Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: 8ufKYglUCyZhbXlTBZeqv1fJKodRl1N5Rtrh+CUI2zI=
Subject key identifier: 2D:5B:FA:BC:E4:E5:09:B5:A4:AE:3C:37:B6:05:18:C6:F2:42:90:4F
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0197B88FEA41A0EC1441D4A218180E8FE8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 09CD
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: t81+xJwTNDzv+EGaMR8I6t9au2ucepBBzaCzZryChZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ea:41:a0:ec:14:41:d4:a2:18:18:0e:8f:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=2d5bfabce4e509b5a4ae3c37b60518c6f242904f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:d1:0f:70:21:f2:ff:f9:81:03:2a:31:24:
07:9f:b8:a2:90:b2:7a:06:0f:35:a5:53:17:ff:5d:
16:30:2b:17:ae:12:fe:66:24:9c:ce:95:3e:3f:0b:
55:79:45:6e:f9:0a:eb:9b:b2:f6:95:c6:eb:c2:a7:
ae:05:1b:9f:f0:3d:c7:88:d6:30:16:8f:40:84:dd:
68:3a:66:af:d1:46:da:81:ce:de:a3:cf:58:18:f9:
eb:8b:c5:a3:35:5c:d7:48:25:21:56:5b:67:77:88:
f1:97:12:57:2d:e9:d6:c4:32:21:ff:e3:77:08:ec:
37:81:bd:d7:7e:62:42:3f:17:cd:b6:c9:35:9c:b3:
70:56:27:78:07:76:14:78:a3:81:57:6e:d3:5d:56:
86:f7:c8:ac:93:41:51:3a:d8:e0:c7:e4:47:6d:48:
f0:dd:19:7a:80:87:ca:e8:a9:51:65:10:3c:8e:4f:
9c:cd:4b:d1:14:84:35:ac:72:b2:f0:78:b7:20:a9:
00:6a:dd:48:d6:86:bf:bd:df:49:cc:e8:04:ed:8a:
1a:db:22:ac:8c:b6:66:46:23:6f:f7:ae:36:6c:90:
c5:ac:5d:6c:d3:d9:ee:f5:22:15:34:5c:c0:14:75:
6a:07:6a:b2:ab:5c:76:dc:b2:b5:7f:23:2f:fb:9a:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:FA:BC:E4:E5:09:B5:A4:AE:3C:37:B6:05:18:C6:F2:42:90:4F
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3f:cf:f6:a0:70:74:bf:3c:54:5c:b6:78:71:2b:28:c9:3d:
0f:25:c0:8f:00:90:8a:84:4f:37:33:de:d5:07:48:70:6c:30:
58:1f:9b:a9:5e:af:01:9e:6b:41:63:e6:c7:01:f5:37:6b:14:
98:9c:52:7a:59:f0:46:30:5b:af:59:cb:6d:23:7a:d2:4d:5a:
56:2b:ee:94:6e:55:fd:6d:77:5a:09:db:53:38:ff:e4:ed:3f:
85:a0:f9:d1:e4:8f:2c:25:90:e7:02:d7:32:2c:41:80:f3:69:
06:95:7d:c5:62:0f:33:00:c8:36:fe:6c:f4:05:2c:4f:c0:a4:
c7:c1:a0:bf:c1:65:89:6a:4a:27:c4:76:16:63:1c:79:5e:fb:
85:4a:b4:0b:86:1e:6e:41:07:21:60:e8:bb:03:a9:c2:00:b6:
47:d3:a6:cd:f5:34:b6:49:33:50:a2:73:c8:62:51:68:03:f4:
43:f9:9e:48:f1:58:48:a7:a8:95:09:d1:84:aa:90:df:a9:bb:
af:4f:45:6f:8d:24:ce:ee:4f:46:1c:78:13:41:bf:e1:07:4c:
29:fd:fe:6c:2a:2e:f8:47:94:f9:fe:98:f3:89:da:74:b6:9d:
f1:1d:46:7e:55:90:10:2b:68:de:82:bc:d8:a2:b1:00:9a:85:
d3:51:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:11 2025 by rpki-client