Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
File: h6xJPPKny2pLNPTYtva3eyqVXpc.mft (raw, json)
Hash identifier: bZqNaxmaRlcw0uEXUTUI6x5uaWCwssM92KdySIrtqak=
Subject key identifier: 98:E4:69:76:CE:A2:2E:D3:8A:C5:5D:DD:05:F2:77:69:7E:8A:70:F9
Authority key identifier: 87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97
Certificate issuer: /CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
Certificate serial: 01987ED33DC7A6347957789AF38A5E7EB0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
Manifest number: 0B61
Signing time: Wed 06 Aug 2025 10:00:29 +0000
Manifest this update: Wed 06 Aug 2025 10:00:29 +0000
Manifest next update: Thu 07 Aug 2025 10:00:29 +0000
Files and hashes: 1: h6xJPPKny2pLNPTYtva3eyqVXpc.crl (hash: 1g34m+gwozUhVqYgvtBoth9Seb8Dbhnpf/0WIryR9Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:3d:c7:a6:34:79:57:78:9a:f3:8a:5e:7e:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
Validity
Not Before: Aug 6 10:00:29 2025 GMT
Not After : Aug 7 10:00:29 2025 GMT
Subject: CN=98e46976cea22ed38ac55ddd05f277697e8a70f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:50:9c:c6:e8:6d:0d:72:fe:97:f3:6f:4d:
af:5f:df:4c:ab:67:c5:07:4d:a3:1b:6b:8c:c1:f4:
54:2a:c7:68:8d:ed:e9:d7:c8:0e:6e:fd:69:32:af:
6f:c9:a9:ab:9b:48:f8:5d:61:cd:54:5d:95:57:82:
e9:32:f8:ef:9e:00:f5:81:63:44:b9:88:04:28:d0:
67:6c:49:d2:0b:34:fb:e1:2f:40:c6:50:87:eb:d4:
52:cb:fd:e2:ce:f9:ee:c0:bd:d4:be:3d:b1:39:3f:
97:fb:3d:2b:47:e9:bf:91:4e:d3:69:a7:1b:0f:3b:
f0:a0:72:14:57:96:27:74:e5:72:bc:3e:f6:ce:c9:
de:ff:eb:c0:d2:b1:f8:e9:19:2c:b0:e9:af:2c:98:
08:c2:cf:84:47:f5:73:43:53:3c:9b:16:4a:3a:32:
af:7a:13:c2:5e:83:88:dd:ad:30:6d:a5:9c:7e:71:
1f:65:11:1c:63:df:5c:52:47:5a:de:3b:d3:b5:f0:
a4:db:6a:d5:d8:7c:39:25:5c:8c:7a:bd:ff:27:5d:
62:0f:ef:1f:32:a4:08:8a:91:e7:f3:22:ce:67:de:
33:93:2e:1e:0a:99:23:42:d1:46:1e:52:ee:3d:f9:
95:2b:cc:85:cd:63:50:90:46:78:08:50:c6:c8:43:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:69:76:CE:A2:2E:D3:8A:C5:5D:DD:05:F2:77:69:7E:8A:70:F9
X509v3 Authority Key Identifier:
keyid:87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:4e:4a:bb:87:7f:cd:4d:99:1e:c3:dc:36:15:ea:20:52:
2c:0f:0c:cb:78:26:3a:6f:a4:f2:09:e5:38:a6:4f:c4:60:27:
c8:dc:8e:52:73:e4:57:22:e3:76:24:3b:11:e4:14:0c:35:46:
ae:37:17:c2:7f:2d:ce:b8:38:05:8c:b4:49:a4:09:70:be:1d:
4b:6b:51:0e:80:15:97:18:53:58:22:85:f4:ca:63:e9:d1:21:
53:e9:f7:59:b9:6f:a7:a1:ab:2f:ff:20:10:72:78:4c:e6:0c:
3c:f0:b0:95:9d:80:ec:8b:1f:6a:a1:8d:5d:3f:48:01:42:56:
c3:3f:37:63:1e:99:e4:76:82:e6:fc:ad:4d:99:2e:64:83:13:
e2:c1:eb:92:c8:28:cd:45:fe:7c:e8:67:6d:d4:b2:43:16:3f:
96:41:be:a9:57:76:1d:37:00:d2:f5:8c:bd:ab:36:c9:12:c0:
1b:c9:c5:c1:0b:26:ff:01:cf:8e:c1:1a:cb:77:35:17:ab:49:
39:67:4a:0c:6b:5b:14:75:e3:8a:f1:ac:a1:5e:f8:f2:29:e2:
cf:10:6b:8a:da:78:eb:cf:91:96:ce:ad:26:57:0a:c7:0f:af:
b6:58:e5:c8:6a:22:85:f6:75:67:53:5a:44:4c:bb:11:43:e8:
df:93:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:11 2025 by rpki-client