Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: SbiOwf6Vn2OqD+RwNYpCbvl3m1gnMEBpZNV3HL0FhnU=
Subject key identifier: 6E:CB:F1:56:E3:5D:9B:B7:41:DC:85:37:CD:A0:70:84:69:AA:E9:9A
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 0198D515A781A51A46176EEA05A391001574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 053B
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: GtWwSWKWT2a6Bo5Oz0uv3dlWYbDhg4mrUjhBlp7b8ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a7:81:a5:1a:46:17:6e:ea:05:a3:91:00:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=6ecbf156e35d9bb741dc8537cda0708469aae99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:bf:f6:e1:eb:46:b6:1c:18:e4:88:49:48:
5f:71:fe:2f:d0:78:42:18:20:44:45:0a:7f:ce:9d:
ee:50:31:61:a8:e6:1d:94:95:d1:ed:17:9a:3c:fc:
5f:97:74:ce:da:18:be:b9:ac:99:9a:af:b7:91:95:
3d:9f:c9:52:44:d7:95:92:af:7a:6f:15:11:78:98:
68:30:09:24:6e:d8:34:c2:8a:48:95:d6:8d:bb:80:
de:1d:a7:af:a8:94:8c:33:cc:4d:2f:01:fa:d7:21:
2f:cc:79:aa:fb:62:7a:0f:50:e8:26:df:9d:fe:bc:
52:13:2f:c0:fb:f1:2f:a4:6f:56:33:be:34:c0:b7:
01:b5:2f:41:77:95:de:d2:51:da:2e:b8:aa:44:50:
69:18:65:bc:a3:09:a6:ca:aa:22:f6:e8:f8:bd:b7:
3f:57:b0:8d:19:e5:d3:f6:6b:90:63:ef:57:15:84:
f8:c6:74:29:15:43:6b:7e:95:03:1e:bd:6f:07:c2:
17:1a:1f:5e:71:b2:aa:1b:98:6e:4f:69:e8:31:54:
9b:ad:53:35:a3:be:a7:9f:fd:ac:ed:a9:ab:e2:8a:
be:e5:70:7c:98:36:ad:bb:26:4b:85:e5:cb:93:00:
14:f5:73:2e:09:9c:01:28:00:5d:f3:46:b5:99:22:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:F1:56:E3:5D:9B:B7:41:DC:85:37:CD:A0:70:84:69:AA:E9:9A
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:83:8e:ee:02:51:41:4e:f7:d6:fb:3a:61:54:7b:d3:4e:
ac:98:21:73:dc:e9:51:22:43:00:34:02:f3:c2:90:c6:35:c0:
45:89:0a:f5:74:b2:1d:51:e5:58:e6:1d:8e:d5:1c:64:4f:81:
36:1a:29:e8:e7:09:ce:df:db:09:c9:af:b6:25:eb:93:bc:bd:
fd:ee:4e:57:ba:15:ba:e7:2c:9d:99:77:fd:b5:fd:37:d7:92:
76:9c:e2:f4:43:43:75:d9:3c:19:fb:5b:f3:da:32:25:d2:94:
11:88:58:eb:b9:8e:60:6d:28:53:e4:c3:52:53:a5:9c:bb:56:
1e:39:b3:7c:7e:2e:35:9e:10:bb:64:3e:68:92:ce:e6:d1:98:
6e:05:72:3a:14:05:ac:ad:32:74:c0:57:01:74:e7:63:9d:af:
9c:e2:35:dd:32:fb:af:db:dc:d3:10:9a:11:01:fa:2a:6c:d2:
8f:92:51:ab:66:cd:dc:0b:a9:27:97:d2:cc:dd:dc:51:25:c3:
21:c8:d1:ba:63:de:5d:74:53:6d:cb:33:74:51:51:23:65:81:
4a:8c:e6:6a:e3:58:07:63:5c:e5:e1:4a:cf:66:31:28:ba:2e:
6d:72:49:17:01:f4:b9:dc:21:ec:40:5c:9e:f5:60:82:99:be:
e0:1c:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:55 2025 by rpki-client