Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: XRJMAN+Mmnb+XpXV8S+vtdvpIZZu7zf+4s19VoQzr0w=
Subject key identifier: 70:00:39:17:E1:BB:8F:FA:93:72:68:39:EF:FC:E7:0B:22:96:5C:64
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 0197B6A1E1FCF3C5E7EB26C20C0D1AB62735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 0D04
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: fFfH5akUACwnwSMiBYGQjl1VfT1FVuyE/Gf68ae/b7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e1:fc:f3:c5:e7:eb:26:c2:0c:0d:1a:b6:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=70003917e1bb8ffa93726839effce70b22965c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:54:8d:0b:76:e2:00:ec:5f:ea:78:a8:7a:
90:63:f3:91:a9:64:31:07:17:f3:0e:01:fc:5d:e3:
30:5e:b8:e0:b5:2d:89:07:ba:23:00:61:84:f3:e7:
79:28:1e:e0:0c:8b:a4:5d:a7:71:23:c1:80:43:ca:
45:b1:4a:dc:2e:dc:1a:67:b5:e2:a4:0a:ee:0c:0e:
f1:66:09:d8:47:fa:e4:1c:50:6e:89:d1:ae:0f:a3:
fc:0d:77:c6:bb:96:db:36:47:0b:61:5a:03:a1:71:
16:50:6e:2e:15:58:d5:e6:7b:f2:b7:48:5d:c2:93:
19:08:bd:95:bd:32:15:20:fd:ea:c9:79:0d:d4:52:
cb:14:de:f1:2c:86:c9:e8:52:ca:3d:05:cf:70:83:
4e:31:86:ba:29:7f:bb:26:10:11:15:b4:8a:c4:59:
a3:c8:5f:74:cc:a6:ae:bd:5b:3d:67:a1:35:c5:4b:
1f:96:25:ac:89:4b:f6:2b:79:10:03:af:5a:68:ec:
3e:0b:6b:fe:a4:da:a7:e0:6a:33:44:1d:69:68:3c:
14:26:23:30:9b:52:2e:be:f1:43:b2:c4:65:06:3e:
de:99:52:30:34:d1:f8:11:6d:59:cc:c1:e6:4d:3a:
15:b3:99:ad:8f:11:5f:53:b1:ab:9b:50:2d:45:32:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:39:17:E1:BB:8F:FA:93:72:68:39:EF:FC:E7:0B:22:96:5C:64
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:b8:da:ef:91:44:9f:8d:63:e0:9a:8b:fa:db:f1:78:3d:
16:b8:3c:cb:92:a9:17:6a:c2:eb:f0:77:94:d4:aa:0c:64:d7:
f8:4b:c6:1a:b2:76:15:6b:3a:4a:82:72:b4:92:d8:4f:37:1a:
e7:0f:49:ac:91:c0:63:4d:3f:ce:0c:08:ac:e3:99:61:a9:61:
7a:12:e6:ab:8d:f6:ad:ee:60:86:63:12:97:12:ca:07:01:d6:
57:98:29:76:27:5b:b4:37:bb:6f:c2:60:ef:2b:51:1b:38:66:
c4:ac:29:99:48:e7:e0:02:df:09:fd:86:78:58:f6:68:d8:98:
b1:72:74:bf:06:fe:8d:73:1e:ef:36:dd:9b:c6:72:e5:2e:96:
28:3f:ee:80:8a:3d:0b:2f:c2:e2:6e:d7:bb:5e:32:5a:6e:d8:
af:8b:61:8c:5b:f2:8a:8d:72:c4:8a:9e:28:0a:16:5d:36:42:
9e:f1:d1:e1:ed:17:2a:f2:23:15:35:56:d3:82:e0:e1:43:aa:
49:0d:62:d4:c5:4e:b5:c6:a9:73:0f:42:7e:85:4e:c2:f2:86:
18:38:c5:c2:7f:ec:58:f1:5d:18:6d:f1:21:85:d5:e0:4f:0d:
d8:5d:3e:5f:18:ed:f5:30:45:3e:44:38:31:6f:e9:ef:d8:a6:
19:10:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:09 2025 by rpki-client