Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: Hdal8lmYsVKNAVr9r4fa2jw2cbWMZRQ/A6nfcnvz7nA=
Subject key identifier: 31:96:F6:FB:FD:0C:D8:EE:94:1C:1E:40:8B:97:D6:17:5D:8E:F0:34
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0199FBEAA10CABA3C2FCD53FAA5B9C88FF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0AF9
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: WV79ebBEb8fSJKGp8rfnqMPqGhS7cBgt5MpzdBp9zFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:0c:ab:a3:c2:fc:d5:3f:aa:5b:9c:88:ff:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=3196f6fbfd0cd8ee941c1e408b97d6175d8ef034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:51:9c:3f:27:3d:57:aa:b4:b8:c3:0e:98:
4f:cc:ad:30:a4:5d:45:0d:8c:4c:db:4c:42:9c:c3:
c7:b5:3c:f2:05:c3:ca:df:d7:36:f8:f2:14:7f:14:
37:2f:4a:56:7b:ee:8e:f1:85:b3:41:3b:a3:64:79:
51:32:08:41:73:aa:00:02:8f:87:ec:27:a6:af:3f:
cf:03:fa:d1:89:ab:5b:38:5c:59:46:bd:85:31:8c:
43:19:d2:cb:ad:95:fc:5f:70:cd:6f:86:45:24:f4:
b9:10:67:e1:eb:71:52:c8:64:6a:45:44:60:8e:a2:
1f:56:52:d9:72:3a:69:62:b5:eb:77:40:7c:17:41:
14:6c:08:3e:e1:9f:22:c2:92:64:9f:6b:c1:48:44:
bc:4c:b1:ed:4c:dd:4e:7d:55:0c:a5:cd:d0:a3:98:
e3:30:06:2b:9a:e9:8f:02:7e:be:b2:34:44:86:dd:
34:5a:ff:8a:de:55:6c:12:43:3a:0b:11:11:c1:02:
dd:de:c3:99:09:fa:00:59:38:84:0a:87:16:b7:1b:
9d:cd:b0:a0:b8:31:ca:65:62:a7:9b:25:4d:7a:83:
ff:76:8f:b8:7e:7d:8b:64:66:85:5b:11:cd:e6:d1:
26:0f:38:df:0f:a1:0b:8d:c4:fc:e8:ea:40:e0:96:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:F6:FB:FD:0C:D8:EE:94:1C:1E:40:8B:97:D6:17:5D:8E:F0:34
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:ba:9e:44:96:61:96:2b:2a:c3:85:72:82:50:97:95:10:
3f:f7:cf:ff:ba:1e:ee:8a:db:49:10:15:03:9b:ce:d5:20:81:
e8:0f:9b:f7:9e:99:b1:02:0c:86:5d:ac:95:f6:45:9c:f7:59:
ea:db:c7:c7:1f:79:e3:6e:12:77:8f:c7:62:94:5e:b2:e8:b6:
cf:3c:de:05:23:2b:b5:71:2b:2f:7a:84:b5:ee:43:46:11:41:
13:f3:ee:12:aa:37:33:9d:a4:ae:5b:79:ae:aa:c2:70:c8:0f:
10:9e:b1:4b:03:76:7e:af:3f:d7:d0:e2:b2:a2:f7:4d:0c:af:
53:e6:a9:8c:fb:df:2e:f3:8f:f7:ee:de:c8:cc:a7:0f:df:29:
6d:49:84:72:ae:c4:72:da:c7:71:34:0a:34:da:29:08:47:c2:
68:95:59:06:c9:3e:db:94:f1:a4:37:03:4f:9d:17:db:7e:48:
c2:d6:82:bf:80:7b:53:94:a8:c0:67:de:55:02:7f:f6:51:93:
a5:66:2c:df:ca:ce:68:47:f5:95:1d:78:66:52:ff:e4:e5:9b:
3d:6b:c4:6d:af:05:f9:34:92:c3:18:8f:61:67:50:57:88:57:
73:22:5a:70:2f:26:4b:59:01:98:5d:59:7a:5a:cf:f3:ba:fc:
e7:36:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:02 2025 by rpki-client