Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier: 5pmHorSYz+km8otunQ3xOhV2I+Q7m1NWAeKQU7J7Mrs=
Subject key identifier: 40:A9:CC:36:AB:E1:E4:54:48:68:32:91:C7:67:52:02:11:AE:B4:3D
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 019923D61615DC5C6D628FF0DB8A7CD6AE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number: 1635
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: lO2wQF6lVzXksx6y07HcyF57Pvhf0qks4Zd6bKmOoG4=)
2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:16:15:dc:5c:6d:62:8f:f0:db:8a:7c:d6:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=40a9cc36abe1e45448683291c767520211aeb43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:65:84:42:0b:47:f3:22:3b:1f:9a:12:ad:
74:cb:4a:61:32:f6:69:2f:c5:d0:78:64:94:99:6a:
aa:3a:f9:a1:48:fa:fa:df:cc:29:ba:b2:fc:e5:f6:
42:5f:f4:fc:2e:05:29:89:0a:4a:50:34:59:a9:55:
6b:db:f8:38:2e:f9:6a:8c:75:ec:09:25:87:e1:08:
df:0c:ec:b0:b6:5f:b0:74:3a:96:c8:18:0f:5c:98:
f2:14:c2:03:5a:4e:81:fa:55:ec:f7:11:70:21:b4:
c0:d4:5b:50:9e:d2:f1:4b:88:04:e4:20:3e:56:38:
93:77:6b:41:3d:82:8b:c0:7f:c8:04:2b:38:62:da:
c8:3b:f2:e7:3b:49:6b:1d:00:a3:4f:b6:12:83:47:
6d:9b:63:89:04:fa:ca:aa:a7:f9:a7:37:72:b0:f6:
a3:36:ec:8c:21:61:aa:47:80:5c:f3:16:dd:b9:5e:
7c:43:75:b7:85:69:49:c2:58:8b:f6:1b:84:09:59:
3b:15:75:b9:0f:66:79:b2:26:2e:d4:2a:c5:7b:18:
77:ac:5c:0d:8b:d9:e4:0f:8f:f2:3b:ac:72:38:d6:
b0:05:81:e5:13:16:a2:5f:73:9d:fc:98:ce:4e:ea:
3a:d7:10:42:a0:cc:71:29:79:2f:a1:bf:a5:9d:c6:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:CC:36:AB:E1:E4:54:48:68:32:91:C7:67:52:02:11:AE:B4:3D
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:2b:e7:81:d2:f4:81:20:b2:5d:96:b4:db:eb:60:5b:32:
39:0c:6b:c5:52:c6:81:39:6f:8d:d1:93:0a:0b:4a:d6:68:72:
4b:57:b8:52:19:9c:c3:77:13:be:e1:04:2e:4c:05:2a:61:88:
10:d4:48:5f:46:37:b4:4c:1e:b3:85:8c:46:24:c1:6d:92:7f:
dc:b4:bd:19:04:42:84:2b:21:78:63:ea:49:22:b4:7c:82:42:
d2:b0:cd:e7:af:dd:61:d0:5d:ab:99:bf:d0:73:78:6f:24:5c:
f1:10:30:03:ef:62:f7:ce:25:1f:5a:b5:92:27:70:97:bf:46:
fa:d7:4d:f2:ac:d4:a5:6e:aa:87:49:8d:2e:71:23:6a:30:f3:
4d:bb:9c:39:99:8f:fa:c6:78:19:3c:6c:01:68:5b:50:5b:6f:
7a:ad:ba:1f:80:96:dd:3c:05:4d:7c:08:db:5c:2d:d9:6c:ad:
c3:a3:4d:1b:33:f1:55:af:4a:06:0f:89:9f:07:8c:a3:75:a1:
3b:c8:50:68:39:67:c4:d3:44:a6:65:a9:02:7f:47:33:2a:6a:
d5:c9:7d:7b:d1:b4:87:33:ee:ae:68:21:31:56:fd:d5:b0:43:
43:4c:80:6e:12:99:e8:01:20:05:fd:04:b7:8e:01:6a:f3:9f:
4a:68:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:34 2025 by rpki-client