Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: My4TigbJmZj76pC5rIgixRjjR+z9o7ObGTE9IEOTOfE=
Subject key identifier: 74:CE:04:8C:2F:2B:1D:2D:D1:56:13:BF:24:3C:32:79:33:B5:CC:29
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 0198989417C784F0B9D05B6D2800B5518BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0D47
Signing time: Mon 11 Aug 2025 10:01:38 +0000
Manifest this update: Mon 11 Aug 2025 10:01:38 +0000
Manifest next update: Tue 12 Aug 2025 10:01:38 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: oT+44uugSkrtDfr0dsl6+dOvGFVkTq0n1REBsDnZ9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:94:17:c7:84:f0:b9:d0:5b:6d:28:00:b5:51:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Aug 11 10:01:38 2025 GMT
Not After : Aug 12 10:01:38 2025 GMT
Subject: CN=74ce048c2f2b1d2dd15613bf243c327933b5cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:d6:83:36:09:25:d8:8b:96:ae:8d:42:19:
42:8c:40:03:41:0d:af:6c:a7:89:0a:be:a7:db:97:
86:f2:20:25:93:2e:f2:cd:66:9d:70:f6:e7:4b:d1:
f2:ba:67:c1:d0:4d:00:12:24:5b:28:c7:c5:e2:a5:
a7:79:3f:c6:17:3a:61:bb:2b:b5:38:21:06:3e:05:
f8:0d:94:ef:8a:42:83:f7:dd:c8:76:6f:1f:37:ca:
c1:c2:c6:e9:2f:15:f3:e0:2c:50:37:5b:8b:8d:ad:
a4:34:48:91:e6:c1:8c:b6:cc:7d:95:1f:31:cf:35:
29:1c:42:9b:a7:88:41:37:91:33:36:8b:ac:72:c3:
6f:7a:9b:38:72:c8:8c:b6:df:8f:75:fc:a2:a6:0b:
7d:38:dd:36:54:86:79:4f:a1:b2:e0:b6:f9:d9:64:
76:68:2d:47:99:ad:eb:4d:ac:9b:35:92:39:71:90:
46:88:3c:ef:5f:ce:b5:df:22:b2:06:d3:7a:bd:ae:
da:63:71:2b:9b:c4:ac:dd:aa:2e:8c:83:68:8f:dc:
1c:be:17:38:be:23:ab:d7:e3:a1:64:ab:82:6b:b0:
1d:ef:c5:b6:9b:6b:fd:3f:a9:2d:a6:37:a0:06:ef:
a3:3e:64:96:5a:a8:bc:6c:24:a6:d9:c2:c8:ea:c6:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:04:8C:2F:2B:1D:2D:D1:56:13:BF:24:3C:32:79:33:B5:CC:29
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f6:3e:8d:08:45:8d:bc:58:f6:2f:da:fb:8c:71:2a:70:19:
41:01:c3:17:f8:8a:e0:10:17:fd:df:66:2c:20:a0:a5:db:5a:
50:00:8c:93:2c:71:5d:fd:d8:10:6b:88:a3:72:cc:27:67:35:
cd:9c:0a:9b:42:05:9d:9a:da:da:a4:bc:f3:08:f3:6f:b6:ac:
d3:07:b9:9f:a8:f6:d7:c6:90:2d:06:01:8f:76:6c:89:10:86:
ff:fb:d0:dd:2f:d2:5b:f8:4c:ef:8e:ec:9b:e3:de:d4:18:fd:
d9:d9:cc:12:d1:92:f5:67:e6:41:3c:72:8e:1a:a5:7b:0e:ff:
35:57:ed:70:5b:82:aa:e4:2a:5a:aa:6c:db:eb:b3:52:7f:b6:
2b:0a:d8:7a:91:74:84:6e:fb:61:34:5f:ba:a5:ca:34:5e:8b:
67:7f:61:0c:98:22:e3:d2:29:47:ec:7e:33:58:3d:73:91:1f:
99:fe:91:b1:10:62:45:2b:c9:95:01:02:48:12:dd:6b:c5:45:
ba:b3:30:8f:61:6a:7b:b0:c9:9e:b5:95:fd:13:44:94:b2:d7:
b3:b7:ae:35:31:56:86:d3:ba:90:83:89:80:09:c6:58:82:80:
0b:b9:c4:45:a3:1d:1d:98:4a:b9:4a:90:62:75:e9:8d:7a:34:
a1:c5:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:36 2025 by rpki-client