Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: biT+IyfB4eUTzok+cGFygvFoqG2ZKaBqA7BsG1UAf/U=
Subject key identifier: 5D:EF:E5:B9:EA:95:BE:38:B2:83:E1:0C:1B:D3:18:8F:B9:03:D3:B3
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0199FCFD747615AC4F225F09FA5E2BCD98B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 1039
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: SUPHqfWHnrMhzK1/osclRNeGb0CyewYIPcNlXZoOiuM=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:74:76:15:ac:4f:22:5f:09:fa:5e:2b:cd:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=5defe5b9ea95be38b283e10c1bd3188fb903d3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:d4:37:53:63:a2:28:a7:ab:43:ac:20:68:
67:7e:36:52:9a:cc:8a:7e:75:65:8c:09:7e:3f:72:
6b:88:93:68:07:01:53:4b:4b:2e:95:36:e3:89:13:
ed:8c:b8:f1:a6:5f:2c:55:9f:dc:2a:88:a0:46:e0:
50:2f:04:00:9e:ac:19:8d:93:83:63:e8:4f:2f:4c:
20:33:77:df:78:82:d5:e9:13:b2:e4:b2:d7:d0:a3:
99:fb:d2:5d:d8:05:fc:92:20:fd:3c:ee:9e:9a:3d:
ac:b4:c9:88:0d:19:db:08:f9:7c:62:e9:4e:34:c1:
74:e1:48:a5:d6:cb:ac:46:be:6f:f3:ce:79:fa:7a:
fe:79:e2:f1:28:6d:a6:f7:39:97:ab:c0:2f:ed:f6:
e1:4d:cc:3c:3c:1b:40:68:52:32:2f:34:ac:e1:e4:
ab:14:1a:b5:40:74:e6:80:79:a1:6f:82:13:29:70:
7e:56:cf:5a:be:45:b3:9d:07:48:0c:7a:81:4a:8e:
db:6b:6d:2f:37:a4:8b:ee:4e:a2:58:34:c8:44:a1:
09:1e:6e:8b:8c:3c:44:5d:c3:1d:f5:a2:6b:7a:5e:
4c:27:81:85:65:b1:e5:6e:42:60:64:b6:cb:21:d7:
88:da:c3:27:12:1e:3f:78:66:88:f4:8a:0a:f3:58:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:E5:B9:EA:95:BE:38:B2:83:E1:0C:1B:D3:18:8F:B9:03:D3:B3
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:e8:66:9c:e7:3a:69:45:2a:f1:26:d0:28:4f:c7:ed:a5:
fb:fc:92:44:af:10:2a:57:6b:40:59:cc:3c:f4:88:bd:56:8a:
d8:ef:00:e6:e9:54:db:aa:5f:b2:35:d9:67:76:ae:01:ad:87:
94:f6:b5:08:fb:f6:fd:16:92:c1:56:e4:46:0e:4b:d3:b9:f1:
a8:56:0b:43:f3:e2:a1:8f:e2:6b:4d:4d:34:5a:b1:7f:64:74:
1f:08:73:22:46:84:f2:a3:57:dc:dd:a4:75:2e:f4:7e:36:4a:
4f:ff:fb:c8:fe:da:cf:3e:3d:08:06:3d:65:0a:74:85:3a:bf:
cc:74:08:86:1c:c2:b3:40:2c:d2:11:3a:ed:a1:b4:17:8a:db:
db:7f:91:28:0a:67:d1:11:38:30:64:72:f5:fd:15:e2:50:c2:
59:91:ef:35:f2:59:c7:9f:7a:7c:33:cc:69:5e:d2:48:58:3d:
ce:81:d5:ee:24:00:ff:f4:6b:e0:18:f2:f8:92:8a:df:af:9f:
29:17:eb:93:e6:8e:33:36:5a:7e:ef:03:f0:f9:13:31:3a:0e:
c8:d9:23:32:54:e4:9a:85:b5:b6:98:64:45:fe:4f:a9:77:71:
2d:00:61:53:0f:78:18:4f:b0:4b:47:60:8a:1a:a4:53:c5:cb:
e6:38:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:36 2025 by rpki-client