Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: nKCkAduLBNi24W97KahplXWdETjiXZxSdmZwWvzch6E=
Subject key identifier: 80:6C:CA:C5:EF:07:53:44:B9:0B:1C:47:85:DA:E4:D4:5C:49:5E:A9
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 01976960F3058C418E8DFF2387C62BCAF509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 08BF
Signing time: Fri 13 Jun 2025 13:00:50 +0000
Manifest this update: Fri 13 Jun 2025 13:00:50 +0000
Manifest next update: Sat 14 Jun 2025 13:00:50 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: o8aISL7Yt2ftSwRPdtJAF3dAhwWDaDZRVJY/WMWzYnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f3:05:8c:41:8e:8d:ff:23:87:c6:2b:ca:f5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Jun 13 13:00:50 2025 GMT
Not After : Jun 14 13:00:50 2025 GMT
Subject: CN=806ccac5ef075344b90b1c4785dae4d45c495ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2e:55:a5:bf:11:63:e8:e0:ab:ee:39:3c:f9:
1b:37:f5:39:c5:74:61:8b:45:dc:07:97:ba:e3:f0:
2c:aa:d9:c5:26:02:f2:55:df:0b:98:14:2b:ce:c9:
e0:ce:ba:09:e2:dc:04:56:ca:d8:07:7d:09:bd:90:
ab:b0:a4:1d:9b:73:a2:6e:d5:b0:73:98:0d:cc:0f:
9a:7d:7d:45:41:77:ad:62:a2:62:c9:d3:2f:1a:b0:
88:b1:1b:69:19:72:7d:38:53:dc:7d:de:04:9b:dc:
6d:77:dc:ef:5d:c2:b7:42:28:b1:2f:04:52:b8:f1:
ed:65:b0:0e:4d:b9:2d:47:2f:87:85:d6:08:c7:84:
9c:e8:ed:be:30:48:22:02:87:49:1f:dd:51:1c:34:
d1:aa:9a:a7:51:fb:52:8d:da:9f:ec:23:53:2b:4e:
f7:ad:e3:52:65:53:4f:d2:fc:00:62:df:de:25:4b:
fe:c0:8b:a4:72:1d:88:74:d4:a3:7c:8c:20:9b:f0:
10:df:c1:63:36:03:0b:98:8a:d7:cb:ea:e9:f8:c1:
3d:b2:b2:a5:fd:6a:a6:78:f2:97:9a:a5:95:21:53:
b7:13:ce:4a:c5:12:44:14:26:9e:11:15:72:9c:3f:
d4:cf:86:7d:75:6c:b5:57:c5:0e:0b:c0:f3:a6:5d:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:CA:C5:EF:07:53:44:B9:0B:1C:47:85:DA:E4:D4:5C:49:5E:A9
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:8d:d4:ad:76:c6:98:a5:20:d5:0d:e7:73:a1:e7:1b:63:
50:b3:99:fd:4a:96:37:4e:db:f2:4b:2c:ce:eb:f0:03:98:cb:
bf:3d:01:ff:fc:ff:c7:b5:43:ae:ba:e4:d7:31:6c:0a:b1:bd:
ee:4f:e5:ad:9d:b1:ce:75:d0:0d:34:ae:02:f2:95:23:45:54:
6c:84:61:8b:5a:5d:6d:13:da:0a:a5:2b:6f:a5:c6:b2:96:69:
56:77:c2:56:18:e0:36:91:e1:14:63:8b:e3:f3:0d:da:c9:d0:
2d:e7:1e:3e:5e:a5:7f:a5:91:39:f7:0f:bb:84:f9:07:d1:c7:
6f:1b:b6:b2:26:c3:bf:34:ed:a2:1e:e5:21:39:0f:74:d3:8d:
74:d2:d9:a4:dc:b8:45:39:3e:4e:6b:6a:cf:7b:9b:ae:dc:e5:
43:d4:78:a5:05:2e:05:c5:3e:e4:09:f8:8f:da:be:19:ad:6b:
c5:2f:2c:f6:58:ef:88:95:20:1b:e7:ee:f6:e3:e0:75:4a:9d:
4e:2e:bc:6e:17:4f:44:4e:18:7a:a7:1d:40:ba:fe:9c:b0:34:
72:67:1c:a0:ec:df:34:7b:4d:1c:fe:f7:0e:f0:64:18:0e:18:
2d:4e:19:1b:3c:39:fc:6c:23:32:14:d6:59:bf:52:a3:43:d5:
56:9f:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:28 2025 by rpki-client