Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: LPKK7fTyJN4ndKiGBB+acI1MZ2BqAnr/tFdIGW4pPkg=
Subject key identifier: 04:74:66:91:06:B9:35:D1:94:D7:A7:D2:DF:6D:CF:C7:0B:B4:CA:80
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 01991876D86A4D685FA4545EA2815FB4F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 1147
Signing time: Fri 05 Sep 2025 06:01:05 +0000
Manifest this update: Fri 05 Sep 2025 06:01:05 +0000
Manifest next update: Sat 06 Sep 2025 06:01:05 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: M7Pkrb8wCFbY4ow4431MgySd75PkYfDyzfbHHNHDG1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:d8:6a:4d:68:5f:a4:54:5e:a2:81:5f:b4:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Sep 5 06:01:05 2025 GMT
Not After : Sep 6 06:01:05 2025 GMT
Subject: CN=0474669106b935d194d7a7d2df6dcfc70bb4ca80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:9e:e5:3a:b5:be:f9:da:9d:0d:e9:31:cd:
59:83:ef:76:d2:97:f3:89:a3:86:a5:fa:51:40:66:
c2:37:97:66:a4:37:ad:fb:9e:aa:c7:33:a0:8b:53:
ac:58:da:2b:24:ef:78:86:ac:e6:16:ee:da:fb:19:
02:2a:13:ec:90:d6:1d:eb:ad:bc:42:89:d2:cb:a8:
34:24:1c:4f:96:71:5e:5c:96:4c:97:f1:52:5d:77:
dc:a3:c1:90:4a:77:72:af:c1:39:9b:ff:62:63:93:
9c:1e:15:9d:77:f5:82:17:4c:61:4d:ab:88:3b:ea:
23:e6:62:87:94:88:8e:29:8a:88:87:9d:f2:a1:35:
a5:27:1c:aa:b2:60:ab:b9:63:52:85:7b:d7:6e:35:
f0:a4:40:11:a8:a9:98:30:5f:1d:62:ad:50:e6:5b:
af:81:2c:b0:2c:d1:e6:55:9c:b7:0e:c8:43:95:f6:
43:87:a7:97:70:7a:ae:d1:54:76:13:7c:76:a0:55:
bc:12:5f:6b:62:02:88:e3:3e:1a:e9:99:e8:4b:c9:
a4:b6:be:54:c1:31:0f:00:45:50:80:f8:d9:ae:bd:
d4:4c:28:65:cc:ec:07:a3:12:eb:f8:61:10:02:9d:
9d:ea:bd:c1:52:1f:a8:ea:13:a4:79:40:cf:77:d8:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:66:91:06:B9:35:D1:94:D7:A7:D2:DF:6D:CF:C7:0B:B4:CA:80
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:6b:f2:ea:8d:8c:c7:91:4f:c9:f3:0f:27:03:7f:41:88:
51:84:7b:87:5e:c8:87:79:b1:7f:2e:bd:d8:73:77:54:e6:49:
b4:0b:bf:06:54:4b:ed:06:ba:90:1b:a2:6c:6c:77:9c:13:23:
cb:bc:9b:69:c8:36:fc:87:21:b6:3f:99:6a:5a:5a:3c:c9:15:
65:43:b8:d1:b5:d1:42:e8:e3:2b:57:49:72:6f:56:e9:64:a1:
18:0f:9d:9b:ca:e3:44:46:2c:9d:d7:af:b5:aa:b7:a4:22:1d:
8f:44:b3:45:49:0b:d5:eb:8a:74:14:02:fb:98:36:36:1c:0e:
f1:d2:42:86:94:eb:c6:3e:6a:26:31:4e:26:78:48:94:e9:dc:
09:c5:f6:b5:4d:6d:44:a5:6d:97:9a:25:aa:1a:7f:df:11:f0:
3d:92:36:66:33:ac:a3:62:51:69:5d:98:ed:3a:0b:b0:d6:15:
9c:fd:f6:3c:aa:52:99:f7:c8:17:7e:8d:dd:5d:2e:f1:ac:60:
aa:90:4e:b4:36:81:26:8d:9d:4c:fb:8a:b0:8a:eb:84:f2:77:
e7:6f:a7:fe:b1:3c:aa:13:d1:d6:1d:57:73:e4:f0:8c:66:cb:
19:16:0d:19:d7:f2:f7:00:06:c9:1a:5b:5f:39:08:71:43:aa:
5b:13:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:24 2025 by rpki-client