Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: afTZLKm9yFKxxhcFh+wD+k9m3wYR9g5tSSYRdu7Qx/E=
Subject key identifier: 37:3E:95:B1:E8:D5:84:58:89:BD:DD:1D:DB:AF:F9:6B:0F:67:D7:DE
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 01987486A9B0E3D9162A34FB7D88A2B79721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 1153
Signing time: Mon 04 Aug 2025 10:00:38 +0000
Manifest this update: Mon 04 Aug 2025 10:00:38 +0000
Manifest next update: Tue 05 Aug 2025 10:00:38 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: H1gw/ps0UPFvQm3AHWGT/CSNxNFjF9F0LJk0/gJydkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:a9:b0:e3:d9:16:2a:34:fb:7d:88:a2:b7:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Aug 4 10:00:38 2025 GMT
Not After : Aug 5 10:00:38 2025 GMT
Subject: CN=373e95b1e8d5845889bddd1ddbaff96b0f67d7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:d6:a4:54:56:35:16:f7:f2:8b:2d:0a:47:
25:cc:e8:de:85:f6:d1:18:da:4b:79:04:02:93:f2:
7a:bb:86:6a:4f:19:c4:f1:df:da:8b:c9:49:ec:5d:
25:5e:d3:3b:fd:20:79:f6:8e:5a:4c:a3:19:64:d4:
ae:8f:65:f0:4c:f5:c1:01:ef:fb:a9:68:10:62:40:
bc:de:2c:9f:74:8b:8a:26:4d:54:90:eb:a3:b6:79:
86:b1:00:6e:6c:6d:52:b7:15:e7:70:2b:83:b2:da:
f1:f6:16:d3:e5:f9:23:1d:04:4b:1c:cc:25:e7:37:
16:c9:10:57:92:54:da:4c:84:9b:fc:28:50:92:d8:
76:a9:19:a7:2c:89:c6:60:95:9f:cd:c1:e6:52:ff:
17:6e:68:04:83:2f:94:bd:6d:4b:c5:c3:59:45:4d:
fc:8c:20:c8:af:e4:8e:24:cf:93:6f:63:81:62:83:
6c:10:ce:eb:31:db:c1:80:f1:ac:91:b7:4b:f6:b0:
66:cf:78:31:18:cb:cf:78:aa:d4:4e:fe:91:18:75:
0c:db:21:86:b3:52:8c:f4:dc:ac:e0:7f:96:c5:3d:
42:1e:79:f1:b7:fa:88:e4:58:b2:8d:30:1a:39:c0:
51:4f:a9:46:a8:76:78:15:24:05:17:d6:35:d6:3e:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:95:B1:E8:D5:84:58:89:BD:DD:1D:DB:AF:F9:6B:0F:67:D7:DE
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:fe:c1:21:c3:14:f2:b7:45:5d:d2:1d:51:db:1f:04:ca:
63:ca:e1:db:2a:5c:a6:c1:8d:39:c8:c4:58:ca:ce:4d:87:db:
de:13:0b:c5:46:15:53:d8:18:3d:e6:cf:56:b6:e0:79:2c:2c:
25:7d:f4:91:c1:d2:67:d5:1a:ec:d6:34:d9:a1:ce:ac:a4:c9:
9e:be:4d:fc:67:24:82:6e:e9:8a:24:d9:a9:86:97:82:1e:17:
95:38:94:49:64:31:a8:b8:3d:aa:a1:90:29:cd:41:b6:f2:63:
d5:d1:54:c7:c4:c6:60:46:f3:a7:be:ce:f1:37:b7:7d:15:fd:
2f:0d:6c:d2:8b:40:9f:9e:d4:75:94:c8:56:10:ab:26:e4:98:
3e:50:e5:88:5e:a2:2b:72:99:57:5c:8c:04:4e:76:b3:e9:8a:
00:d7:15:78:ab:04:2d:ee:25:33:2e:bf:35:22:06:1e:1c:49:
27:b6:53:8f:b9:ff:fb:33:ca:95:e1:90:55:af:d1:a4:d2:58:
44:b2:0f:c5:28:fa:ab:bd:d2:3f:b7:04:a0:24:33:92:75:b4:
16:86:e7:f9:3f:ee:75:23:59:15:a0:6a:ea:5c:d0:e7:84:9c:
c5:a0:dc:38:2d:78:16:a8:07:22:e0:a8:52:4e:77:c3:c7:2e:
ff:02:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:58 2025 by rpki-client