Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
File: 6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json)
Hash identifier: dOqUUWSsrDQWB8voCBE1DGWk9gpSEwGbzCd4N95jGNE=
Subject key identifier: 2D:DF:0B:5F:21:06:ED:FB:32:E4:2E:60:92:C5:37:BA:96:16:F9:1B
Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
Certificate issuer: /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Certificate serial: 0198952502DDDF2223FE2FE6A185310F2D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 18:01:27 +0000
Manifest this update: Sun 10 Aug 2025 18:01:27 +0000
Manifest next update: Mon 11 Aug 2025 18:01:27 +0000
Files and hashes: 1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: DXASeoRoNIUoWLBLlU9ss0lz1j4mj6qa4Rneiqw8sd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:02:dd:df:22:23:fe:2f:e6:a1:85:31:0f:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Validity
Not Before: Aug 10 18:01:27 2025 GMT
Not After : Aug 11 18:01:27 2025 GMT
Subject: CN=2ddf0b5f2106edfb32e42e6092c537ba9616f91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:0b:ef:96:4e:18:77:e9:fa:fd:45:8b:d8:
f5:05:d5:cf:20:0a:75:77:1f:a3:4c:a8:fd:e1:96:
38:0b:51:cf:47:d6:1f:c0:f5:d6:bd:3c:c3:eb:38:
20:20:ae:48:46:b6:41:e3:98:7a:83:e4:d5:36:28:
29:d8:b9:2c:44:2a:9d:cf:53:82:30:6a:e4:79:fe:
37:30:f3:37:82:54:fd:e3:c9:89:55:ae:f4:80:ef:
07:d3:ae:c9:da:b5:2b:7f:be:4d:8d:09:2d:d1:c9:
fe:b3:5b:b8:8a:d6:81:7e:f4:33:25:01:95:ad:7d:
09:f2:7d:c3:54:23:0a:a9:cc:e2:a9:8c:8b:10:e0:
fe:3f:24:8e:9a:2c:9b:14:c1:b6:3a:14:79:98:50:
41:9b:72:ec:bc:36:31:65:62:e7:87:31:92:73:eb:
89:53:fc:00:34:7c:96:32:9e:2d:05:30:b3:05:9e:
aa:10:cb:31:cf:a9:6b:d6:ef:c6:7b:5c:96:fa:53:
2e:38:1b:bf:d9:83:63:2f:8b:3e:e3:bf:85:cd:60:
c7:f5:cb:88:14:91:74:26:e8:68:1f:29:a8:88:88:
ab:09:63:7f:46:29:d0:77:48:e9:5f:30:76:1d:aa:
53:8e:05:92:15:c8:f7:40:32:b7:8d:42:9b:d9:e6:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:0B:5F:21:06:ED:FB:32:E4:2E:60:92:C5:37:BA:96:16:F9:1B
X509v3 Authority Key Identifier:
keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c7:e5:30:2b:59:0b:1f:f6:69:29:da:33:b1:b0:dd:40:99:
69:f5:00:2b:f4:a8:ca:93:b5:c5:27:83:f1:1b:82:a9:cc:be:
3e:82:60:52:cd:ba:eb:81:96:2c:9a:f2:c1:bd:9c:c8:6d:2c:
d0:11:55:d8:42:4b:ee:cb:d6:a7:5d:8f:6d:3f:d8:05:92:e3:
5f:9b:b6:9c:93:8c:28:cb:f8:0a:18:67:2f:33:32:6b:52:f8:
c0:24:d0:41:68:a5:41:79:72:37:9a:81:d8:60:d3:3b:50:90:
78:a6:d7:bd:fb:85:25:cd:37:9b:7c:eb:f1:29:43:d1:83:fc:
3b:b4:de:6c:39:7b:04:cf:d4:a9:76:a8:5d:00:6f:dd:6b:b6:
4e:e7:24:a7:b9:c9:c1:25:e9:92:2c:2a:52:66:43:9b:66:8f:
94:dc:f0:4f:35:26:f5:56:51:56:d1:20:44:33:33:e1:f2:ac:
0f:4c:2b:34:f7:14:43:ad:12:b6:c7:c1:d3:b7:58:95:b4:b8:
d8:c4:52:4e:a2:d2:cb:9e:27:06:35:44:92:47:4b:9c:cd:19:
a5:40:07:f2:23:67:1c:54:b3:e2:af:7c:9f:8d:8a:38:ec:69:
b0:72:3d:f6:2e:9f:66:0f:10:21:fb:e4:e7:0e:c8:54:e0:a8:
6c:fb:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:29 2025 by rpki-client