Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: P/X8gEyvtydoE17+ZbFzk7tlYFJrZurecgEzoxJpQRs=
Subject key identifier: A7:8A:81:28:83:40:F4:B4:E8:57:67:5C:38:B0:CB:D9:39:EA:CC:81
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019923316EA911C194E39C77B01AC8405BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: CB
Signing time: Sun 07 Sep 2025 08:01:06 +0000
Manifest this update: Sun 07 Sep 2025 08:01:06 +0000
Manifest next update: Mon 08 Sep 2025 08:01:06 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: gjcGxC6hucD7eiTqNVO6YHLtFGxIX9NIXmg9tletx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6e:a9:11:c1:94:e3:9c:77:b0:1a:c8:40:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Sep 7 08:01:06 2025 GMT
Not After : Sep 8 08:01:06 2025 GMT
Subject: CN=a78a81288340f4b4e857675c38b0cbd939eacc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:89:ce:54:1f:40:f6:88:d3:c6:2a:c3:e3:
54:d8:70:85:0e:eb:29:56:d7:f5:2b:0a:e2:85:67:
3d:c6:96:c6:9a:1d:50:64:6e:c4:6f:cf:16:bf:21:
6b:21:72:a8:1e:04:f0:3d:fe:67:3a:31:5f:de:c6:
f9:d5:e7:cf:ad:2e:62:83:f1:f6:50:34:35:ef:cf:
4f:5c:3e:96:18:00:ae:2e:de:80:4f:fd:81:4d:c3:
5b:a2:af:aa:80:40:fe:59:28:e8:73:21:ff:f6:f7:
d4:eb:b6:99:a3:e7:62:87:fa:0e:2b:a0:6b:a5:18:
28:95:ce:09:83:18:e8:cd:b6:09:85:8d:3b:f9:8e:
63:a5:5e:a0:76:23:60:22:24:60:03:4a:ff:28:44:
73:a7:e3:57:3f:01:3d:4d:24:f3:46:ce:32:72:f4:
0e:4f:65:8e:c5:8c:38:d9:d9:e2:9b:47:a4:a5:ae:
9b:d4:e9:97:69:65:f7:3a:89:cb:6b:35:16:6e:74:
9a:5e:35:3c:64:32:65:ac:49:a3:a6:52:d7:9e:c8:
1d:04:dd:66:ea:06:fd:cc:c2:f5:94:1e:5a:7a:21:
02:92:05:4d:cc:33:6d:2c:af:c5:ba:9a:9b:82:c7:
07:a0:d7:0f:12:c3:ab:de:58:bf:eb:a4:00:b6:30:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8A:81:28:83:40:F4:B4:E8:57:67:5C:38:B0:CB:D9:39:EA:CC:81
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:63:7e:ba:40:cd:1c:92:5e:60:cd:5e:4c:35:e5:aa:43:58:
9d:47:f8:54:56:02:22:52:c4:5c:61:e3:ca:ad:1c:5b:fe:fe:
f7:68:61:83:e2:b4:c1:60:61:c8:0a:ee:3b:26:72:e2:78:86:
ed:9a:2d:d2:6b:a3:65:f8:d4:79:cc:cf:0a:ba:e6:d9:fa:32:
57:de:b2:c0:af:7f:c7:34:96:87:d7:44:d7:89:a4:b1:09:49:
49:66:88:ef:c6:33:f0:19:bf:03:e3:29:bc:2f:cb:36:a0:b1:
e2:3c:93:33:df:cc:ef:55:e8:bd:10:36:b4:35:c6:1b:83:82:
8e:d9:c3:a0:34:9c:be:5e:2b:c6:cb:0d:05:ef:f3:98:85:c2:
f1:7a:99:0d:6a:cc:e5:c0:ae:2b:2a:ba:e5:20:b6:7d:9a:fb:
48:12:7d:e5:40:6b:28:f0:e3:34:98:b6:d7:cc:8b:c8:ab:f8:
ec:ea:73:3c:59:63:21:1d:7e:92:5a:22:1b:9a:7f:85:e6:89:
59:ad:61:51:a7:34:a8:12:0b:de:75:be:9b:d2:1a:05:bb:6b:
6e:96:ea:17:3d:4b:f8:68:2c:f0:91:d1:c2:95:58:43:96:d3:
c8:51:9c:91:97:18:60:24:16:65:16:85:9d:54:c8:e6:e7:b2:
0a:35:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:23 2025 by rpki-client