6C:B9:B2:B6:78:AC:80:4C
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:88:bf:90:be:6e:28:04:ba:51:c3:a4:13:19:ee:57:d0:79:
96:06:34:05:70:ad:56:e7:35:ff:da:0e:44:73:f6:3b:de:86:
4c:6c:c4:9b:93:ae:dc:6e:f2:2e:61:9d:cf:df:42:69:c3:93:
1b:32:e9:57:ea:f7:4b:68:01:c9:c8:1d:02:d5:e0:12:e5:b1:
83:e1:66:c3:49:ca:7b:ce:a3:c9:5e:f7:61:92:38:0d:e7:da:
64:14:54:2a:17:94:f1:d9:6e:dd:8c:8a:0e:97:e7:72:f6:58:
09:97:dd:57:91:54:6a:a5:ec:4a:b2:22:ea:a4:42:da:4e:d9:
31:a8:bd:ca:8d:54:03:f8:cd:a1:e1:59:6f:32:87:ee:43:0b:
a4:b6:de:11:e9:61:4a:ff:ea:16:82:9f:c1:7a:1a:e5:2e:cd:
28:88:78:01:3b:23:60:72:e9:e4:68:52:30:33:01:27:1a:68:
55:e8:01:de:74:a6:cc:3a:0d:cd:2c:89:91:1a:98:c1:9d:4b:
53:52:ab:23:77:9b:4d:24:10:5f:98:67:a1:82:ec:94:fc:d8:
48:85:ae:da:36:ff:37:26:97:89:5d:d6:ab:04:7f:21:58:b6:
c1:e1:01:a8:8d:5a:49:24:7d:90:84:d5:9a:9f:9f:2c:a2:f4:
d2:d1:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:07 2025 by rpki-client