Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: lMU4AKLJEIPuJ3dvbS5/cKHq4kBzpHEdSp9PXGcTr0Y=
Subject key identifier: D0:19:6D:16:C0:43:7F:4A:F0:85:02:19:F6:23:8F:E6:7A:B8:AA:72
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0197B7B33AAF6888610E3BE99FEA1883F3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0F0C
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 3pC+dK9mGZSLSDS8kD6Xt9uApFkDvJE2ySKT/GDMfDo=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3a:af:68:88:61:0e:3b:e9:9f:ea:18:83:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=d0196d16c0437f4af0850219f6238fe67ab8aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:29:05:4d:1a:58:c9:39:35:73:8d:ce:7b:
0e:f3:40:fa:86:d4:e3:db:42:35:70:4c:06:7c:27:
82:3e:4e:f8:07:25:c5:57:3a:fb:c2:8f:db:75:7c:
f4:d1:bb:ad:47:98:75:fb:2e:c7:2a:17:7e:ff:4c:
3c:2a:53:31:6a:b1:39:f8:0d:1d:0e:d4:69:fb:44:
9d:e9:ac:cc:1a:18:b1:8b:a8:77:04:d2:75:22:9b:
d3:93:2b:da:4c:30:d2:88:d4:dc:f5:e9:16:8b:4a:
7e:77:06:09:cc:08:20:b8:6f:e3:e1:79:e1:a0:e1:
a0:a9:c5:a9:3e:b6:76:3f:e7:c8:d3:39:d3:b2:55:
3c:da:fc:a8:ba:a0:80:77:80:92:da:65:a7:ac:6d:
9f:05:9b:fb:bd:c7:6f:99:fd:29:58:80:3a:cf:02:
6c:d0:a7:fd:01:c0:0f:22:90:6b:bd:60:89:58:ff:
c6:19:32:68:5b:72:d1:91:e3:e5:48:74:56:10:70:
e5:02:20:f1:bc:04:54:66:60:be:1c:b4:c9:39:88:
bf:42:42:30:c3:8d:a1:d8:29:a9:aa:63:cc:e3:87:
94:e8:b5:97:23:9b:f5:d2:ff:84:1a:20:0d:46:19:
2b:9b:65:47:93:92:a0:fd:9b:66:be:ae:78:73:31:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:6D:16:C0:43:7F:4A:F0:85:02:19:F6:23:8F:E6:7A:B8:AA:72
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3d:b4:f8:34:eb:7b:3b:0d:ed:4a:f2:36:63:db:3c:95:30:
d5:69:a8:5f:77:5d:14:67:44:e9:fa:1c:b5:60:44:48:3e:9d:
bc:3e:f0:a4:c9:35:c9:cb:7a:6b:24:3c:c1:bc:c3:64:f7:0e:
27:7b:df:5d:2a:5c:f3:c2:ce:31:74:89:a9:9c:1a:4f:e1:e6:
4b:d2:7e:c5:78:24:e2:09:2b:a4:2c:f3:99:cc:be:3a:7f:9c:
65:01:b1:3f:54:6f:44:d5:3f:a0:fc:b4:8b:61:54:62:f1:15:
79:3f:4d:bd:e0:15:4f:4b:92:23:4f:d7:9d:83:51:e1:94:71:
00:21:7e:f9:21:96:e2:1e:6b:ab:28:a8:1b:6b:d2:ab:24:f1:
81:dd:4a:98:d9:2f:f0:c4:7b:34:67:eb:44:63:d8:e6:5c:aa:
a3:ef:5b:35:c2:af:31:c0:3c:3b:ed:ed:db:55:1c:a3:6c:6b:
1f:2e:98:2c:58:e5:d6:00:db:ba:79:55:ab:68:4a:aa:08:7c:
79:bb:12:1c:12:41:2b:e9:85:56:76:91:c8:b6:d4:d6:58:7e:
6b:9c:e3:40:8c:da:60:30:4f:aa:d9:cb:f8:eb:fc:c9:67:bb:
94:12:da:33:66:0c:a9:eb:bf:82:32:68:b1:b7:f7:bc:a0:53:
77:f9:49:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szqvaIhhDjvpn+oYg/OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1
YjBkYTkwHhcNMjUwNjI4MTgwMTA1WhcNMjUwNjI5MTgwMTA1WjAzMTEwLwYDVQQD
EyhkMDE5NmQxNmMwNDM3ZjRhZjA4NTAyMTlmNjIzOGZlNjdhYjhhYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ8pBU0aWMk5NXONznsO80D6htTj
20I1cEwGfCeCPk74ByXFVzr7wo/bdXz00butR5h1+y7HKhd+/0w8KlMxarE5+A0d
DtRp+0Sd6azMGhixi6h3BNJ1IpvTkyvaTDDSiNTc9ekWi0p+dwYJzAgguG/j4Xnh
oOGgqcWpPrZ2P+fI0znTslU82vyouqCAd4CS2mWnrG2fBZv7vcdvmf0pWIA6zwJs
0Kf9AcAPIpBrvWCJWP/GGTJoW3LRkePlSHRWEHDlAiDxvARUZmC+HLTJOYi/QkIw
w42h2CmpqmPM44eU6LWXI5v10v+EGiANRhkrm2VHk5Kg/Ztmvq54czESZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAZbRbAQ39K8IUCGfYjj+Z6uKpyMB8GA1UdIwQY
MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt
ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx
LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz20+DTr
ezsN7UryNmPbPJUw1WmoX3ddFGdE6foctWBESD6dvD7wpMk1yct6ayQ8wbzDZPcO
J3vfXSpc88LOMXSJqZwaT+HmS9J+xXgk4gkrpCzzmcy+On+cZQGxP1RvRNU/oPy0
i2FUYvEVeT9NveAVT0uSI0/XnYNR4ZRxACF++SGW4h5rqyioG2vSqyTxgd1KmNkv
8MR7NGfrRGPY5lyqo+9bNcKvMcA8O+3t21Uco2xrHy6YLFjl1gDbunlVq2hKqgh8
ebsSHBJBK+mFVnaRyLbU1lh+a5zjQIzaYDBPqtnL+Ov8yWe7lBLaM2YMqeu/gjJo
sbf3vKBTd/lJkA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:12 2025 by rpki-client