Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: waxI0kjiyg5HRH3pkFZMCpRdUPx9BJySUr6uLBl/FwI=
Subject key identifier: 14:EA:3C:27:1C:04:18:59:6D:38:69:3C:91:C9:6D:3E:81:F2:5B:6F
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019873E33E8DCE156B9E2529256886A157DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0949
Signing time: Mon 04 Aug 2025 07:02:09 +0000
Manifest this update: Mon 04 Aug 2025 07:02:09 +0000
Manifest next update: Tue 05 Aug 2025 07:02:09 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: xM6+CEM6b2z46DHaxIzG9WfQcgxwRdwDyc1chP/SShE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3e:8d:ce:15:6b:9e:25:29:25:68:86:a1:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Aug 4 07:02:09 2025 GMT
Not After : Aug 5 07:02:09 2025 GMT
Subject: CN=14ea3c271c0418596d38693c91c96d3e81f25b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:5a:3e:55:3c:e0:55:7f:3c:37:e9:f1:96:
fb:ba:7d:cb:23:a9:c5:99:76:f3:50:04:83:4b:c2:
73:c4:5e:7a:7b:a8:6a:b0:14:eb:cd:c6:bd:e5:25:
00:c2:8b:9f:38:d1:6a:3e:6d:7e:ed:c6:ef:09:90:
66:c8:0f:a8:c3:e2:ba:30:e0:cc:1c:6f:aa:53:92:
e3:0f:9a:74:98:8b:3c:07:7d:5e:b0:ba:a0:24:35:
23:95:90:f9:59:76:79:1e:56:67:31:4e:1a:ae:c2:
00:af:4b:33:81:b3:0f:c0:fa:57:f0:11:d6:a7:11:
9d:57:3c:fb:09:e7:92:5f:4c:53:9e:ba:86:93:6d:
3a:1f:20:6c:7f:e2:f2:4a:4e:d2:a0:6e:bf:1e:ea:
12:5b:0c:9f:2b:3b:51:2c:c6:82:ce:3f:62:82:70:
5c:9e:cb:9e:d6:0f:da:0d:70:54:d0:b4:ca:a9:c2:
8d:0a:af:ad:be:54:91:cd:68:1d:00:30:b8:86:9e:
83:a0:50:e4:00:1d:7e:99:13:12:67:8e:9d:41:18:
cc:81:00:b6:8a:c8:48:56:22:43:8f:31:12:42:eb:
25:b1:9a:45:d7:f8:70:b1:d1:ca:5c:0d:26:5a:ca:
80:df:3e:ef:dd:09:97:97:4a:e7:9d:b6:2c:76:f7:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:3C:27:1C:04:18:59:6D:38:69:3C:91:C9:6D:3E:81:F2:5B:6F
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:df:f6:96:fd:f7:7c:ae:e0:54:90:35:10:d8:51:81:cb:
8f:ce:e0:cb:50:ac:ef:0d:ed:ef:d2:d8:49:1e:5c:d9:b7:51:
68:7e:57:49:42:d7:3a:88:2b:db:4a:2b:66:ad:00:af:44:bb:
08:b8:a2:f4:67:97:9c:42:1d:fe:19:cf:c0:d4:eb:74:33:30:
c3:07:db:83:39:37:d4:2d:bc:85:38:1f:c3:a6:af:4e:d3:f1:
ab:a5:62:58:d9:28:ad:ff:ec:19:2c:97:fc:71:8c:5a:fa:5c:
ea:c6:8f:f7:be:e2:0b:6a:8e:ca:91:1f:67:b2:3f:b6:75:ab:
b6:7f:8d:f0:7e:5a:ab:4f:58:81:6e:ae:17:b2:99:2a:c7:5a:
9f:e4:b2:0c:8b:d9:97:b7:3f:2f:d1:3f:25:6c:82:eb:b9:36:
b4:cc:04:a2:39:a1:d9:7f:b9:da:04:09:ae:fb:77:7f:e8:7e:
38:92:2b:c1:d4:22:b5:c5:5d:c4:f4:88:14:fa:6c:cc:0c:84:
c1:3d:3f:2a:bf:91:e4:1d:b6:3e:0f:ed:45:08:db:be:fe:8d:
8c:36:b9:a5:c9:8e:78:5e:16:de:bf:ee:38:d4:d9:45:28:df:
de:80:35:11:b3:5f:ec:e2:49:30:d8:8f:73:d0:ea:28:65:3a:
63:61:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:35 2025 by rpki-client