Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: ZCK9b2QmUGFhlmMkjB8QvgVn5L2E12Y3MHkbqBG9Yjo=
Subject key identifier: 3C:BB:AC:55:73:35:6E:59:91:1B:F0:23:5E:44:26:11:3A:40:18:1C
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 01988355A1106163CE07EE0182A2025F20F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 07:01:23 +0000
Manifest this update: Thu 07 Aug 2025 07:01:23 +0000
Manifest next update: Fri 08 Aug 2025 07:01:23 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: bydJGWFawRp40QuDZ72/pfC/ndQ6tdSvcsxHe6BpOQM=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:a1:10:61:63:ce:07:ee:01:82:a2:02:5f:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Aug 7 07:01:23 2025 GMT
Not After : Aug 8 07:01:23 2025 GMT
Subject: CN=3cbbac5573356e59911bf0235e4426113a40181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:bb:48:e1:f6:10:aa:51:3f:14:cb:43:2d:
11:64:b4:b4:3f:fe:e3:f5:1e:01:6a:f2:59:fb:3a:
a7:be:fe:18:97:cd:7b:ef:ea:dc:28:80:03:b0:e0:
c0:1f:0e:e7:09:30:a4:8d:00:68:32:81:f4:f2:c3:
4f:b1:61:b1:96:6f:5f:ab:d5:d5:2c:dc:b8:72:d8:
34:53:c0:20:c9:80:55:b0:fa:3b:3c:08:4c:5f:09:
74:b8:b0:c7:dc:39:76:de:8d:30:c0:60:9c:9e:27:
b4:58:40:46:80:3b:db:14:7a:eb:6a:3a:64:9d:53:
89:d3:c7:4f:48:8d:60:8a:9a:8a:93:71:8b:8b:33:
16:f2:cb:3a:ff:7e:1d:8c:e6:1e:b0:9b:e5:b4:4d:
e7:4b:d0:98:fb:80:5f:b4:69:78:38:89:3a:dc:5b:
ba:9f:bc:0a:c7:c4:96:05:af:52:65:8f:02:e4:6e:
40:0e:05:d5:b8:75:12:21:44:48:f0:33:5f:ea:0c:
d1:32:a9:b6:83:26:34:33:83:45:64:b0:0a:37:6c:
0b:51:39:b8:ec:fc:1f:8a:cc:8b:66:09:f6:53:af:
b1:9f:45:6f:62:f8:67:6f:b7:93:31:2d:d3:97:59:
c3:8c:33:ce:d4:aa:f7:1f:81:82:f3:0e:d1:87:29:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BB:AC:55:73:35:6E:59:91:1B:F0:23:5E:44:26:11:3A:40:18:1C
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:6c:87:f4:2e:27:15:db:10:21:f3:3e:8f:7f:64:fb:c1:
df:90:3a:65:b6:53:e3:2b:98:0c:33:24:6c:b8:e0:ec:2e:a7:
60:c0:32:54:90:2a:15:2b:1e:91:7a:6d:00:6c:dc:29:85:14:
c2:bd:c2:e7:ef:10:5a:43:aa:e7:bb:d7:20:90:54:54:7f:0a:
b3:f8:1b:99:1a:c5:5d:fe:ee:be:fc:0e:dc:5a:a8:a4:9f:65:
ff:9c:cb:ce:5b:44:93:b3:c9:f1:ef:5d:55:9a:24:6a:f3:e7:
86:54:4b:fa:f2:a7:44:2c:8d:aa:c8:d6:55:34:82:3e:3b:14:
5c:7c:eb:a1:f8:8d:4d:81:5d:c0:1b:2e:9c:3e:1f:6d:0a:a9:
5b:32:ed:23:e6:10:cd:40:cb:0f:6d:1e:eb:65:d3:07:b3:31:
84:09:e5:d1:57:42:72:5a:bd:cf:43:84:42:20:ca:25:01:16:
fb:3a:69:da:d1:7b:d6:c9:d0:57:71:da:4c:72:96:a2:8b:78:
0a:d8:b8:7d:e6:a2:3b:15:cd:6f:ee:18:32:da:55:9e:0f:79:
c9:36:85:c8:5e:4b:8a:5f:b5:af:cd:84:3d:40:d0:85:98:cf:
4b:89:cf:44:98:e9:2f:9d:9e:ac:61:d9:64:98:d3:b9:93:59:
19:8a:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:32 2025 by rpki-client