Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
File: R6GA6fZdeI0WzuafVNYgZDvNYOc.mft (raw, json)
Hash identifier: Nd2RaSULX9zhOyS5mZ6vAGTxP4yyrcO/Vgpqq+y8HrI=
Subject key identifier: BD:00:FA:6C:F8:AE:07:72:B2:D5:89:C2:E7:F4:D1:4E:C3:EA:B2:C1
Authority key identifier: 47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7
Certificate issuer: /CN=47a180e9f65d788d16cee69f54d620643bcd60e7
Certificate serial: 01988D6B9CE3FA3270FB0478CEF7B2D2F3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
Manifest number: 0AC9
Signing time: Sat 09 Aug 2025 06:01:36 +0000
Manifest this update: Sat 09 Aug 2025 06:01:36 +0000
Manifest next update: Sun 10 Aug 2025 06:01:36 +0000
Files and hashes: 1: R6GA6fZdeI0WzuafVNYgZDvNYOc.crl (hash: EcKaI/i4xngW/Wlqq3qYegYN3n2Wm5qDNGxJ4mXUIYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:9c:e3:fa:32:70:fb:04:78:ce:f7:b2:d2:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a180e9f65d788d16cee69f54d620643bcd60e7
Validity
Not Before: Aug 9 06:01:36 2025 GMT
Not After : Aug 10 06:01:36 2025 GMT
Subject: CN=bd00fa6cf8ae0772b2d589c2e7f4d14ec3eab2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:8d:7c:f8:83:d7:e1:47:f4:5e:98:f2:3b:
36:80:51:8c:7e:ee:63:c5:74:d3:da:33:b3:b5:f7:
8e:39:04:71:c8:c1:bd:34:21:c6:cf:03:e6:74:73:
52:36:4d:91:aa:3a:21:45:ae:81:28:f1:2e:13:7d:
52:3a:75:ce:fe:62:4b:34:94:f3:8b:3d:4f:19:e6:
24:a5:d1:50:ab:14:d0:c7:74:00:f5:1c:df:97:6c:
b8:3e:76:00:ee:3f:8c:27:d5:4d:85:63:d8:b3:17:
8f:e0:4b:6d:a6:d9:67:30:d4:e9:e0:6a:85:5d:a7:
06:e4:8a:05:f1:2c:c1:58:03:bd:4f:f3:6a:eb:a9:
92:72:53:1f:93:89:5d:35:62:b5:70:e9:10:a5:18:
9a:1e:08:8b:95:6e:c9:7d:56:f8:16:f6:25:f7:65:
81:b4:9c:ac:53:22:45:a6:44:ca:04:9f:ad:9c:d2:
cc:2a:ec:64:b5:97:fb:2f:7f:eb:b6:8e:03:8d:5a:
5d:21:2c:73:34:33:87:df:52:82:cd:fd:12:a1:4b:
d1:40:19:51:6a:cc:31:2c:00:24:16:6a:fc:27:1b:
d4:df:6e:27:8e:5b:16:6f:8f:af:ed:ff:10:3f:94:
05:bf:cb:0f:3e:90:07:2a:7f:b7:01:a9:97:e0:89:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:FA:6C:F8:AE:07:72:B2:D5:89:C2:E7:F4:D1:4E:C3:EA:B2:C1
X509v3 Authority Key Identifier:
keyid:47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:5b:9e:f5:37:02:0c:ff:fe:98:3d:12:31:45:a3:70:0a:
4f:81:32:a3:65:42:e5:86:70:99:f6:35:d2:9e:f8:9a:b5:39:
73:76:44:d6:9f:24:13:cc:70:f9:86:9a:dd:75:53:2c:03:d9:
d2:8d:67:cd:5e:d0:d4:9f:95:54:3d:3c:e9:d4:22:68:5d:02:
6b:58:e5:97:d2:32:8b:3a:47:8e:bf:1d:ca:be:ee:21:1b:38:
55:2f:10:ff:0c:23:93:30:d8:7f:48:6f:cb:9f:55:a6:0c:61:
a3:a5:9f:80:2d:ab:93:31:15:21:dc:5a:c5:41:70:e9:22:b2:
f5:69:93:d4:93:53:37:18:19:f5:f2:ce:7a:61:a2:81:bd:e3:
45:3a:aa:38:74:30:ed:35:df:5c:bd:b5:4a:95:bc:5e:ff:b2:
cc:87:6a:6e:33:a0:b9:a7:55:3f:59:51:a6:36:06:97:97:49:
42:fb:86:af:91:42:93:7b:1b:18:2b:86:c1:b8:07:9d:b5:c6:
1a:52:7c:3b:0a:00:c8:99:f6:35:d2:cc:7c:10:d1:ba:ea:57:
f2:7e:9b:5e:88:c6:8a:1d:a7:6f:65:0e:6e:b8:e7:32:0a:f3:
98:54:9c:67:15:bc:80:2b:e5:f8:c1:64:f5:a2:7c:87:94:a1:
f1:e2:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:42 2025 by rpki-client