Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: u/b8pOsWfqq2pxADUdm35INrmMYRjrDQ/28xaVhsX18=
Subject key identifier: F8:1A:E1:E2:F8:94:62:90:4B:EE:B5:7F:54:5F:41:CD:66:44:F5:6F
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 01989FA7E7DBD7887F6BB7B728F68D77F7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0505
Signing time: Tue 12 Aug 2025 19:00:37 +0000
Manifest this update: Tue 12 Aug 2025 19:00:37 +0000
Manifest next update: Wed 13 Aug 2025 19:00:37 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: nMoqLjpPyaO1MGhiRkFW91pEgcBITLDk/nCpwbDpb4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:e7:db:d7:88:7f:6b:b7:b7:28:f6:8d:77:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Aug 12 19:00:37 2025 GMT
Not After : Aug 13 19:00:37 2025 GMT
Subject: CN=f81ae1e2f89462904beeb57f545f41cd6644f56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:21:64:43:a2:14:13:ca:f5:9e:99:bd:58:
2f:65:3b:0b:5d:61:00:73:69:94:23:0e:9a:3f:a3:
cc:13:98:91:f6:67:9a:c3:b2:02:36:d6:69:1b:03:
06:e9:c4:d6:41:fd:e9:99:ee:d2:58:fd:32:e6:2d:
5d:c6:d4:b4:5c:3b:91:10:9b:c0:f2:b6:e4:f1:2a:
c9:91:7e:f7:7f:bc:10:bd:90:8b:d2:c1:e0:92:c8:
01:28:5e:b4:dd:99:38:0b:1f:d6:97:2e:8e:b8:bb:
ca:e5:a5:73:cf:2c:ff:7c:d3:b6:df:8e:42:62:39:
55:52:6f:c7:63:fb:dd:ff:a0:5f:74:75:43:bb:43:
cb:83:7d:28:f7:a6:c3:54:f9:8b:e4:f5:44:ce:51:
a0:38:11:74:8a:2a:e7:2a:4f:50:ad:06:36:5f:66:
3b:a7:a1:5c:cd:cd:74:51:95:6c:8a:b9:c2:6a:a6:
50:2d:01:e3:c3:22:56:8d:bb:a4:d3:10:cc:96:9e:
f8:41:7c:c8:ab:0d:c3:4f:1b:11:1f:7b:c5:a0:a2:
94:63:49:58:30:8a:7e:40:cf:94:92:94:9f:8e:39:
58:b4:37:00:0b:6d:b5:b2:85:3e:45:fe:17:8f:5e:
32:e1:19:3a:6b:b9:f0:ea:7c:9b:d8:c7:59:7e:8b:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:E1:E2:F8:94:62:90:4B:EE:B5:7F:54:5F:41:CD:66:44:F5:6F
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:a5:78:6c:4c:0c:ac:3f:8d:d5:f9:f8:83:fa:f1:19:8d:
d4:7a:1f:32:28:0a:85:a4:f1:23:3c:ff:c0:86:a6:bc:19:03:
24:2f:c9:2f:d2:2e:ce:df:4b:1d:e5:3d:ff:56:ce:e7:e4:9e:
85:b4:ea:7b:7e:36:a8:08:36:c1:a8:86:7d:c0:94:59:47:c9:
9e:7c:fc:b3:4c:3f:f1:96:b3:11:58:3d:0f:e6:5e:0f:81:c2:
c8:ec:0c:eb:9c:d8:88:86:5a:fd:1e:62:b8:03:1b:73:64:2b:
eb:c6:6a:c4:93:cb:81:ec:d5:88:90:16:79:41:5a:72:36:f4:
c4:04:31:26:19:49:e8:5f:a2:ef:b4:05:9d:57:da:47:00:e0:
83:eb:bc:2f:21:93:67:03:c7:fd:45:5c:30:ec:09:9f:22:e4:
15:67:76:c9:40:5e:92:95:db:b5:cf:bf:19:eb:8a:00:36:69:
03:74:22:36:c4:ab:2c:84:cc:dc:c9:2a:a3:fc:76:18:35:18:
0c:b5:9c:b9:1c:da:23:2f:59:c9:6d:db:09:e8:b4:b2:fb:a0:
40:a4:f3:c9:08:81:23:d5:7d:c7:7c:b6:3c:1f:c7:83:2a:4c:
55:d5:5f:b5:67:52:91:24:6b:74:63:1c:03:2d:de:91:c7:2b:
b9:98:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:15 2025 by rpki-client