Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: t95f9IsalGwbh5omuSejTeMR94PvNCTs1Wr6utCNyOg=
Subject key identifier: 11:A3:AB:24:EC:9B:AF:DF:C1:07:11:14:EC:59:E0:7C:10:03:95:1A
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0198D7738B56BCB851D6D5CD8C765E901838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0FA1
Signing time: Sat 23 Aug 2025 15:02:10 +0000
Manifest this update: Sat 23 Aug 2025 15:02:10 +0000
Manifest next update: Sun 24 Aug 2025 15:02:10 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 08AXXJ+TgMjmeljlYKUQ1hekm3XJiHy7S17eo9teVZ8=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8b:56:bc:b8:51:d6:d5:cd:8c:76:5e:90:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Aug 23 15:02:10 2025 GMT
Not After : Aug 24 15:02:10 2025 GMT
Subject: CN=11a3ab24ec9bafdfc1071114ec59e07c1003951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:5c:6d:13:74:ef:ee:1f:42:17:75:0d:38:
41:65:3b:f8:14:c1:ca:b2:2c:24:9a:16:fb:7b:95:
43:35:fb:f7:88:9f:93:03:80:98:77:9f:9a:21:58:
35:00:74:c5:d8:09:a1:46:0f:d5:1e:57:2d:ac:2b:
66:89:f4:f0:11:78:11:e7:ae:13:ed:00:3a:34:0c:
c8:08:a8:c9:1e:4b:2c:37:58:de:81:ef:b6:05:bc:
68:15:6c:17:7e:7c:89:a2:8b:78:99:6b:4a:14:af:
8e:dd:80:3c:f9:55:1f:d0:ef:26:fd:bf:80:89:d9:
19:93:1b:d8:55:90:d6:0d:82:9f:c1:02:ee:f7:f3:
af:9d:26:b9:99:92:47:32:0f:01:65:d3:3f:56:64:
67:20:e2:18:04:70:51:b5:35:0a:4c:ad:5f:e3:5c:
f3:6d:83:32:35:95:8d:49:64:1a:87:e6:15:6b:db:
61:d1:1d:d8:95:97:7f:e7:76:38:9b:ac:a8:35:54:
1b:76:f9:11:24:a9:39:2a:e5:f4:1f:b5:73:9b:f0:
ad:ef:f6:d3:12:cb:5c:ce:c8:78:f4:75:f6:d4:a9:
c7:51:7c:8f:4f:7a:8c:15:bd:56:17:c6:3d:55:20:
b4:35:40:35:cf:8b:4c:d5:52:e7:46:7f:79:72:ba:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:AB:24:EC:9B:AF:DF:C1:07:11:14:EC:59:E0:7C:10:03:95:1A
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:8a:a6:b1:6b:75:56:19:be:f0:df:a1:65:40:0d:ce:2a:
d1:d1:4d:58:c3:6b:c9:ef:b2:96:30:a1:0f:e8:1f:47:3b:40:
ad:61:53:35:42:70:09:3a:c4:d9:86:ee:3d:ce:96:05:5f:0f:
6b:ab:99:6f:91:71:d9:9b:38:3b:27:88:0e:b6:d2:e4:53:e7:
34:27:7a:6a:3e:a8:6f:03:07:d7:f2:0d:23:02:95:5f:4a:cc:
2c:ae:94:33:4a:79:e5:f1:44:f8:3d:43:a7:5e:e3:85:53:85:
a5:14:e1:63:ec:11:a0:69:7f:b3:74:01:b7:83:50:ce:84:ad:
77:65:b8:3c:f6:6c:15:28:2a:ff:13:44:04:e9:36:cd:c8:6e:
84:80:8f:3c:18:46:80:66:2d:1e:cf:8b:67:9c:a1:9d:6c:7b:
d0:52:7f:bb:67:c4:c6:d2:f1:89:65:b4:55:1d:36:30:60:fa:
25:37:f2:0f:d7:b0:4a:0f:06:68:6b:91:99:06:67:d9:59:bb:
10:48:9d:f5:71:fc:3c:1e:2a:7e:1a:4a:9d:8b:80:80:a4:79:
91:92:01:58:52:43:72:a3:a5:79:9b:50:ea:24:78:af:3b:f8:
38:a0:54:63:1c:be:b3:b4:f8:0f:1f:5e:bc:12:df:9f:9a:0b:
3f:63:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:54:44 2025 by rpki-client