
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: pKb7spV/PeMWTapWTDXHAcZA6whlSkeFQthC+pM5uFU=
Subject key identifier: 99:C6:C9:DC:D4:97:8C:6D:99:42:56:4C:16:53:C3:4A:C4:A0:90:DA
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 0199233178D7965D733CB7872AD20D5BC242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0A5A
Signing time: Sun 07 Sep 2025 08:01:08 +0000
Manifest this update: Sun 07 Sep 2025 08:01:08 +0000
Manifest next update: Mon 08 Sep 2025 08:01:08 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: 43nBJdV/CwJ3Ax5H8mEiKWoCbrvv8oiFMtfNalzJJtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:78:d7:96:5d:73:3c:b7:87:2a:d2:0d:5b:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Sep 7 08:01:08 2025 GMT
Not After : Sep 8 08:01:08 2025 GMT
Subject: CN=99c6c9dcd4978c6d9942564c1653c34ac4a090da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:e3:02:a9:04:63:a8:d5:6a:84:6a:97:3d:
97:41:0a:d1:ba:1c:87:ca:ca:25:14:25:6d:a0:bf:
12:d4:80:43:ae:97:1d:0e:f5:65:7e:15:28:20:3a:
8d:46:61:57:32:00:38:89:96:55:64:56:94:9f:f8:
f6:e3:4e:92:9a:b6:7a:0e:f4:4a:89:ed:65:da:37:
21:d0:54:55:54:e3:74:a8:69:60:b9:e7:9a:7b:43:
e9:f2:b5:84:13:43:47:97:97:ea:1f:68:78:ef:a8:
84:51:0b:64:2d:3b:3c:88:9c:f8:be:30:48:11:5c:
d7:9b:5d:06:59:cf:d4:b1:ad:14:fe:15:45:a6:69:
71:9d:25:24:6a:68:94:22:cb:52:d9:f7:33:6f:c0:
0a:dc:43:f6:f3:11:f6:21:19:eb:c5:96:26:60:eb:
57:d1:0e:98:22:15:5c:69:be:d8:48:91:fe:45:58:
2b:be:0b:ae:82:0b:4b:de:e1:02:66:f2:58:b7:44:
77:95:b4:82:70:e1:d4:37:4f:41:fa:57:49:e4:6f:
f8:45:9c:1c:fc:07:e3:1e:03:b2:4a:4d:d2:df:54:
2a:60:12:69:00:c6:33:55:ee:00:4f:d6:9c:d7:9c:
17:49:70:cc:08:05:17:14:e0:28:2e:fc:6d:13:d4:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:C9:DC:D4:97:8C:6D:99:42:56:4C:16:53:C3:4A:C4:A0:90:DA
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4f:1f:fe:27:24:b2:6f:bc:ce:6f:52:40:2b:8b:6d:3e:2a:
04:88:55:42:3e:eb:c1:59:0a:73:11:60:c5:61:d7:89:f0:27:
fa:95:f1:5d:ee:41:d8:4a:f9:db:f0:93:42:14:ad:ab:3d:08:
a8:b5:b1:e5:28:20:a4:3d:01:34:69:9e:1e:67:5e:d1:a5:08:
0e:30:19:c0:de:85:52:91:78:f4:b1:2c:c5:a0:82:f9:bd:9a:
29:b1:8e:a8:65:fc:5e:b7:08:e2:cb:a0:af:20:56:f3:4e:4a:
cd:f9:b5:96:87:f3:d6:ec:42:72:f9:7c:72:7a:3b:4e:a7:8f:
86:d0:c7:76:97:0d:32:9e:b3:1c:9a:8b:db:77:8a:1d:3c:33:
60:f4:c0:0b:e0:81:21:4c:39:7e:c2:f1:c0:f1:96:cc:24:14:
9e:48:c1:e0:bd:fa:97:13:5c:52:f8:df:b0:07:8b:f6:1d:2c:
70:6c:ca:c0:07:ab:72:dc:d7:b5:ab:10:81:86:4e:a5:16:17:
90:78:80:08:b1:9c:21:dd:de:25:ce:c4:cc:80:a1:c5:d7:bd:
93:2f:16:18:64:8e:58:98:b4:0a:ea:25:7c:6c:b9:54:76:98:
a3:6e:ca:07:ca:f7:d1:46:3a:d6:8b:ac:92:df:13:79:7e:a9:
e1:f0:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:07 2025 by rpki-client