Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: b52/a8ctkzq5S7/cqEHrpga3ElwGee3kvMN/Dd9obKY=
Subject key identifier: E1:49:A3:9E:BD:06:E6:02:BE:54:EC:E1:B3:71:8D:9A:6E:2A:D5:13
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019778660D4B883EF77D8639A19872AAF4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 097D
Signing time: Mon 16 Jun 2025 11:00:43 +0000
Manifest this update: Mon 16 Jun 2025 11:00:43 +0000
Manifest next update: Tue 17 Jun 2025 11:00:43 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: Vz3fS2/DllOEuSOZp555ozqrSMstLQbbHU5hbMf5kvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:0d:4b:88:3e:f7:7d:86:39:a1:98:72:aa:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Jun 16 11:00:43 2025 GMT
Not After : Jun 17 11:00:43 2025 GMT
Subject: CN=e149a39ebd06e602be54ece1b3718d9a6e2ad513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:c3:63:cc:66:88:a2:fc:2a:b2:d7:0c:0c:
cb:85:3a:81:54:3e:f1:b2:90:f8:02:de:94:c6:e4:
a2:56:67:b7:54:28:6d:64:50:3d:14:0c:36:08:21:
f9:7b:76:a0:a3:a3:fd:05:de:21:a0:e3:41:88:56:
02:32:e0:00:e5:97:eb:ba:fd:05:1e:67:90:e3:99:
d9:30:25:f6:93:8f:97:3a:cd:1c:73:83:ea:e6:07:
db:af:44:0e:d4:68:73:65:39:5f:86:53:4f:89:d3:
fc:19:7f:ec:b4:35:1e:94:64:a9:34:61:c0:d6:bf:
47:c6:db:67:23:55:36:72:2e:12:25:ca:8f:d6:94:
f6:ff:38:b2:2f:57:5c:4b:3f:23:01:d1:b3:04:43:
8d:ac:46:9a:23:76:4b:44:87:5a:ff:5f:79:9f:b3:
6c:f2:c3:70:65:09:78:4d:8e:8c:22:f4:43:fb:3c:
3f:46:9f:fc:44:59:02:da:72:4c:99:e2:ba:a9:1a:
3b:b3:b4:f7:85:ce:1d:41:f7:a8:d2:8f:c7:7e:fd:
20:c8:e8:c8:ec:90:09:84:a3:a4:f2:e1:58:02:88:
e6:25:56:63:a2:99:be:87:8d:0e:27:0c:97:9c:ca:
be:50:ce:1d:1a:30:1c:9a:31:1e:15:df:46:ff:86:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:49:A3:9E:BD:06:E6:02:BE:54:EC:E1:B3:71:8D:9A:6E:2A:D5:13
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:c4:8b:45:d6:3e:aa:42:13:28:9a:55:51:3e:81:fe:6c:
85:9e:51:df:17:d9:a7:ed:83:29:d6:6f:0a:56:41:9b:80:c9:
45:1a:c6:66:0f:77:ad:af:bb:39:71:17:52:f4:5b:e5:c6:9e:
70:86:46:04:f2:d7:c6:18:27:e3:2c:99:d9:23:6f:5a:66:cf:
36:e0:5e:a0:28:e3:26:88:55:81:04:63:e9:48:75:f7:a5:f8:
2a:1c:61:27:54:11:52:f5:3c:be:e5:0b:2d:e4:93:18:cb:b7:
93:35:02:1c:9c:73:e4:1e:c7:d9:f6:87:d3:a5:a4:db:63:9c:
34:29:ae:34:6d:9e:58:fb:07:4f:74:f6:2d:71:a9:56:11:ff:
a9:98:4d:a5:8a:3c:57:51:92:1a:3e:b2:9c:a7:68:b6:6b:b8:
49:8a:97:cb:a5:f7:8f:01:cf:d6:1a:ac:7c:9b:eb:ac:a9:46:
97:a4:ff:f1:35:f3:bf:5c:67:c0:13:54:eb:18:20:c1:44:0b:
1d:12:a0:6f:73:d9:0c:71:1a:c2:3b:0c:ce:38:04:9e:fb:1a:
a2:cd:15:3e:fa:43:a9:aa:e7:41:e8:85:64:01:df:a0:b1:6d:
6c:5e:aa:a5:68:b3:20:06:b1:16:7b:e2:5d:ca:af:b8:fd:ff:
a4:f4:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:42:55 2025 by rpki-client