Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File: 6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier: bOGqLwqAr5oZreRuDlbqtEKqfyFa3UIoYsc2dxZqytA=
Subject key identifier: 32:0D:61:46:E4:9B:AC:9F:04:0A:58:23:AA:FF:38:8C:E8:6E:0B:75
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer: /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial: 01989ECC343468727AB09559A1AA87A8C3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number: 1628
Signing time: Tue 12 Aug 2025 15:00:39 +0000
Manifest this update: Tue 12 Aug 2025 15:00:39 +0000
Manifest next update: Wed 13 Aug 2025 15:00:39 +0000
Files and hashes: 1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: AO6JDCcE3HiIHZ9WxWdLKepNqb/td8ZRNQlXqZMJrLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:34:34:68:72:7a:b0:95:59:a1:aa:87:a8:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Validity
Not Before: Aug 12 15:00:39 2025 GMT
Not After : Aug 13 15:00:39 2025 GMT
Subject: CN=320d6146e49bac9f040a5823aaff388ce86e0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:51:f7:53:e8:f8:81:43:86:9d:a3:ad:be:
60:b9:f1:bf:82:dc:67:de:97:70:a6:8b:4f:ef:5c:
f1:76:5d:50:a3:66:e1:c0:76:2c:7b:d3:ea:64:21:
b4:94:fb:bc:cf:a5:19:c7:6b:4c:4a:e0:5c:e5:3d:
04:11:8f:c0:0b:4f:d1:1d:d7:62:01:11:ba:01:3c:
17:c2:6b:a6:cf:51:08:53:45:cf:07:7f:47:5d:73:
c8:40:57:3e:ca:74:39:99:9b:b6:ea:af:60:a4:76:
e2:d0:d4:b9:b6:8c:3f:53:09:08:c7:ad:16:5b:d0:
b3:88:67:64:86:7f:76:79:73:71:7f:f7:e7:ce:67:
a0:f3:ef:39:cc:ab:8e:1b:50:07:83:49:05:b1:26:
a4:b9:b8:f1:f8:d4:f2:f0:d7:8f:e8:6b:ea:3f:19:
fd:79:c5:88:72:a1:b1:90:4e:c9:e8:19:8e:ab:08:
a5:66:e4:fc:5e:18:f8:82:c9:a4:27:ec:6d:79:1b:
af:8a:01:79:a9:f3:44:20:d4:33:6a:27:35:db:db:
93:81:96:90:7b:14:92:f1:f5:44:fe:27:4c:f6:4b:
f3:2c:0b:b6:e7:ae:ff:40:f4:fe:02:f7:a6:cf:e6:
39:fa:53:34:dd:ff:90:fd:a9:64:d3:ec:ca:1f:e6:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:61:46:E4:9B:AC:9F:04:0A:58:23:AA:FF:38:8C:E8:6E:0B:75
X509v3 Authority Key Identifier:
keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d8:07:2c:40:91:c6:c4:50:88:bb:69:4f:e0:bf:25:8b:88:
b9:7f:68:fe:dd:1a:35:41:eb:56:77:f9:03:d4:c9:8d:df:ea:
63:b0:7c:55:d5:e8:af:c8:5c:42:7f:8e:2d:c1:c1:cd:cc:32:
e7:fb:77:4c:00:1f:e1:d5:c8:20:e2:c6:9c:f6:30:f2:4b:d9:
e6:3a:91:94:0c:46:cc:91:5a:02:96:40:0a:06:a5:6f:c4:5b:
49:4f:53:44:46:8c:54:93:9a:34:bd:5d:f3:42:86:22:12:ba:
25:73:11:36:59:ca:d5:c2:27:d1:7e:44:9a:ed:67:88:7a:df:
13:59:74:66:8a:0c:0d:07:11:6d:56:ba:60:6c:bc:d4:d7:32:
98:94:8f:79:f1:6f:fd:20:4c:8b:82:76:00:6f:c2:d6:e1:df:
5b:ad:67:15:20:ea:e7:56:6b:ed:d7:84:7e:8c:8f:de:d0:e2:
ab:fc:76:92:21:f0:56:ef:0f:19:4f:0e:6c:84:54:a4:8f:9f:
af:c0:43:d2:53:cc:99:c4:5f:bd:f8:69:a6:c3:4c:a2:65:96:
fb:cc:1c:86:81:b6:91:cc:14:8a:f0:e8:03:55:5a:97:de:4c:
25:03:73:35:bc:84:4a:65:13:f1:c7:df:77:7d:2f:6e:1d:4d:
c2:e8:4d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiezDQ0aHJ6sJVZoaqHqMPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MmYyY2E1M2YxYjMzZDFiNTM1NDZhMjMwOTVkMzg0ZmYy
Mzc3MDMwHhcNMjUwODEyMTUwMDM5WhcNMjUwODEzMTUwMDM5WjAzMTEwLwYDVQQD
EygzMjBkNjE0NmU0OWJhYzlmMDQwYTU4MjNhYWZmMzg4Y2U4NmUwYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspNR91Po+IFDhp2jrb5gufG/gtxn
3pdwpotP71zxdl1Qo2bhwHYse9PqZCG0lPu8z6UZx2tMSuBc5T0EEY/AC0/RHddi
ARG6ATwXwmumz1EIU0XPB39HXXPIQFc+ynQ5mZu26q9gpHbi0NS5tow/UwkIx60W
W9CziGdkhn92eXNxf/fnzmeg8+85zKuOG1AHg0kFsSakubjx+NTy8NeP6GvqPxn9
ecWIcqGxkE7J6BmOqwilZuT8Xhj4gsmkJ+xteRuvigF5qfNEINQzaic129uTgZaQ
exSS8fVE/idM9kvzLAu2567/QPT+Avemz+Y5+lM03f+Q/alk0+zKH+bkqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDINYUbkm6yfBApYI6r/OIzobgt1MB8GA1UdIwQY
MBaAFOgvLKU/GzPRtTVGojCV04T/I3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUt
NWY5MjI5YjI2MWI1LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUtNWY5MjI5YjI2MWI1
LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9gHLECR
xsRQiLtpT+C/JYuIuX9o/t0aNUHrVnf5A9TJjd/qY7B8VdXor8hcQn+OLcHBzcwy
5/t3TAAf4dXIIOLGnPYw8kvZ5jqRlAxGzJFaApZACgalb8RbSU9TREaMVJOaNL1d
80KGIhK6JXMRNlnK1cIn0X5Emu1niHrfE1l0ZooMDQcRbVa6YGy81NcymJSPefFv
/SBMi4J2AG/C1uHfW61nFSDq51Zr7deEfoyP3tDiq/x2kiHwVu8PGU8ObIRUpI+f
r8BD0lPMmcRfvfhppsNMomWW+8wchoG2kcwUivDoA1Val95MJQNzNbyESmUT8cff
d30vbh1NwuhNmg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:24:38 2025 by rpki-client