Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier: 1YaL6eM9MPq2kI9mh0t1VD9egyrcqgilsIvF2iceYAA=
Subject key identifier: 01:06:F9:2D:88:DB:C0:B5:54:05:3F:33:D6:20:1E:45:F0:C3:D8:4A
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 0197B77C2BD3243D773595820C312EA93308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number: 0F5A
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: pA7Y0YSeJFXRwMr3K6x/sDJ4H2uyxWGc5bf6w/14LuQ=)
2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2b:d3:24:3d:77:35:95:82:0c:31:2e:a9:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=0106f92d88dbc0b554053f33d6201e45f0c3d84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:74:32:65:1e:dc:51:f9:dc:f0:cf:2e:19:
69:59:55:bc:08:c3:83:bc:81:6f:a9:98:82:e7:ed:
98:47:02:99:2a:c2:72:f7:a2:99:e4:2a:a5:54:46:
56:62:0c:2f:9d:7a:47:91:16:c0:e4:20:d4:77:3a:
88:7d:23:8c:14:e2:6d:4d:76:bb:dc:3c:e4:9e:31:
35:e7:50:0b:d1:fe:77:44:cc:43:12:da:0d:69:62:
40:73:fd:84:b8:9f:d5:7f:ea:1f:18:d8:c0:e8:25:
ca:83:49:21:0a:51:43:fb:ba:3a:da:b9:a7:15:3d:
07:fc:fc:5c:67:d7:9f:41:3e:bc:51:7d:1e:86:e1:
0c:b7:74:c3:ae:3c:74:0b:67:f8:13:8c:6e:6c:15:
8b:37:74:c2:c7:88:2c:8f:24:ee:6b:b4:3a:ca:28:
45:6a:e3:69:53:4a:87:8c:c1:e4:ee:3c:98:f4:77:
f0:63:22:1f:f0:54:8d:06:dd:8f:d4:cc:89:9b:f4:
41:d7:62:6b:1e:e8:f0:3f:21:d6:7f:90:78:b9:dc:
57:c9:1a:f4:6c:d3:d5:24:cc:0d:8d:00:35:f9:ce:
01:25:dd:b9:1f:d2:6e:dc:a4:d7:96:f2:a4:c4:75:
7e:df:3e:35:a2:d4:dc:6c:05:8a:e2:f6:38:8a:50:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:F9:2D:88:DB:C0:B5:54:05:3F:33:D6:20:1E:45:F0:C3:D8:4A
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:ac:ba:43:46:67:03:9e:b3:ea:d9:60:88:47:56:60:f2:
61:3a:76:49:f0:ad:de:5a:ed:1b:66:02:d5:54:f7:77:e2:18:
45:d7:cf:7b:52:57:d9:2d:2e:3d:6a:71:27:8f:13:6e:98:14:
d7:e0:b3:df:8a:98:d7:f5:d3:83:33:0c:a0:9c:14:00:0b:4c:
48:11:87:e5:e0:5c:98:fa:9b:ef:cc:44:64:7d:e3:b0:06:e2:
c8:85:c6:4e:4a:de:47:24:9d:79:03:b5:ca:11:31:bc:11:ac:
0f:16:93:97:4d:aa:74:19:26:03:f2:ee:a7:20:03:93:a4:63:
d8:f3:58:58:f3:0e:66:8d:6f:8c:f1:80:8b:2b:78:c5:22:24:
9c:a5:b1:d5:1b:a6:70:03:c3:b3:cd:0c:af:b5:d5:70:ef:d4:
85:bc:71:0e:17:71:45:3c:e1:96:28:ac:72:ba:db:08:94:94:
be:ef:88:6e:f4:88:fd:82:a6:99:e0:0a:bb:17:4b:c7:45:a8:
e1:3d:f4:6d:a8:d2:9a:bb:54:f2:e4:4b:49:f3:d2:61:83:57:
ee:df:34:d3:ad:b2:0d:59:44:66:5c:8f:a5:ab:ac:76:33:fb:
4a:fc:66:69:89:31:40:a7:5c:39:07:8c:e8:e5:c4:06:f5:19:
cd:c0:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:13 2025 by rpki-client