Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: rG7ftblAI8ILJWbi4/hU2YKHVE32O9YuS79s1o8n8UM=
Subject key identifier: 2A:2C:AB:E9:04:12:7D:6A:82:E5:9A:71:32:1C:C9:B5:96:41:50:D1
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 019892C8B6EA6DD4E7C0B6A8BC0D408D81B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 06AE
Signing time: Sun 10 Aug 2025 07:01:23 +0000
Manifest this update: Sun 10 Aug 2025 07:01:23 +0000
Manifest next update: Mon 11 Aug 2025 07:01:23 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: hoADBElIVi3jxq1/5V6MysKC6Qf4ExTO25M9/0v00iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:b6:ea:6d:d4:e7:c0:b6:a8:bc:0d:40:8d:81:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Aug 10 07:01:23 2025 GMT
Not After : Aug 11 07:01:23 2025 GMT
Subject: CN=2a2cabe904127d6a82e59a71321cc9b5964150d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:1b:a7:55:f2:86:bf:aa:74:3c:0d:d3:5f:
a4:31:78:9b:fe:0e:d0:bf:13:22:56:f5:a1:92:38:
dd:de:4d:bf:fb:1e:ea:63:71:80:f0:5c:8c:26:97:
37:d5:60:0c:7b:55:48:0f:79:da:12:e1:0f:e3:5b:
de:29:13:74:79:18:a7:5b:26:27:58:79:f4:f8:51:
f0:27:da:0c:a3:75:ad:2a:56:f2:3d:61:99:24:9d:
d7:ff:0b:3f:b2:0b:a5:2e:0e:b6:b9:10:e0:06:83:
54:f6:54:db:2b:88:4b:24:e5:4d:f7:cd:c3:24:9e:
ec:e8:ae:ae:05:ea:bb:52:9e:cd:09:e9:56:fc:67:
80:5d:7a:be:3b:72:fc:75:58:f1:70:f0:3d:be:80:
59:4a:02:56:9e:d2:8a:d4:19:f7:e1:4a:b9:a3:2f:
04:37:5d:4c:b8:8d:4f:ff:42:af:7f:64:65:ef:7c:
df:71:da:88:a4:7e:c5:52:09:62:51:87:87:08:e2:
71:fc:21:4e:50:a1:b3:22:c1:d0:33:a9:db:2a:90:
fc:18:1b:cb:8b:e9:fe:9c:88:0b:4a:4e:32:5b:d7:
1f:ad:5c:f8:ff:d2:51:03:c2:8a:3f:f1:75:10:df:
4a:3e:49:1b:4b:14:06:9e:57:c1:76:fb:e9:04:85:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:AB:E9:04:12:7D:6A:82:E5:9A:71:32:1C:C9:B5:96:41:50:D1
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:cc:b1:7b:7a:a7:8a:d9:e8:a2:b1:f9:27:f3:57:e7:7c:
2f:8b:9b:1b:e3:81:22:85:98:20:6b:fe:99:34:6a:b9:63:f6:
45:dd:43:99:4d:6e:2b:b2:b2:08:60:f1:c2:59:86:1a:0c:36:
ef:ae:15:16:e7:8e:f4:31:4a:da:a0:38:3d:ad:57:31:d4:1e:
75:ec:ac:87:ac:af:fd:ff:06:45:81:c2:18:a8:fa:fd:3b:3b:
2b:bc:3b:25:a3:cc:d2:58:95:a9:0e:67:d6:9b:87:53:f1:bb:
1f:c3:2e:27:ad:30:47:09:ca:15:ba:ca:70:0d:54:27:4e:de:
ff:06:b6:ba:cc:53:17:93:9f:55:a9:f1:63:be:ec:af:81:61:
ff:97:a8:bd:81:e3:f8:b5:d0:e4:48:30:ae:3c:11:7b:05:05:
d4:af:4d:d6:6a:9c:d2:43:1d:e5:67:e2:6f:6b:13:f3:88:17:
f5:bc:d1:aa:3b:bb:54:97:e5:7d:1d:8c:9b:21:95:01:b4:c8:
92:ab:84:65:0b:43:17:e2:c8:06:e9:3f:68:c2:2b:c4:0f:b7:
f5:7f:ce:8b:70:71:db:7e:c2:1a:56:65:56:ea:cc:b2:06:12:
28:19:12:f6:0e:93:1f:a0:a0:34:7d:92:0d:2d:6c:43:18:19:
ff:96:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:00 2025 by rpki-client