Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File: 6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier: c0/hyhZHXWtRrGAaoOF2MGolSgGRHLp+CYL8MZ0CfsM=
Subject key identifier: 11:F5:0B:F8:97:C5:9F:38:B9:AE:E1:F4:58:C0:A0:3A:45:6E:65:12
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer: /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial: 0199221E236E8BF8DABCA8079BD60A5925A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:24 +0000
Manifest this update: Sun 07 Sep 2025 03:00:24 +0000
Manifest next update: Mon 08 Sep 2025 03:00:24 +0000
Files and hashes: 1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: 9o7AzUd2rE5qS4hI4ZUhfbpNQhb7xkLFFfDNv8fIeuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:23:6e:8b:f8:da:bc:a8:07:9b:d6:0a:59:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Validity
Not Before: Sep 7 03:00:24 2025 GMT
Not After : Sep 8 03:00:24 2025 GMT
Subject: CN=11f50bf897c59f38b9aee1f458c0a03a456e6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:92:cf:93:74:8b:6b:7a:44:c5:7d:f0:29:
04:f3:c9:09:e1:d6:b1:92:00:ce:71:fa:62:4b:a7:
65:ab:b0:8b:ec:af:12:5b:e7:f6:3b:22:ef:1a:44:
97:ba:60:8c:fb:9c:32:a6:31:d4:a9:b9:ed:69:e8:
bc:2f:cd:b4:83:74:56:91:59:0b:8b:e0:93:75:2a:
fb:8c:dc:2b:f3:21:2c:1f:9f:7a:2c:16:58:4e:e7:
85:8e:1c:1d:f6:c3:3a:a6:bb:f7:13:8b:37:83:76:
37:d3:53:72:58:c7:0d:7c:4c:ca:47:87:13:50:87:
28:bd:c3:f0:cb:3a:20:d8:d3:9c:ef:29:b6:61:2f:
69:66:1b:4b:89:68:49:65:86:06:ad:7a:73:8d:26:
f0:1a:d1:7f:4a:20:39:4c:6f:76:b0:bc:b9:8b:1a:
89:76:69:8b:3f:48:53:67:b8:46:b1:ed:f4:f9:cc:
21:a7:17:d1:9c:6b:19:b5:77:af:df:6d:e3:5e:6d:
56:34:56:0c:16:f8:34:51:84:55:84:02:e5:5d:7b:
b3:36:2c:83:2a:c0:7a:b3:66:c2:3a:10:ae:15:9d:
07:fb:51:cf:ef:eb:d9:59:98:88:42:cc:dd:bc:a7:
75:c2:c5:0a:f6:d5:ed:b9:f7:1a:34:75:78:ed:7e:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F5:0B:F8:97:C5:9F:38:B9:AE:E1:F4:58:C0:A0:3A:45:6E:65:12
X509v3 Authority Key Identifier:
keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:fb:cf:fd:64:20:aa:65:8b:3e:a6:3b:6d:e8:f9:db:1f:
71:ed:f6:78:d9:2e:64:55:70:e9:b9:47:01:3c:5f:c8:1d:bf:
e6:98:73:3e:90:28:b9:77:67:9e:06:09:f4:5f:a7:94:0c:3b:
f2:7c:88:bc:b8:5d:e0:0a:a4:98:79:85:e1:19:a5:37:3a:db:
7c:b0:5c:6f:34:b3:ff:1d:c6:2f:12:4d:d6:81:ae:4f:60:76:
ab:bb:73:6c:7a:74:00:15:83:f2:2a:cf:50:42:ab:94:a6:77:
ca:a8:01:2f:38:fe:b2:29:18:a1:1f:19:fa:6c:3f:aa:3f:a9:
2c:fb:51:e8:de:7e:7f:1b:d2:0f:95:d9:4d:d2:d3:00:fb:bf:
13:8f:f5:6c:3b:e3:1b:57:51:e8:f0:2f:bc:a9:62:c3:1c:60:
50:78:d6:b7:02:e6:8a:48:d1:16:0c:7f:7f:e6:2e:e6:2b:a8:
7c:cb:c5:fc:a8:47:48:a4:1f:df:e1:66:38:00:9b:b8:88:ca:
fa:9e:5b:a4:1e:0e:34:ce:a8:ab:14:fb:d8:ca:90:4d:c0:44:
2d:e4:cc:43:9d:20:59:4d:7c:47:c0:8e:d5:b1:d9:ed:9e:53:
ce:90:af:4c:a1:3e:ee:d2:50:34:36:f0:82:68:a6:2c:48:2e:
06:1b:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client