Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: crF08Q9sHkvqJF8oP29QGGXSaWKjVa8bek1HtDcwqp8=
Subject key identifier: 77:82:3F:EC:27:B6:58:B7:A1:3D:57:59:BB:37:54:A8:3D:90:7E:BD
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019874BDE2191B9B4777D1646A9026530A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 11:00:57 +0000
Manifest this update: Mon 04 Aug 2025 11:00:57 +0000
Manifest next update: Tue 05 Aug 2025 11:00:57 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: icnX+opAh+roJrE6OSqask4ILUuSeFFJQ8g0g64C9Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:e2:19:1b:9b:47:77:d1:64:6a:90:26:53:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Aug 4 11:00:57 2025 GMT
Not After : Aug 5 11:00:57 2025 GMT
Subject: CN=77823fec27b658b7a13d5759bb3754a83d907ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:4a:dd:20:eb:f8:e3:f6:62:47:d0:eb:1f:
be:e0:73:9f:ed:04:34:81:58:f5:7e:12:63:9d:a4:
fe:71:52:75:02:40:e5:58:26:af:eb:24:ef:e7:1d:
54:fb:0e:ae:52:f7:39:73:96:27:49:d7:d4:52:16:
59:9a:62:dc:50:19:be:da:92:dc:34:3c:5e:f9:14:
6c:43:7a:62:96:39:b8:5e:59:96:b4:3e:f2:af:97:
c3:79:a3:87:35:fa:96:4e:2b:31:f8:02:02:41:46:
0a:70:92:3c:a8:44:a0:90:84:87:e9:09:9c:0b:49:
c4:10:f7:8f:49:96:a1:9e:b9:23:04:ba:f8:33:9e:
d1:3a:36:1e:43:8f:c7:4a:c3:ec:28:b8:e5:84:13:
30:ee:9c:31:d2:5d:28:87:e5:83:ca:f7:3b:ea:e9:
ef:0a:a2:b9:53:3c:7b:69:62:ef:1e:92:e5:ac:ef:
94:07:d8:68:4c:08:38:3e:02:00:d0:fa:be:d1:49:
24:58:96:e4:c9:28:c0:95:7e:8d:90:d6:b8:40:b0:
78:b5:75:64:1d:d8:d4:a2:ac:65:e9:b3:70:86:2e:
73:bb:b3:23:7b:53:af:1e:77:35:f9:9b:24:a5:3d:
19:87:15:1f:c8:69:bc:03:eb:44:f4:1b:4c:05:d4:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:3F:EC:27:B6:58:B7:A1:3D:57:59:BB:37:54:A8:3D:90:7E:BD
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:f6:93:88:5c:0b:8e:81:2f:69:4e:c9:22:a9:b9:94:75:
3b:3d:e1:cb:f3:c0:3c:04:0c:ad:19:3a:a0:71:5b:17:11:a7:
77:48:7c:08:7b:98:ac:b8:49:3f:99:04:18:12:ad:30:f7:e8:
35:c1:99:67:3f:71:87:5b:28:4c:c7:7f:32:30:02:c2:6b:0a:
7b:d1:cd:99:43:15:69:bd:a5:c6:4d:a5:df:66:ec:99:0b:49:
e5:98:b8:4d:58:c6:94:bf:d6:0b:1e:20:5c:35:ee:09:98:da:
2d:39:aa:75:1b:bb:f8:83:17:82:d3:da:c6:d6:e3:88:db:71:
fb:5f:59:5e:df:03:87:e6:27:cc:f7:47:03:f5:ab:41:64:e9:
9d:7c:0a:c5:37:e6:ba:52:2c:5f:f4:58:06:a3:46:15:08:4d:
f9:53:8a:f8:91:94:f3:19:2a:49:95:ae:0e:37:ef:77:59:83:
7f:d8:9f:7c:cd:0b:9f:7b:1c:10:e7:db:e6:3a:98:78:6b:0a:
5a:f3:9d:33:c7:bb:2c:9b:37:6b:26:8d:a5:2c:f8:06:f4:12:
61:24:cd:09:7c:71:6e:66:60:cf:8a:79:19:8c:aa:38:09:a1:
71:97:63:cb:70:a6:6f:50:b8:f5:4b:78:e1:76:5c:3c:09:8c:
16:5c:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:14 2025 by rpki-client