Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier: nuAAh70yz5IN+YoAzbL6rQZ8eERZdLPUFrylCwRObcw=
Subject key identifier: DD:93:91:44:ED:E4:27:C6:C8:C7:45:57:36:F1:0C:02:43:69:F4:E4
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer: /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial: 0197B6A182F7C5528A38B8C8939E4DDFDFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: jW6e34itnmad4SEV9XxzvgHuIkfTDVqHDLBll1Vn/0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:82:f7:c5:52:8a:38:b8:c8:93:9e:4d:df:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=dd939144ede427c6c8c7455736f10c024369f4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:64:a9:e5:29:a7:9a:11:e3:e4:38:e1:2a:
a8:4b:8b:f4:ba:59:54:7c:bb:10:40:3d:4f:d2:26:
a0:84:65:09:53:12:51:5b:fe:a1:9b:fd:8f:09:8c:
33:67:42:9b:17:37:51:cd:0a:1f:a5:e1:51:3d:cf:
80:42:c2:34:fa:45:4a:ee:ce:e9:81:0b:a6:7a:98:
17:c8:5c:0c:c6:e8:11:d0:89:47:56:ef:09:91:57:
35:45:00:81:c7:40:1c:05:f2:57:26:aa:a9:18:6a:
01:e9:a9:05:01:83:0c:a8:e1:0d:a5:7c:b2:7f:a7:
1a:db:f1:d3:32:dc:2d:b3:a1:84:66:52:25:d9:61:
bd:ed:98:fa:da:08:61:23:ee:18:70:59:5b:80:7b:
a7:4c:a6:13:23:48:60:1b:65:c3:36:d6:4d:64:59:
00:48:b8:2c:98:07:b8:9e:ef:d0:8b:04:98:9d:8d:
81:ad:ae:fa:91:c5:39:f3:75:ae:45:77:64:47:26:
00:46:0b:7b:b9:a4:37:05:8f:f2:26:46:36:d9:f4:
ab:a9:84:88:c0:b1:15:eb:e6:41:8d:c4:bf:46:ba:
5b:ca:df:67:d4:83:3b:c9:ff:aa:f7:76:64:3a:28:
c8:6c:f3:16:da:ed:a9:24:1b:d6:23:32:17:8b:f9:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:91:44:ED:E4:27:C6:C8:C7:45:57:36:F1:0C:02:43:69:F4:E4
X509v3 Authority Key Identifier:
keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:0f:fc:fc:9a:a7:5c:88:a9:7b:0b:d6:7c:23:77:b9:a9:
50:57:2b:b0:2a:f2:5f:23:3e:d2:56:89:a9:0b:73:4a:38:26:
21:c3:e2:3c:40:bb:64:ba:43:94:fb:77:36:be:5e:96:8c:2f:
b1:7f:83:85:4e:49:5b:ab:32:b8:96:a7:16:3c:9f:53:93:b6:
5e:73:d3:f1:bb:0f:76:6b:02:9d:a5:f6:cc:33:86:94:32:50:
56:42:22:00:b5:55:32:94:fd:66:45:04:c3:3c:84:30:a8:0d:
e0:d6:39:ec:34:2f:81:4e:20:88:96:ee:bb:48:34:f2:41:48:
7b:2d:35:46:8d:7e:73:04:89:34:1a:da:34:6b:6d:0f:72:6d:
85:b0:a7:69:79:09:15:c3:a1:75:13:36:fd:71:39:7a:ce:4f:
f8:26:8d:82:4d:3d:9b:5c:8a:4f:1b:61:db:5d:27:b3:fa:a6:
a7:70:10:7a:e4:a3:3e:04:6d:01:36:68:b8:69:07:8d:a0:fd:
8f:23:23:7c:af:77:0e:c6:cf:99:8f:5d:f7:94:92:87:07:02:
f2:c1:38:ee:ea:7d:fe:6f:e0:2a:24:0b:b8:66:b8:e7:8a:0a:
ee:80:0e:96:0e:10:5c:e1:90:60:76:f2:1d:fd:17:ee:54:a3:
a2:cc:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:21 2025 by rpki-client