Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier: DqDsWfvTVTZ+Tx5WEFD4lP4W97vm+n0TGkTVPfJ4haI=
Subject key identifier: 00:76:4C:E5:04:F7:D8:4E:DD:7F:37:1C:3E:72:3D:32:7A:DD:C1:BD
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer: /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial: 0199FDD9DDBC2FB105BBB09FCDE42FF3FA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: GXmMSWuOhsirROR1WSRj8QxWibBlY81qU7obFXyayeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dd:bc:2f:b1:05:bb:b0:9f:cd:e4:2f:f3:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=00764ce504f7d84edd7f371c3e723d327addc1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:5f:6e:d7:05:7a:2e:eb:58:6b:3d:5a:31:
b9:8f:f2:9c:d6:b6:be:54:c6:fa:18:1e:7f:18:58:
95:68:16:04:bc:32:5a:40:83:7d:8e:03:c6:18:55:
5a:54:b9:e5:59:f6:30:77:7f:94:7a:c1:d5:6b:ca:
c6:4f:1d:84:4b:05:56:af:7c:0f:0f:96:33:a4:4d:
27:9d:7f:66:ec:05:47:8e:4e:40:69:c4:b9:65:69:
7d:27:f3:12:49:92:dd:fe:e0:11:20:c2:a2:66:1e:
59:a3:f3:ab:3f:e9:7c:37:d1:3f:b6:36:cb:8c:1e:
f7:ab:50:a2:f1:b4:1e:f9:f3:cf:05:a1:66:19:fb:
f4:bc:60:3c:85:ed:60:9c:2a:9b:04:dd:5d:a8:00:
5f:0a:b3:7c:a1:99:21:2a:20:f7:c2:42:24:1f:8a:
df:42:25:f4:d3:6b:6c:5a:25:4e:e1:85:a4:b3:5c:
f5:7c:27:ae:14:c1:48:51:3a:88:53:fc:91:87:55:
df:86:80:e8:5c:96:ec:cb:5d:20:a6:d2:29:a1:dc:
47:47:7e:33:fe:f4:b5:8a:b3:d7:94:09:90:1a:d1:
82:a4:97:f8:be:7f:c2:28:d9:35:9a:e0:a3:89:ea:
c7:8a:df:b5:21:dd:e2:6a:03:2a:0b:cd:ad:61:dd:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:4C:E5:04:F7:D8:4E:DD:7F:37:1C:3E:72:3D:32:7A:DD:C1:BD
X509v3 Authority Key Identifier:
keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a6:61:a0:ac:c2:58:cf:b5:99:44:94:e7:12:f2:e1:68:59:
67:15:0e:d3:f3:5c:80:27:46:a8:00:6d:4e:23:a7:d6:b9:da:
67:0f:29:92:d9:16:88:07:6a:6c:6e:51:10:26:3e:d6:e1:2f:
d5:b2:9c:2c:87:7f:c6:28:e0:a4:49:62:ba:8c:e6:55:39:fa:
93:d3:e0:9b:0e:a1:14:0b:8b:46:f2:92:a3:31:92:9d:81:63:
43:19:59:c2:96:61:92:23:af:a4:06:16:99:11:c4:a8:30:f9:
f5:f6:c3:d6:df:b2:d6:16:00:e5:3c:d2:e7:de:b9:d9:aa:c3:
84:e2:72:d2:ed:64:bc:9f:7a:8d:52:d3:24:c3:dc:66:2e:36:
ce:bc:5d:ec:e9:83:96:df:6d:19:4c:d8:2e:d5:09:fc:ac:db:
55:5b:66:bb:72:2c:a2:1d:50:cd:ef:6e:3c:1d:d2:fa:e2:3a:
f2:43:9b:6a:60:c6:d8:96:42:05:2b:92:86:2a:51:c6:c6:92:
cd:96:c2:b4:e0:23:63:25:38:e5:10:91:e0:ed:da:c3:da:f2:
7f:0a:88:ca:aa:37:fd:a7:24:af:a5:ab:68:21:61:f2:4b:48:
cb:b7:26:1f:c4:af:a2:4d:f4:a6:c9:9e:68:b1:86:17:a2:ee:
58:0b:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:32 2025 by rpki-client