Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: iw6aqy4Fy/CUdLtReBcfLM7CELnJUHGucTKzP4IjQNA=
Subject key identifier: EA:25:1E:0A:88:7B:95:0E:E2:C7:FF:0A:45:47:15:71:93:B0:57:EB
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 01987DF7CDFDFE5D989B36C4202A75DB3D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 10F7
Signing time: Wed 06 Aug 2025 06:00:48 +0000
Manifest this update: Wed 06 Aug 2025 06:00:48 +0000
Manifest next update: Thu 07 Aug 2025 06:00:48 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: HK2kAeOoXujPk4x8DC4ty6LldoNol9zVdJeEvMi3sso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:cd:fd:fe:5d:98:9b:36:c4:20:2a:75:db:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Aug 6 06:00:48 2025 GMT
Not After : Aug 7 06:00:48 2025 GMT
Subject: CN=ea251e0a887b950ee2c7ff0a4547157193b057eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:94:43:ae:b8:18:9a:7c:a3:84:db:ff:a2:
3d:8c:e5:36:52:e6:f3:52:c3:56:63:ef:3d:66:43:
b9:1d:65:be:b8:2f:55:d6:85:3f:cd:3f:a9:3f:cf:
a9:a9:99:40:83:c1:27:3c:77:41:06:df:e4:26:2f:
ab:9e:35:38:73:bd:49:d5:80:56:0c:18:f9:e3:18:
a8:31:8e:4f:95:5a:51:e9:3c:fe:c3:6f:f1:79:eb:
25:e2:92:12:f8:e8:de:c4:15:0e:58:6e:80:9b:3d:
fe:cd:2a:09:cf:94:35:d5:48:f7:a0:ff:93:7a:c8:
8a:b4:ec:48:f2:59:80:26:78:4d:31:56:d4:41:4d:
6a:22:cd:17:72:56:96:88:e1:90:e4:7f:a1:e2:09:
5c:f2:4b:b6:5f:6a:d9:6a:9c:35:91:7f:a7:fc:94:
69:5b:bc:c7:7f:0d:69:d5:ef:d8:ad:9a:03:bc:04:
85:f4:32:9c:3b:47:af:89:57:5d:1f:f2:e7:00:d5:
45:e1:24:54:65:19:13:2e:7d:5d:44:e7:c5:f0:fa:
84:1d:0b:e9:00:f3:41:80:ff:b4:2a:a5:0e:64:cc:
61:ef:11:2c:e6:38:a1:29:fa:71:72:a5:6f:ac:37:
9c:7b:5a:aa:f8:51:d5:65:4b:f0:78:03:c8:b8:62:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:25:1E:0A:88:7B:95:0E:E2:C7:FF:0A:45:47:15:71:93:B0:57:EB
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e7:b8:97:03:d9:1c:c7:23:f1:d0:06:d0:0e:53:45:ea:a8:
92:35:c4:87:c9:16:a9:fe:7b:0d:74:d7:1d:e1:17:0d:ba:34:
f3:12:c9:4c:d7:d4:7c:47:7e:a6:78:85:d0:00:ef:7f:7e:07:
e0:8e:d6:ba:75:cc:b8:b4:81:ea:29:cd:7c:a2:58:07:dc:2b:
2d:7c:af:ee:c1:62:e3:1f:99:9f:de:27:26:3d:ea:c9:29:df:
f1:85:91:98:24:e5:17:2e:5d:1e:9a:01:fd:2b:ca:59:d0:75:
75:9f:8b:66:48:54:5f:09:f8:19:70:c6:ec:4b:02:b7:82:bc:
84:0d:72:51:4f:11:65:70:08:08:99:51:99:c1:13:74:5a:58:
f6:de:48:60:54:ee:20:7a:88:cd:5b:f4:75:56:c7:bc:89:7c:
ff:cf:16:be:9f:d8:df:86:b7:2a:77:88:22:85:a2:76:85:36:
64:8f:40:06:91:57:22:f5:b8:18:9d:07:55:8a:a3:d0:6a:0a:
c0:2d:b3:1c:59:b1:b2:99:34:46:44:27:93:c6:0d:c5:56:5c:
ed:c1:c1:98:ec:6f:4b:ca:5e:50:e1:d6:49:2a:18:c4:72:cd:
a9:5c:10:eb:bb:78:b2:0c:60:ea:95:dc:63:04:95:fa:31:20:
d6:bd:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:38 2025 by rpki-client