
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File: 6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier: /B4kMArXnY4BieFThzQI17YRdkmrUKS5ysQagPvnwXY=
Subject key identifier: A4:B4:44:B8:07:62:95:70:57:34:39:81:AE:34:E4:0C:C2:6E:55:E6
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer: /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial: 019923A00EEC14DEB3141405EDAD89278549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number: 021E
Signing time: Sun 07 Sep 2025 10:01:56 +0000
Manifest this update: Sun 07 Sep 2025 10:01:56 +0000
Manifest next update: Mon 08 Sep 2025 10:01:56 +0000
Files and hashes: 1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: YpO+REiYFPxfJ2KqQHx8CVhSEB6ygWH4Ej/CdZ8msfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0e:ec:14:de:b3:14:14:05:ed:ad:89:27:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Validity
Not Before: Sep 7 10:01:56 2025 GMT
Not After : Sep 8 10:01:56 2025 GMT
Subject: CN=a4b444b80762957057343981ae34e40cc26e55e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:c6:a7:7e:a5:3f:17:8e:c5:cb:01:22:38:
dc:5c:2e:2d:15:dc:3a:c8:89:51:75:25:72:20:2e:
f0:9d:ed:f8:d3:d5:9e:f5:9d:a8:cb:25:36:ad:5c:
e7:1a:73:04:fc:30:0a:d5:44:90:6b:69:28:e3:32:
4a:e5:2d:f8:fa:c5:df:d1:fb:9c:c8:10:3d:da:1d:
96:f6:26:54:a8:aa:b5:54:b9:2c:83:77:71:86:14:
fd:e9:59:f2:67:d1:e1:b2:02:38:35:6a:e2:f0:53:
f3:5e:39:b8:23:90:63:6e:77:49:d7:40:79:9a:48:
aa:cf:9d:1b:b2:fa:82:17:e5:f3:81:c6:6f:04:89:
db:ea:db:ff:91:05:f5:a9:93:95:cc:fc:6d:8c:97:
df:9d:99:93:9d:41:8d:a3:28:c3:fb:6f:a8:95:6b:
af:c2:a1:9d:b9:08:34:de:fa:c6:b7:f8:96:ce:88:
ea:97:99:34:a3:e7:1f:e2:cf:67:90:ea:da:24:b2:
ee:d5:7a:1d:cd:00:21:1f:0f:e1:8f:2e:ae:6a:62:
b6:1a:a4:2b:ab:cf:ab:ce:0c:db:a6:c0:26:b8:ad:
92:49:32:c8:fa:9b:e8:de:69:50:71:05:48:94:7d:
ca:8d:bf:cf:54:61:64:9c:13:d2:e4:7a:0d:55:39:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:44:B8:07:62:95:70:57:34:39:81:AE:34:E4:0C:C2:6E:55:E6
X509v3 Authority Key Identifier:
keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:bf:c2:f7:75:02:0a:51:51:7e:58:e7:c0:dc:ae:fb:c1:
08:cd:b7:72:06:aa:fe:83:33:bf:b0:da:e0:69:da:a9:41:d0:
3d:63:6e:a1:1a:b2:f7:30:73:ac:d9:ee:67:f4:40:d0:02:cf:
69:63:b0:e0:82:8d:a2:a2:bc:52:1f:dc:42:5d:dc:eb:2f:fc:
93:a3:9e:c8:80:c7:43:23:93:e9:ab:97:70:37:0d:e6:80:23:
8e:83:48:7e:e3:aa:80:ac:b3:14:b6:68:40:08:bf:b5:70:a3:
e9:8a:de:cb:62:7e:be:03:7f:e8:04:c8:5a:cc:b7:b0:91:c0:
91:5c:ce:d6:e4:53:6c:38:1c:b2:dc:b3:aa:b1:cf:bc:2c:f4:
33:0e:15:05:57:9e:c9:48:c3:d5:cf:8d:4c:3a:1a:58:2e:f8:
ca:8b:74:fc:49:36:9d:74:af:1c:0e:6c:44:76:c1:ff:b4:54:
50:26:71:cc:22:56:69:08:4d:1f:1b:ab:1a:d6:60:e4:84:b5:
bd:ec:4e:98:1a:26:60:9a:82:0c:a5:59:bd:ac:df:68:2c:5d:
23:83:4b:12:b9:41:aa:12:32:2e:3b:4a:3c:14:4e:7f:c1:0a:
75:39:77:32:f6:62:cb:36:ea:2d:86:d8:84:5c:6d:51:e3:4a:
31:10:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:47 2025 by rpki-client