Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: dlfNo13s8N4mFFL1IskV0P7L3SEFAj5y4EubOrbjodo=
Subject key identifier: EA:4A:6D:26:A3:85:8A:F3:97:CA:A4:5B:29:42:4B:FE:E7:30:EC:AB
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 01976C2AA2AFF12A3C1DD8780F8DA96260E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 02:00:22 +0000
Manifest this update: Sat 14 Jun 2025 02:00:22 +0000
Manifest next update: Sun 15 Jun 2025 02:00:22 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: +Bx1tlM+m8YcA7MZoaSirR9qQwLJlSk4j6AVv2rZu+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a2:af:f1:2a:3c:1d:d8:78:0f:8d:a9:62:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Jun 14 02:00:22 2025 GMT
Not After : Jun 15 02:00:22 2025 GMT
Subject: CN=ea4a6d26a3858af397caa45b29424bfee730ecab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:ee:4c:ec:91:31:ac:1a:9d:1d:73:da:c8:
37:34:87:4d:c9:64:12:f0:27:dc:10:e5:d4:b0:9a:
f5:8a:0d:4e:ed:f6:ea:47:56:bf:34:50:40:97:8f:
5f:79:5c:2c:9c:89:d4:2c:b9:db:cd:b0:e8:31:fc:
27:a5:cd:7f:53:f7:11:c9:28:30:a7:cb:60:e3:34:
07:45:35:d7:b0:3b:bf:d8:79:40:4d:79:20:09:7d:
4e:bc:a9:5f:ce:47:7c:7e:39:17:50:cb:ea:4d:10:
3f:ab:d5:4c:b4:59:fa:43:a9:d7:54:70:47:fe:58:
0f:79:5c:bf:1a:db:48:21:e3:d1:e3:f4:f3:54:50:
a2:5a:34:08:a2:95:77:22:00:34:bd:72:97:fe:73:
ff:20:11:2f:2e:53:1f:10:5b:11:b9:dc:c2:8c:bf:
87:08:7d:08:da:5c:28:53:12:72:e2:69:92:10:19:
28:99:c9:a8:53:27:71:bf:1a:7e:25:9b:ff:bd:16:
58:9d:af:f6:3a:50:ef:ab:f0:06:1f:02:7b:d9:18:
13:a7:5e:ff:c6:1c:b8:93:32:49:ed:32:b1:45:e0:
17:20:5f:4b:12:d3:30:b6:6b:1d:c3:77:c7:b1:36:
27:44:21:2f:02:0b:a9:b4:1a:90:90:0f:67:d4:20:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:6D:26:A3:85:8A:F3:97:CA:A4:5B:29:42:4B:FE:E7:30:EC:AB
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:97:82:03:a1:fb:3e:ae:c9:21:6d:59:25:6a:3e:41:9a:fb:
f8:db:9e:b5:16:06:36:39:c2:7a:fc:c0:88:f7:e5:2b:a3:a0:
68:00:af:57:f2:f0:9d:5f:25:d9:e7:c5:43:0b:13:ed:bc:5b:
2d:94:86:bf:bd:a9:f3:69:a2:17:84:9d:d1:0a:c6:ab:19:8e:
69:8d:63:d7:43:5e:f3:e6:d5:7b:2c:77:49:25:85:f5:6d:04:
aa:5a:1d:73:e2:c6:e4:20:9b:74:5c:b6:59:35:11:9b:26:0d:
5e:16:b5:f6:9c:dc:1f:ad:e7:f8:69:bd:c0:f6:2d:40:f9:88:
bc:f1:d0:48:60:90:e4:f7:91:f6:4c:77:86:44:52:39:17:1b:
a1:3f:c1:af:c9:a2:6d:60:f9:59:19:51:c2:f3:04:6b:e6:06:
b3:0e:9b:19:2d:d7:68:a5:7f:33:18:eb:9a:16:e3:d6:bd:56:
de:03:c4:16:de:e9:f0:d7:5c:c9:3a:c8:42:92:9f:97:e0:03:
a3:8a:24:7d:6c:18:f2:f8:4f:7a:71:de:4b:0c:06:79:f8:ba:
da:4e:c2:fc:ee:44:00:8c:d4:90:58:ca:b0:93:0d:c5:9e:09:
80:a7:e2:ad:0b:cd:6d:70:f8:d1:41:56:c8:de:d4:b5:d9:5e:
90:9b:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:46:51 2025 by rpki-client