Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier: /Tl+GLev0WDRC/3jen/Ay8Me2j3eO3r00pU4bT5o2yM=
Subject key identifier: D7:8D:64:BF:6E:84:2B:7E:B1:F1:5E:00:40:20:80:92:C6:B2:7E:8A
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial: 0197B6A1B85A60725BD726595B338FA6AB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number: 0C0C
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: tbk63OgqBGtb6tbwERi+T08Gv70GSiRdPhFcWMmexNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b8:5a:60:72:5b:d7:26:59:5b:33:8f:a6:ab:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=d78d64bf6e842b7eb1f15e0040208092c6b27e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:af:bc:6d:e1:89:25:f0:8e:da:b8:5a:ee:
61:f3:ae:02:e9:c0:59:5b:2a:c1:d3:ae:82:e8:53:
3b:b5:0f:d1:b9:7c:40:22:f4:11:79:b6:37:72:36:
96:14:44:25:f1:fe:f7:f7:37:4d:1f:46:70:3a:9e:
f2:d2:8b:46:b3:7b:24:42:c1:5a:69:de:d7:b6:5e:
b7:9c:f4:56:25:fd:f9:32:6c:4b:29:30:6e:99:bb:
32:10:b0:d0:c3:7e:23:6a:d7:4b:9f:55:4d:54:99:
79:10:59:0f:5f:aa:8f:6b:0d:9e:09:ad:cf:ae:d5:
ad:18:69:5c:32:63:36:2f:07:99:5d:cb:32:83:26:
3e:ac:f7:4f:c4:f3:e3:5d:c2:d4:ea:3f:8a:c4:06:
5f:7b:01:49:be:6c:bd:14:b1:7a:a0:34:0a:44:50:
8e:72:72:62:4f:23:99:6a:9a:3a:74:4f:41:77:39:
e7:df:2f:2c:f6:25:8f:16:39:a1:72:2a:fc:89:d5:
a2:c1:51:4c:5f:fe:da:1a:20:59:d1:40:4b:e1:61:
e0:b9:6b:ac:b1:ab:9e:51:6d:a4:b9:77:73:e9:7f:
a1:a5:7d:c6:3b:36:fc:f9:3f:88:b2:5c:35:7c:61:
ac:2e:4f:38:93:f0:3f:eb:80:4c:ba:48:6c:62:9b:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:64:BF:6E:84:2B:7E:B1:F1:5E:00:40:20:80:92:C6:B2:7E:8A
X509v3 Authority Key Identifier:
keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:75:26:71:0f:16:6f:05:0c:e2:fb:4e:15:88:9e:1d:d6:a4:
52:66:20:89:f4:0b:d7:45:f1:c4:59:cd:3a:96:e3:b5:bd:87:
e8:cf:0e:10:fb:5e:bf:b2:12:1c:9e:41:02:4b:92:6b:85:40:
32:0b:25:65:57:11:2e:55:ed:36:35:db:cd:ca:c4:ea:8f:1c:
0b:5d:64:43:71:d7:e3:5e:35:a5:b8:64:42:14:1f:68:f1:69:
ef:96:91:8c:47:12:ce:0f:e8:88:ec:58:23:12:26:4c:36:d0:
06:99:c9:49:96:43:e9:01:4c:24:a5:f8:2b:b1:5d:b4:21:83:
eb:47:f2:d6:44:21:5f:87:d8:27:92:46:45:d7:46:de:d6:93:
ca:b8:08:85:11:ad:a4:4e:d4:69:f0:64:2d:fa:7e:ea:ac:01:
ae:5d:38:0c:92:cc:12:b8:a2:16:a3:bf:3b:b2:31:0e:c6:27:
e2:63:db:91:4c:db:54:1b:93:e1:5e:9b:ac:21:6a:d0:26:1b:
2a:41:cd:c3:c2:fe:7c:96:a7:6c:5c:05:b9:de:9b:b9:6d:91:
ee:8e:6a:aa:21:70:a1:2d:00:51:2a:c4:7a:7f:fc:fd:80:38:
40:0c:49:bd:fb:f5:27:bb:0b:07:f6:ef:d0:79:35:c1:11:0f:
f6:c3:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:34 2025 by rpki-client