Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: j8kxDeWjQQ3N5ZIx9fGFI9+zQ1hGcdkbPB3OG9kvcmE=
Subject key identifier: CC:99:29:E5:FB:82:95:B2:55:94:5A:E7:31:8F:65:1B:C1:77:FD:CE
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 01987298A8280F20E023A012D532713005B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0CFB
Signing time: Mon 04 Aug 2025 01:01:03 +0000
Manifest this update: Mon 04 Aug 2025 01:01:03 +0000
Manifest next update: Tue 05 Aug 2025 01:01:03 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: bv5Bo8ohdh42zZlvXxveaC445wWApoD0FFGNXBfCJ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a8:28:0f:20:e0:23:a0:12:d5:32:71:30:05:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Aug 4 01:01:03 2025 GMT
Not After : Aug 5 01:01:03 2025 GMT
Subject: CN=cc9929e5fb8295b255945ae7318f651bc177fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:17:00:a3:f7:91:65:6e:c8:95:d1:e7:61:
1f:40:ca:21:90:50:d2:2d:2c:21:45:66:64:16:fc:
ba:d3:bf:e2:4b:e9:03:60:1d:ff:e6:09:be:3b:10:
ec:fb:24:46:29:0d:d2:4e:cf:a4:c8:d2:06:5f:25:
9c:4a:7a:42:8c:c7:a9:d3:5a:76:6a:3d:21:cc:84:
3a:90:4e:c4:7b:d5:a8:f3:a2:aa:d1:a8:f3:51:6f:
eb:78:6e:72:cd:83:7a:9f:dc:fe:6f:76:e4:59:6c:
84:be:2a:2f:15:eb:bf:00:10:8a:29:0d:a3:57:fd:
49:b7:91:37:67:52:aa:ca:e3:06:ca:e5:21:90:9f:
26:5c:de:21:5f:46:c5:08:6c:97:27:7f:e1:50:61:
c2:09:7a:7b:96:ee:11:0d:9d:9a:6c:7e:0b:48:d1:
68:a2:f5:7b:cb:1a:61:9c:ab:3a:66:3e:65:e7:87:
f0:f2:2a:85:d7:e0:47:a1:b6:05:dc:54:70:db:00:
c2:0c:9a:37:01:98:1b:bc:41:f1:55:9f:d7:8d:c1:
3a:b7:64:d0:6a:39:0c:49:a9:eb:1f:63:25:09:8b:
a4:60:7d:ff:c8:05:c3:94:61:fe:83:76:81:4e:f0:
ab:49:63:73:90:c2:28:26:2f:e1:89:b3:e4:09:a6:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:29:E5:FB:82:95:B2:55:94:5A:E7:31:8F:65:1B:C1:77:FD:CE
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:49:9b:c2:30:4e:64:6f:9f:40:12:75:54:4b:68:08:25:72:
f4:eb:33:cc:96:69:e0:1a:77:c2:1d:ff:44:9b:37:95:4c:2f:
83:3b:e6:ed:66:88:b9:55:2c:d5:6f:31:ba:97:02:80:90:d4:
36:e6:d1:a2:8f:58:a4:b1:7c:bb:78:26:42:14:56:ba:72:6f:
79:3e:5a:4f:28:2d:0d:f5:e7:3b:4b:1e:2d:1e:ba:1b:20:25:
fe:ee:bc:8b:d9:91:30:77:f6:5f:63:e8:e8:87:06:16:ad:38:
f0:ff:b8:96:2b:ae:15:21:fb:f3:37:d6:68:3f:45:8f:6e:ed:
8a:d7:03:cf:a2:bb:f6:6f:63:7d:94:f7:f6:3f:1d:79:06:b7:
56:b4:cf:b4:3c:28:fe:e8:60:e6:9d:94:80:ca:dc:60:7d:5e:
2d:b8:f8:e7:be:32:a2:77:3e:aa:cf:1d:d7:93:23:fa:ac:a1:
8c:c5:25:a2:dc:ac:fa:d7:55:f6:31:d8:84:69:49:b3:31:86:
d7:ed:49:af:73:49:44:45:61:ba:69:31:98:7b:88:43:64:c1:
b1:e7:7c:f6:db:a1:74:63:e1:29:a5:5e:30:8e:5e:d4:c7:ce:
47:d5:1b:ae:b2:2a:d6:bd:48:a5:7f:48:d2:34:70:78:00:5a:
5d:21:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:58 2025 by rpki-client