Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier: QejxPvksaUjMtrHN+402fskPhSLbcc+rA8iITgbZAKY=
Subject key identifier: 68:8D:0B:DA:F4:14:C8:7C:22:9C:91:BE:CF:D9:F3:4D:E5:55:8B:8D
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial: 0198D65F2E4191FE4949066317071E499CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number: 0CA1
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: ZZ/d5bvNdgfXfBpWMZTQTRamGCamYjAfG0nedHOFrhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2e:41:91:fe:49:49:06:63:17:07:1e:49:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=688d0bdaf414c87c229c91becfd9f34de5558b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:b1:a6:f5:c4:cd:6a:9d:48:53:e9:79:39:
65:6e:39:fe:4c:41:7e:51:a3:0e:94:b1:87:9c:e2:
aa:fd:9b:4c:8f:2f:0d:1e:8c:0e:39:1d:99:52:38:
46:b4:e6:5e:7a:e5:c3:6f:a1:b4:1c:8e:79:e3:c9:
5f:06:0d:0a:e8:99:da:ed:c2:f7:5c:f7:14:aa:e7:
1c:ed:8a:4d:d3:44:d4:27:b9:c9:e8:0e:27:e5:8e:
17:53:95:f4:e6:c0:9b:07:34:62:be:3e:fe:f1:11:
0e:52:00:7f:7f:fb:5b:7b:c1:a4:2a:f1:88:f7:a8:
ed:04:3b:41:09:52:ff:e2:5a:c8:a5:ce:95:cb:6e:
aa:60:5c:c1:78:9f:ba:cd:32:ab:07:81:32:9d:95:
54:6e:77:fa:8a:2c:28:d6:19:73:d4:d3:8f:ad:a3:
89:ab:65:57:d6:61:7d:50:41:49:97:76:b1:12:bf:
d6:50:76:51:02:70:ea:51:74:de:6f:a4:78:72:fc:
6b:49:c4:1d:d6:de:01:7c:df:69:5c:f0:db:5d:71:
01:09:a5:ba:8e:0e:b4:77:60:f2:07:98:d7:de:ca:
d7:73:6a:78:68:a2:c3:87:07:31:53:5f:c7:a6:66:
80:ea:a2:a4:68:ba:78:09:8b:1a:ae:18:c4:e1:ba:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:0B:DA:F4:14:C8:7C:22:9C:91:BE:CF:D9:F3:4D:E5:55:8B:8D
X509v3 Authority Key Identifier:
keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:1f:6b:f8:7e:c1:8c:ce:c9:c9:07:50:46:a6:40:e5:df:
95:87:3a:62:03:6b:19:5c:18:c6:7c:ee:0e:66:48:6f:66:d0:
6e:44:dd:0f:ab:c8:5a:07:06:82:e9:1e:ad:73:4c:7b:47:26:
14:38:4d:9b:6f:79:d6:dd:db:1f:a3:fb:24:db:ee:0b:b9:15:
c9:a4:f2:2f:f7:2b:8f:3e:e9:fd:dc:64:2a:fd:b5:33:c7:e2:
a8:94:d1:4b:4b:e5:dd:c8:a6:3e:5a:06:6c:b7:b1:31:8c:24:
14:e5:9b:01:86:1b:ce:3f:13:62:78:e5:e0:e3:c5:3d:14:99:
d4:df:be:d6:52:df:8c:0a:32:c0:b0:05:f3:c3:c1:28:b4:5a:
24:e1:a6:84:ad:f1:7b:9e:f6:a6:b1:97:eb:56:bc:d1:71:ca:
1b:83:b4:0e:03:eb:4b:50:c9:4d:25:5e:fa:9e:12:e7:5c:af:
a8:dd:9c:30:65:58:4b:6d:73:87:7f:00:cf:a4:83:ff:29:3f:
86:0c:fa:97:07:6b:8d:98:c4:07:85:c1:6b:ce:78:cd:06:e4:
c5:63:f3:17:db:4d:4c:f4:b8:59:0a:ca:88:36:1f:70:86:0d:
87:bd:07:34:f5:92:c2:9b:58:26:2f:e4:ea:7b:40:7c:f6:ff:
0e:9a:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:34 2025 by rpki-client