Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: XqMD80oB17n13wFtEdsca/oHBzWDWahlehNrqVOHhVo=
Subject key identifier: 84:57:3D:BA:73:88:75:4A:D9:62:30:3F:EF:56:73:4A:71:56:BA:00
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 019922FA96194166D77569A9E6E53E7C9961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 0267
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: qF6D4x5p73K1N77mXvOOPmW0FPaFaK/Z0DI/cPAzAj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:96:19:41:66:d7:75:69:a9:e6:e5:3e:7c:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=84573dba7388754ad962303fef56734a7156ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:c9:24:d0:d1:da:d8:d6:d7:b1:2d:72:a6:
37:9e:e3:ea:10:15:f3:40:27:91:6b:51:ee:ee:08:
d8:c0:bf:02:fa:22:71:6f:54:3a:34:be:92:e6:c5:
d3:13:0f:88:52:7a:e5:59:72:c0:07:84:d7:e9:87:
be:8c:a9:79:f3:fb:0b:71:8a:bf:4f:69:48:bd:3d:
2f:3f:7b:26:28:3a:7d:8e:af:cf:e5:2e:de:75:a7:
a0:4c:2c:38:29:2a:7c:13:fd:73:c2:31:77:43:f0:
9c:9a:2e:32:c5:fa:b3:fa:ff:bb:63:a3:27:c8:ef:
b8:4b:6f:d8:01:79:52:19:11:09:23:65:79:51:7f:
59:b0:cf:75:a6:35:f4:61:91:d2:44:cf:cf:e6:a3:
c9:25:0e:03:f0:62:72:3f:69:3a:99:8c:d8:f1:36:
21:a8:c6:d9:6c:91:e1:cd:e6:88:f6:1d:76:ee:96:
c7:08:d6:42:6c:2f:5e:24:c8:f8:44:a8:d1:68:6c:
54:65:d1:d1:55:a1:9b:2d:78:b1:c3:12:ab:99:e2:
d2:55:d9:d0:15:7c:37:74:5c:b5:50:fe:00:0a:a7:
9d:f6:c1:98:68:63:32:bf:78:a0:c7:79:c8:70:39:
6e:57:1b:69:6e:9e:9e:3d:5b:06:50:24:38:da:c8:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:3D:BA:73:88:75:4A:D9:62:30:3F:EF:56:73:4A:71:56:BA:00
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:60:ab:51:19:f1:11:7c:f1:fc:44:4a:5b:20:42:00:75:de:
17:42:f5:1a:d5:d2:df:23:55:a0:f5:9e:6e:71:e3:9e:01:44:
d5:29:fe:b1:af:a0:bd:43:d8:7d:5f:20:f1:e7:5b:b6:01:8b:
86:ee:bd:67:5e:4d:b1:36:50:1f:c4:dc:03:28:2d:a1:cb:c6:
15:b6:cd:eb:5b:13:b4:bd:26:cf:c0:4c:20:9d:f1:d1:97:1a:
f3:78:70:c6:93:1f:93:06:3b:56:cb:65:00:1c:a6:68:d6:ee:
ab:db:41:e9:b5:34:7f:86:52:3f:ba:43:36:d4:c2:f6:0e:32:
1e:ed:4f:36:21:3b:d5:39:f2:0a:d7:02:0d:3c:2d:e0:a2:c8:
6d:2b:9f:95:7d:98:4f:6b:66:55:63:14:82:1a:d2:14:a7:01:
11:ca:b0:68:c8:1e:2d:b6:71:ea:7d:ef:c6:21:49:41:7e:d5:
94:08:83:e1:32:df:4e:44:dc:e8:2b:17:92:35:ce:79:cc:b7:
63:bc:0a:db:3b:03:ec:11:30:13:21:e8:88:56:5c:e3:17:27:
8c:ec:bf:60:b1:9d:cb:9f:33:d8:10:1c:2d:64:61:07:ef:5b:
b2:c0:81:02:c0:56:4d:d5:be:fd:7f:0b:b6:95:e9:98:9c:22:
0f:67:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client