
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: EFoYXV1IGaHFM7rW44oEEmsNxvoD37UN3nAALENdOrU=
Subject key identifier: 6A:23:E5:09:F7:74:2D:CE:AB:41:FA:0F:B9:C9:0C:0A:9B:66:21:F8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 0198745028EF69EB78FCFC58E9C90A6D32FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 0A0A
Signing time: Mon 04 Aug 2025 09:01:07 +0000
Manifest this update: Mon 04 Aug 2025 09:01:07 +0000
Manifest next update: Tue 05 Aug 2025 09:01:07 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: T88EeV9Gra10YlilTlXUMdwIbiikzuRbs1y6IKmmP10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:28:ef:69:eb:78:fc:fc:58:e9:c9:0a:6d:32:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: Aug 4 09:01:07 2025 GMT
Not After : Aug 5 09:01:07 2025 GMT
Subject: CN=6a23e509f7742dceab41fa0fb9c90c0a9b6621f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:50:bc:ae:f7:a5:ce:b7:ae:40:4f:2b:10:
c4:18:d5:d6:88:8d:8c:11:62:65:77:da:d6:ad:9c:
f2:58:3c:1b:76:fd:e7:88:8f:ee:c2:0a:86:3b:8f:
88:d6:b8:ba:c0:b1:7e:28:42:17:a2:7a:f2:48:1e:
04:a4:76:d5:27:44:a3:40:91:06:04:fb:b3:0a:5a:
2a:6e:57:c4:da:73:5f:bc:76:17:62:f5:ad:11:6f:
e2:ab:a3:44:c6:02:e3:26:e7:b4:7d:91:86:c6:ef:
0b:26:d7:f3:04:bd:21:e7:55:1c:8a:ca:ed:b6:f2:
7e:30:3b:40:82:40:2a:4f:9f:9e:52:1a:3a:88:c8:
8d:5c:55:60:cc:8a:4a:c2:fd:e5:4e:e5:43:01:13:
e8:bd:80:e7:37:ee:d2:d6:d1:a9:6d:9f:eb:b0:8f:
f4:0a:88:c9:98:ee:c2:f5:90:c1:23:e8:c6:53:a5:
9d:93:83:41:37:3d:88:ef:22:fa:94:7c:5c:d6:8b:
49:de:8a:2d:11:fb:13:c4:17:c7:b4:be:5c:16:c0:
3d:ca:a2:17:0f:24:0f:30:c7:b2:60:56:f1:81:59:
7a:f0:1c:3c:58:e3:c8:f7:c7:69:e8:30:99:3f:8b:
54:68:89:35:b0:46:6b:ca:1f:ea:44:5f:c2:16:5f:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:E5:09:F7:74:2D:CE:AB:41:FA:0F:B9:C9:0C:0A:9B:66:21:F8
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:91:99:f0:3f:c3:d0:b5:11:8b:00:97:f6:03:11:0c:9c:f6:
66:2c:04:23:01:d1:8c:59:c7:9f:2d:71:68:e0:b3:9a:a9:92:
03:f9:1a:f5:04:4e:1c:52:0b:ba:77:5b:c7:dd:cb:5f:5b:88:
03:05:22:0f:da:1c:12:10:b7:29:c7:f3:57:8f:43:d9:d8:5f:
a9:d8:6e:f9:f8:8f:be:6c:e8:d7:75:9e:f1:22:0d:fe:bd:6b:
2e:fd:8b:f9:2e:bd:39:00:c7:e8:45:d9:94:ba:fd:9f:cf:0a:
c9:60:7e:0e:b2:99:ea:19:76:8f:3e:5a:35:f2:33:eb:ab:8c:
65:86:de:ac:74:76:66:4e:6d:02:bb:d3:f6:68:0b:8b:fa:61:
7a:38:3d:aa:55:87:3f:88:ff:a4:1d:ac:68:19:59:fe:22:42:
49:38:22:af:b6:8c:cc:b3:6f:df:24:ca:7c:2b:7e:1e:5c:75:
49:ae:62:9c:b9:98:c7:90:fa:fb:19:66:0c:54:2a:df:96:85:
a5:21:28:36:23:1e:d0:bc:e7:dc:8b:69:64:db:21:be:6e:a2:
45:ed:e8:1d:dc:5d:44:e8:3f:6c:20:38:5f:81:da:db:37:e5:
8e:a3:5b:6b:b3:2b:d6:b3:52:28:e9:7a:ad:4c:11:1f:61:3f:
12:37:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:47 2025 by rpki-client