Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: HoSxFxUDPWprr8/HSqS3uQkTqTgumuDLXh389XW7qhk=
Subject key identifier: 07:A8:3F:88:91:6E:50:71:78:EF:58:FA:75:06:DE:E7:51:5A:F6:E0
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 019922FA955762B267C2AB6FF7A9B5749F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0549
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: gpkheKtoIGANhx5eYh4f0v59DoP51nHaLEEXu66kHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:95:57:62:b2:67:c2:ab:6f:f7:a9:b5:74:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=07a83f88916e507178ef58fa7506dee7515af6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:dd:b0:3f:4a:80:d9:68:da:f8:e7:d7:af:
9b:ab:b0:19:43:10:6e:36:45:30:26:ca:d0:ee:0a:
1a:02:de:10:32:18:90:6c:e6:18:47:ed:58:29:c5:
16:86:93:d7:09:af:d5:85:51:fe:1f:91:cc:7f:74:
82:84:c8:61:04:d0:e4:7b:86:f3:91:1a:58:fb:0d:
24:fc:08:d9:81:57:fb:ea:ce:0f:3e:5c:d4:c6:dd:
33:08:d6:b6:cc:ad:0b:3d:4f:c6:61:3b:f7:12:89:
3b:af:fd:85:2b:0c:15:2e:c5:4d:b2:cd:80:11:00:
60:15:40:ef:7d:fc:4d:0a:41:76:4f:90:5f:06:b2:
b2:1f:1c:21:7f:c6:9f:74:ef:27:81:a7:f5:dc:7c:
c3:01:91:31:5a:50:fe:b1:42:07:ad:38:87:00:cc:
67:80:a9:72:be:e8:21:a9:5c:1d:9c:37:b9:d3:ed:
8c:4e:38:54:4c:8d:bf:dc:96:da:7d:9b:4a:09:fc:
ff:71:4a:05:2c:de:95:a5:a2:36:0c:92:49:b6:65:
58:ef:19:8a:fb:dc:67:b9:de:07:05:e7:bb:84:c9:
67:31:e3:e3:09:be:fb:6b:41:04:af:1f:b9:dc:9b:
20:c5:a5:50:e3:76:0d:61:92:5f:e8:98:c6:4f:c6:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:3F:88:91:6E:50:71:78:EF:58:FA:75:06:DE:E7:51:5A:F6:E0
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:d8:ef:d1:e4:52:0d:7f:f7:38:96:eb:d9:24:af:9a:67:
e4:c8:5e:34:d6:ef:80:f9:70:79:9a:68:67:47:c5:c4:93:a1:
e7:04:7f:b5:dc:fc:77:13:85:7f:95:b8:1d:50:f2:7d:90:0d:
d7:65:da:98:e6:61:0e:81:b0:5a:1a:6a:a2:7c:77:12:b6:64:
94:7d:63:11:3d:36:02:92:61:01:c2:fe:47:4b:61:b1:72:ae:
a1:be:74:16:f2:b4:04:b5:ec:5e:dd:6d:6f:fd:dd:4a:c4:85:
1f:81:25:ea:10:c5:37:f8:7b:cc:6e:48:b6:89:74:9f:94:23:
0e:b1:e9:35:14:99:22:63:fe:47:93:c9:70:86:50:b3:26:4e:
55:86:61:98:25:11:4c:2b:0f:17:33:47:d0:0e:20:b9:e1:13:
17:de:21:da:05:10:17:49:67:0c:05:11:39:c1:6a:e0:53:a8:
ce:78:93:cd:bc:15:c4:ae:85:9f:37:2f:21:8e:f0:b8:15:0e:
47:74:93:c4:d3:0f:76:2f:24:11:9c:18:3f:34:e9:2d:f6:e5:
7e:8f:26:dd:68:f2:61:f1:3c:ca:1c:ae:f4:94:0a:22:4d:8a:
16:9a:68:cd:52:59:6e:a9:79:43:b0:dc:6c:c3:e0:fd:64:bd:
ee:50:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:28 2025 by rpki-client