Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
File: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft (raw, json)
Hash identifier: E9hHf4qbDNNP0Toj8NvYj/9skwAxhXnZ3M3W9gZfotE=
Subject key identifier: BD:74:0C:29:AA:85:D2:D3:E1:54:13:AC:03:0F:B0:B4:91:6A:40:24
Authority key identifier: E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
Certificate issuer: /CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Certificate serial: 01987D8AC8AC4DF91D9BED1816973D4D5855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
Manifest number: 1088
Signing time: Wed 06 Aug 2025 04:01:43 +0000
Manifest this update: Wed 06 Aug 2025 04:01:43 +0000
Manifest next update: Thu 07 Aug 2025 04:01:43 +0000
Files and hashes: 1: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl (hash: 48BGDxHU7kuHIYv3bz/pNdACW1/LP0PjSGnHKZ9eCRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:c8:ac:4d:f9:1d:9b:ed:18:16:97:3d:4d:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Validity
Not Before: Aug 6 04:01:43 2025 GMT
Not After : Aug 7 04:01:43 2025 GMT
Subject: CN=bd740c29aa85d2d3e15413ac030fb0b4916a4024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:e7:39:bc:cf:e8:ac:67:73:30:1e:4a:ca:
73:62:26:6b:58:11:8c:f6:e1:1e:3a:e0:c0:86:29:
2c:0c:ce:71:42:bd:1a:7c:34:7e:fe:bb:64:f1:dc:
8f:7f:f7:4f:6f:7b:9b:c4:68:3e:e4:62:55:56:d9:
c3:7c:98:f2:32:df:20:b4:4e:bb:38:1c:09:6c:c2:
02:9b:92:4b:ab:ff:20:03:fa:0d:2c:a2:c9:6d:95:
92:55:eb:30:f5:3c:82:c3:e6:16:4f:76:9b:9e:b3:
e5:a8:e6:01:28:78:65:f4:45:f3:33:40:c1:2a:43:
34:e7:7b:06:d8:02:e2:41:91:4e:b6:30:8a:de:14:
cc:e7:82:20:70:2f:13:e7:22:24:d6:7d:c3:4a:22:
cb:2e:89:1f:8a:76:f3:bc:f2:29:b4:53:98:39:cf:
38:5e:ba:9b:b4:36:ac:9a:8d:b6:0c:cc:ca:26:d8:
95:24:35:c9:81:fa:23:c3:ea:16:fa:47:0f:6c:34:
4f:70:39:a2:52:8e:20:78:ff:0d:17:ff:71:21:3e:
f2:80:7f:77:74:f0:f7:98:62:68:92:a8:53:e3:df:
9f:53:24:8d:23:fa:d1:d3:f8:8e:15:08:d5:0b:59:
8e:67:4d:69:13:0d:00:8a:d1:da:69:1d:06:69:02:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:0C:29:AA:85:D2:D3:E1:54:13:AC:03:0F:B0:B4:91:6A:40:24
X509v3 Authority Key Identifier:
keyid:E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:61:da:41:38:41:c1:56:84:55:5a:bf:72:d1:ca:54:98:
d2:03:f4:84:57:ed:9e:e9:8a:50:2a:b6:32:8b:d6:96:6f:d6:
16:7e:4e:67:cc:11:c2:84:8d:c7:52:8e:4f:fb:04:f5:bc:88:
3a:58:c3:cd:03:1c:e0:7d:1f:bf:b4:f7:ed:ad:84:0b:63:36:
b3:0f:d2:c9:55:4a:e2:71:fd:2d:d4:30:df:38:9a:94:32:5c:
20:67:d6:7d:d1:3a:9b:d9:d4:0c:77:90:87:d3:85:a5:93:fb:
75:92:a4:62:b2:0b:1b:22:55:7e:13:19:de:c6:b1:05:8b:e8:
cd:51:98:c7:ee:f7:14:b6:6d:ec:2d:4f:c2:98:5e:f7:ce:37:
93:28:f1:ef:48:19:85:2f:2a:e5:db:01:58:1f:c0:ff:2f:19:
2f:87:01:70:2d:35:1b:10:32:38:ec:2e:b8:34:a5:1d:7b:96:
99:88:fd:df:15:5d:a5:23:2c:de:3d:de:14:26:5e:12:f7:21:
2f:0e:28:0c:29:3e:bf:ab:ad:c1:6a:c9:09:c3:85:c6:2c:e2:
73:74:de:9b:16:15:1d:36:de:c9:11:9b:83:99:62:e9:76:06:
36:e2:9d:95:27:87:31:8c:df:57:ca:5d:f6:69:c4:25:f3:3d:
b2:e3:95:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9isisTfkdm+0YFpc9TVhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Y2JjMzMzMWFlY2M5NTc0ZTc1OGUxYzgzZDkyZDkyMTkx
YmQ1YjEwHhcNMjUwODA2MDQwMTQzWhcNMjUwODA3MDQwMTQzWjAzMTEwLwYDVQQD
EyhiZDc0MGMyOWFhODVkMmQzZTE1NDEzYWMwMzBmYjBiNDkxNmE0MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusHnObzP6KxnczAeSspzYiZrWBGM
9uEeOuDAhiksDM5xQr0afDR+/rtk8dyPf/dPb3ubxGg+5GJVVtnDfJjyMt8gtE67
OBwJbMICm5JLq/8gA/oNLKLJbZWSVesw9TyCw+YWT3abnrPlqOYBKHhl9EXzM0DB
KkM053sG2ALiQZFOtjCK3hTM54IgcC8T5yIk1n3DSiLLLokfinbzvPIptFOYOc84
XrqbtDasmo22DMzKJtiVJDXJgfojw+oW+kcPbDRPcDmiUo4geP8NF/9xIT7ygH93
dPD3mGJokqhT49+fUySNI/rR0/iOFQjVC1mOZ01pEw0AitHaaR0GaQKHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL10DCmqhdLT4VQTrAMPsLSRakAkMB8GA1UdIwQY
MBaAFOnLwzMa7MlXTnWOHIPZLZIZG9WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wODNmMDEtNzFmYy00M2FkLTgxYWIt
N2FmZjVjNDMwN2YwLzEvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wODNmMDEtNzFmYy00M2FkLTgxYWItN2FmZjVjNDMwN2Yw
LzEvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Rh2kE4
QcFWhFVav3LRylSY0gP0hFftnumKUCq2MovWlm/WFn5OZ8wRwoSNx1KOT/sE9byI
OljDzQMc4H0fv7T37a2EC2M2sw/SyVVK4nH9LdQw3zialDJcIGfWfdE6m9nUDHeQ
h9OFpZP7dZKkYrILGyJVfhMZ3saxBYvozVGYx+73FLZt7C1Pwphe9843kyjx70gZ
hS8q5dsBWB/A/y8ZL4cBcC01GxAyOOwuuDSlHXuWmYj93xVdpSMs3j3eFCZeEvch
Lw4oDCk+v6utwWrJCcOFxizic3TemxYVHTbeyRGbg5li6XYGNuKdlSeHMYzfV8pd
9mnEJfM9suOV8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:35 2025 by rpki-client