Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier: GD0jLRtETlkB/KhUEA+HTmC1tL80kzZn/J3h6ciCotM=
Subject key identifier: E1:B3:45:90:B6:1A:7C:21:E9:47:A9:85:CD:D6:0D:DF:20:0D:E3:47
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial: 01988E7D9331B2AE1B8532D8A84093DFC6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number: D9
Signing time: Sat 09 Aug 2025 11:00:50 +0000
Manifest this update: Sat 09 Aug 2025 11:00:50 +0000
Manifest next update: Sun 10 Aug 2025 11:00:50 +0000
Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: mdAfqwW4KXyeI6uYtzzKwpmE4jPvY4wNIYMvBevXG8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:93:31:b2:ae:1b:85:32:d8:a8:40:93:df:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
Validity
Not Before: Aug 9 11:00:50 2025 GMT
Not After : Aug 10 11:00:50 2025 GMT
Subject: CN=e1b34590b61a7c21e947a985cdd60ddf200de347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:b0:97:22:da:99:7e:bb:81:83:08:b5:84:
ed:91:32:5e:2f:25:e9:e0:c0:b5:28:4b:ee:46:69:
8d:2a:ff:8f:e5:e0:17:2d:8d:64:7e:e9:3b:df:de:
5e:80:bd:e9:d7:4a:bc:6b:b0:46:32:d0:50:8a:b9:
76:8b:b7:1e:94:6c:6f:af:f9:67:ab:03:a1:c6:31:
c8:9c:d0:a8:a3:98:c1:b9:4c:55:55:d2:60:2e:68:
06:a2:85:f1:b9:1f:5d:33:42:71:23:17:85:40:d7:
d7:fd:db:b5:0e:80:5f:e1:2d:30:51:30:07:35:14:
07:12:5c:f7:33:c8:e5:c3:75:55:5d:16:35:90:35:
68:73:02:f4:06:fa:3e:44:b0:60:4f:90:5c:f4:8f:
dd:94:d3:0a:a5:6f:cd:e6:b4:45:a4:54:f3:82:1b:
cb:37:d0:0d:54:eb:ab:7f:07:9a:ea:1f:22:ae:46:
97:8e:6f:8c:da:b0:ca:e9:5f:b2:8c:d5:96:a6:f6:
c0:ae:15:ad:61:5f:9c:22:71:60:9b:e6:f9:1b:9a:
70:d0:43:c3:7e:75:ce:0c:53:41:4e:62:a6:6c:d0:
53:26:9f:77:9c:ae:31:4a:fc:14:47:c4:06:92:96:
db:c2:e0:f3:80:fe:c3:b4:dd:b4:87:7e:79:57:87:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:45:90:B6:1A:7C:21:E9:47:A9:85:CD:D6:0D:DF:20:0D:E3:47
X509v3 Authority Key Identifier:
keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6e:d7:8c:1b:19:7e:aa:3f:f2:98:95:75:f8:d8:74:6f:1b:
89:2b:2f:7c:66:dd:73:83:38:89:41:3d:cd:fc:ed:62:fb:8b:
20:91:ab:c8:ea:37:97:a0:88:c6:a4:17:7d:1c:70:94:96:50:
98:9b:07:86:6d:b1:6d:fb:e8:30:fa:09:35:91:a2:7e:f8:cf:
3c:e8:1d:0e:d5:c2:59:80:26:27:ad:51:9b:4a:61:1d:bb:2a:
32:1e:fe:db:3f:62:20:50:e0:77:59:7c:0f:18:09:91:f6:15:
39:76:b8:86:ac:3b:78:e0:8b:c4:0e:64:0d:39:9a:a5:7f:42:
09:09:2a:c5:e3:4c:4f:3f:1c:29:9d:95:60:78:6b:16:7c:83:
a4:68:3e:5b:92:49:c1:54:86:2f:11:3b:a0:de:2e:7f:0a:ba:
07:57:a0:dc:93:5d:ac:ad:1a:9f:d7:2d:da:88:41:e8:b8:52:
26:ec:49:e2:6a:67:19:9a:96:a3:c2:89:9c:ce:2f:f3:83:6f:
05:a8:3a:49:0a:78:87:0d:84:22:74:36:9c:a3:69:c8:af:0e:
b1:9c:32:ed:30:3b:84:e8:8a:e9:66:f0:31:af:d5:0d:b4:df:
6f:b8:a4:28:6d:a0:ec:d6:86:b2:c7:97:17:76:e5:9f:7f:59:
b9:58:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:20 2025 by rpki-client