Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier: JzBzvHlWS4FVHYITz2xFlXHXOXZW2Soo6hr6P398MsE=
Subject key identifier: 6C:9A:C6:B9:9D:23:7C:D2:F3:DF:2B:DB:1D:40:EA:E0:94:2C:04:6C
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial: 019896007D191E6F78DFC450BB50613CD8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number: 0159
Signing time: Sun 10 Aug 2025 22:01:10 +0000
Manifest this update: Sun 10 Aug 2025 22:01:10 +0000
Manifest next update: Mon 11 Aug 2025 22:01:10 +0000
Files and hashes: 1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: +erZYSRN1mW6Lz0JMnVhn9uX6DpISWT5LBI4VV3DPP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:7d:19:1e:6f:78:df:c4:50:bb:50:61:3c:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Validity
Not Before: Aug 10 22:01:10 2025 GMT
Not After : Aug 11 22:01:10 2025 GMT
Subject: CN=6c9ac6b99d237cd2f3df2bdb1d40eae0942c046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:13:b5:cd:15:e6:50:5f:96:86:d7:a8:cc:
9c:51:7f:5b:03:76:b6:4d:eb:c7:ec:aa:01:7b:ea:
85:ad:da:7e:2c:9d:43:a2:b3:cd:e4:7d:04:05:e8:
67:01:87:4a:6f:30:c6:b3:82:a0:8d:91:15:33:54:
11:06:bb:71:d2:8d:04:6d:c2:b4:40:85:6a:55:d0:
fa:b0:b8:4c:88:f4:da:fe:84:80:25:66:27:6d:8b:
5f:d1:50:94:34:c5:97:7b:06:d3:77:25:68:d4:b9:
34:09:cb:86:6a:61:43:fd:53:4d:ba:94:c1:bf:c7:
ee:67:c1:b7:87:90:27:7b:66:28:05:ce:92:13:da:
7c:ee:e2:4d:bc:d5:ad:4b:4c:81:59:f1:bc:4a:6e:
91:ae:6a:5b:26:a0:70:9e:e4:0e:e9:0e:2b:34:e8:
8d:71:ea:cc:72:11:12:5f:0f:c7:e5:be:d7:b9:0c:
78:a2:a6:1f:4f:aa:b3:c8:e2:5d:26:21:94:c7:a0:
4c:c8:e4:fb:dd:72:cb:09:3f:0a:b1:66:56:b9:dc:
79:3c:23:eb:65:38:85:82:d9:20:9a:dd:53:4d:4a:
99:f8:51:5a:4b:83:b7:77:22:e4:f1:b1:61:b3:c8:
7f:3b:f6:2a:3c:db:08:0d:42:8a:a8:60:eb:4b:14:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:C6:B9:9D:23:7C:D2:F3:DF:2B:DB:1D:40:EA:E0:94:2C:04:6C
X509v3 Authority Key Identifier:
keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:21:b4:3e:2f:85:43:d4:4a:77:e0:19:87:9d:86:58:58:3b:
5c:90:db:15:b7:43:e3:45:29:f7:6a:a1:f9:63:e0:a4:61:4e:
39:ba:32:d1:16:74:06:b1:f1:ed:3c:02:1c:99:42:6d:41:20:
60:ba:30:e2:8c:8d:e1:d1:17:c4:eb:f0:55:c7:51:65:16:90:
ca:2c:96:16:a7:64:64:39:cb:bc:cc:6c:ad:d8:fe:0e:e3:3e:
38:e2:aa:0c:46:94:1a:d1:69:6f:a6:8f:02:bd:59:53:3e:9b:
96:5b:2f:b6:e3:39:73:d6:a9:3e:82:f9:0a:60:a9:47:79:d3:
9a:11:1e:8b:0d:fb:91:01:05:1d:7b:1d:51:3a:c3:e9:b5:21:
ae:f0:3d:1d:d5:2d:b1:dd:da:5c:7f:f1:48:74:f3:fc:72:4a:
d8:07:7b:55:e0:88:bc:ad:38:a9:9a:80:a7:af:c5:17:83:a9:
1d:99:36:0f:9a:e7:e1:bb:b7:21:e2:4c:8e:c6:8d:9d:81:1a:
c2:40:db:5e:53:b3:2b:cd:bf:ab:8b:b7:5f:55:12:96:2e:d5:
7d:78:7d:a5:8f:2c:66:c6:34:b1:88:49:40:7a:6f:80:a2:7c:
4b:bf:d6:24:9a:91:ed:4a:29:01:85:66:79:07:db:98:a6:f2:
ef:02:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:15 2025 by rpki-client