Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: XPlppnVwW88Cf+TYOpmmumOzvxcan9Idma3I7Z+/93k=
Subject key identifier: 69:6C:F1:EA:1E:7A:D3:37:CF:B1:63:8A:54:D0:C9:88:07:4C:A8:FA
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 01989F032541C352385CED11473711DF032F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 096F
Signing time: Tue 12 Aug 2025 16:00:40 +0000
Manifest this update: Tue 12 Aug 2025 16:00:40 +0000
Manifest next update: Wed 13 Aug 2025 16:00:40 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: v2wRh8WbrT+pshQe/Ky4U30Xn0Yd4MFE/h8ddQ3d1Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:25:41:c3:52:38:5c:ed:11:47:37:11:df:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Aug 12 16:00:40 2025 GMT
Not After : Aug 13 16:00:40 2025 GMT
Subject: CN=696cf1ea1e7ad337cfb1638a54d0c988074ca8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:f5:a7:6e:49:cd:e2:fa:6f:7a:70:e8:ac:
85:5f:cf:63:7e:9e:55:f6:e4:e7:f8:9d:19:a5:2c:
8b:bf:24:93:2b:f2:94:47:27:c6:43:eb:de:88:6f:
82:4c:5a:fa:02:69:8d:db:e7:0c:08:a5:60:39:ce:
53:cd:9a:00:d3:9a:37:6e:62:85:c7:03:98:c7:0b:
73:01:a9:3c:2f:a9:9a:39:f9:fd:15:96:91:dd:1a:
84:91:4f:29:e5:d6:87:c4:86:fb:e2:7a:b2:4d:03:
f2:11:ed:0b:76:33:af:2c:da:15:3e:32:74:a9:d8:
3a:e9:22:89:a5:7c:98:f4:6b:e2:30:dc:ed:75:2f:
e0:5d:0d:88:34:6f:fd:17:99:8b:60:f7:a7:51:2f:
34:ab:13:c7:fd:ef:59:8a:7b:df:96:d6:c0:2d:c1:
bc:28:8f:f9:89:b1:ea:7e:a3:6c:61:3d:5e:b7:d3:
8d:3f:40:ac:6c:75:16:9a:79:36:29:12:9f:18:91:
8b:ce:65:8a:27:f3:e6:a7:44:ef:42:a5:b5:6a:eb:
9d:d6:9b:83:42:ef:f4:6a:e3:db:f4:41:ca:02:4f:
d0:25:e2:d9:c8:6e:87:ac:fe:5f:df:70:60:8c:a2:
2d:38:b9:39:e3:9d:99:52:16:91:99:25:a1:ef:d7:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:F1:EA:1E:7A:D3:37:CF:B1:63:8A:54:D0:C9:88:07:4C:A8:FA
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:2d:55:7a:33:ba:a7:05:a3:9e:a3:ae:d9:9b:6f:f9:30:
ed:83:d7:2f:ed:7e:15:03:af:b3:5f:0f:19:85:19:9a:b9:11:
f2:72:3b:09:d3:8a:c9:36:10:8b:ab:22:db:d0:89:1a:9d:79:
c5:01:1e:67:40:62:fc:6c:b4:0b:ed:42:d6:0c:57:f6:99:13:
c1:44:b4:26:14:c4:43:a6:b6:8b:f7:64:83:60:43:52:1e:33:
1d:d1:f8:69:10:e1:6d:e9:31:01:9c:f8:82:67:a5:44:77:4b:
d7:c6:fc:c6:44:b3:a7:06:8a:de:96:c7:7a:78:7f:03:ed:3d:
0b:b2:d4:13:c7:46:2f:2b:2f:11:e0:ac:3b:07:8d:23:45:d7:
a8:1f:98:f2:69:e1:a7:9d:5d:d3:12:24:37:f2:0b:72:a2:88:
7d:f2:b0:b7:9d:27:2d:14:90:ba:3b:cb:a8:01:7e:d9:29:cd:
ec:e7:15:67:93:8f:e7:7e:23:63:80:72:04:83:68:42:28:c0:
ef:a5:6a:31:58:b5:1b:70:ad:9f:52:90:b9:5e:f4:8b:96:dd:
c3:8c:66:d3:e5:9b:b2:55:17:be:eb:14:a3:d7:b9:0f:81:74:
4d:b1:58:8c:9e:42:bf:ac:da:09:21:78:65:48:bf:f6:d1:12:
5b:66:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:52 2025 by rpki-client