Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: oz7kCuHRNvdoiLjiO5pTObaWtFfv2D8P9tweW+QiX/Q=
Subject key identifier: 28:10:57:46:6A:41:82:60:81:8B:B8:C6:DF:F0:F4:EE:03:88:EB:FA
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 0198D5BBF27A99807FFE9DD8F457DD61E7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 11CB
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: PmuU/7OlwMW/a6ET3tQnCOghjpy4bjF5xvZMYao4YhE=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f2:7a:99:80:7f:fe:9d:d8:f4:57:dd:61:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=281057466a418260818bb8c6dff0f4ee0388ebfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:7a:e3:64:1d:53:17:68:00:e1:75:dd:06:
6b:46:9d:4a:c6:87:a6:91:9d:6d:01:88:21:1d:9c:
c2:96:f7:a5:ed:2a:da:1d:85:85:be:b8:5d:19:51:
60:41:25:2c:84:70:09:f8:9e:09:92:4b:14:c1:8e:
c8:0b:ff:3a:cf:a9:0f:b4:23:a3:6b:30:5e:bf:87:
b9:17:4b:48:2f:03:68:21:12:0f:de:c1:99:97:64:
ba:fd:33:3f:2f:6f:6a:d5:7e:64:8b:5c:f7:31:b3:
18:6b:12:b1:cd:26:71:6d:84:9f:da:d4:ab:ae:e2:
7b:07:aa:78:39:1e:e5:4f:fd:1a:84:7f:ca:0b:d2:
57:b3:49:7b:e8:89:5f:f0:e6:c5:44:5c:25:ca:d2:
c4:b5:8a:99:92:2c:68:69:67:21:a1:e4:05:c5:4c:
b2:4a:bd:36:1d:93:dc:1e:de:87:88:56:5a:1a:0e:
7d:d0:00:8e:34:48:94:8b:d8:e5:d2:bc:f8:4c:9e:
fe:ce:b6:a9:ec:7e:26:ea:9d:69:c5:16:90:a9:c6:
71:bd:da:3b:1f:d6:a8:dc:95:ec:08:4c:81:57:96:
a6:3e:43:4c:a2:7e:81:30:e5:e3:a1:8b:05:c2:01:
52:16:5f:ca:28:b5:e7:da:3d:f8:bb:37:bc:d2:6a:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:57:46:6A:41:82:60:81:8B:B8:C6:DF:F0:F4:EE:03:88:EB:FA
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:25:e6:d7:1c:5c:91:2b:6d:34:44:22:52:c4:d7:03:fc:
b8:3d:59:e0:3d:23:31:e6:4d:6f:0c:be:be:87:75:39:9b:95:
cd:8f:02:28:fd:13:9f:e7:f5:4c:c3:9f:15:b4:8d:25:38:f1:
1f:38:5b:cf:da:b6:9c:56:d1:c1:68:14:ff:d5:18:6a:8d:6c:
f3:2e:cb:5b:57:b2:31:6e:7b:7a:9d:06:20:7a:ca:28:cb:ce:
b9:06:96:6e:25:97:1e:f2:da:92:6e:4c:9f:c5:3d:00:de:99:
e8:b5:2c:78:b0:52:68:73:53:6d:c3:45:15:2d:51:3b:3e:28:
f2:93:34:a0:b0:e7:79:f1:f6:9a:23:b7:df:69:1a:d3:90:fa:
cd:a7:4e:e7:60:7d:67:08:02:dc:ba:4e:3f:6f:e0:e7:23:c0:
dc:8f:da:bb:1e:db:38:8c:ea:92:ca:f0:cd:85:26:71:5f:d9:
6b:71:0e:4f:c0:db:ee:41:92:51:a6:70:66:bd:2b:27:25:6c:
eb:f1:39:b3:20:b0:f6:e9:61:ad:7e:2c:e8:70:1e:49:4b:db:
9e:12:44:70:b2:9d:0e:af:7f:c2:c9:f5:b9:bb:60:46:d1:28:
7b:58:f6:6d:6d:63:da:49:83:2d:2a:37:89:d6:84:d1:96:4f:
f1:aa:f0:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/J6mYB//p3Y9FfdYeenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjA2YWEzMjUyZTNlYThkNjg0ZWFlYzdhMjk5MzUxM2I1
ZDIzMDcwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD
EygyODEwNTc0NjZhNDE4MjYwODE4YmI4YzZkZmYwZjRlZTAzODhlYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQh642QdUxdoAOF13QZrRp1Kxoem
kZ1tAYghHZzClvel7SraHYWFvrhdGVFgQSUshHAJ+J4JkksUwY7IC/86z6kPtCOj
azBev4e5F0tILwNoIRIP3sGZl2S6/TM/L29q1X5ki1z3MbMYaxKxzSZxbYSf2tSr
ruJ7B6p4OR7lT/0ahH/KC9JXs0l76Ilf8ObFRFwlytLEtYqZkixoaWchoeQFxUyy
Sr02HZPcHt6HiFZaGg590ACONEiUi9jl0rz4TJ7+zrap7H4m6p1pxRaQqcZxvdo7
H9ao3JXsCEyBV5amPkNMon6BMOXjoYsFwgFSFl/KKLXn2j34uze80moAPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgQV0ZqQYJggYu4xt/w9O4DiOv6MB8GA1UdIwQY
MBaAFOggaqMlLj6o1oTq7Hopk1E7XSMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAt
NTg1ZWI4NDU1OGY5LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAtNTg1ZWI4NDU1OGY5
LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA58l5tcc
XJErbTREIlLE1wP8uD1Z4D0jMeZNbwy+vod1OZuVzY8CKP0Tn+f1TMOfFbSNJTjx
Hzhbz9q2nFbRwWgU/9UYao1s8y7LW1eyMW57ep0GIHrKKMvOuQaWbiWXHvLakm5M
n8U9AN6Z6LUseLBSaHNTbcNFFS1ROz4o8pM0oLDnefH2miO332ka05D6zadO52B9
ZwgC3LpOP2/g5yPA3I/aux7bOIzqksrwzYUmcV/Za3EOT8Db7kGSUaZwZr0rJyVs
6/E5syCw9ulhrX4s6HAeSUvbnhJEcLKdDq9/wsn1ubtgRtEoe1j2bW1j2kmDLSo3
idaE0ZZP8arwvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:18 2025 by rpki-client