Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier: EaEPfqAmwkq8RuergGh3MwJDbPWyS9BTQIVrPVMnTO4=
Subject key identifier: 74:91:49:A1:26:0E:88:6B:07:08:C0:B7:D1:39:A3:D6:92:7B:DC:5B
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 019851FA66F713C9FCB5FB4F3856074095A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number: 0FAA
Signing time: Mon 28 Jul 2025 17:00:21 +0000
Manifest this update: Mon 28 Jul 2025 17:00:21 +0000
Manifest next update: Tue 29 Jul 2025 17:00:21 +0000
Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: yHva+kcrinf9Pm1SOwsQ9x1Tju108OntznCY3fEQjMM=)
2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:66:f7:13:c9:fc:b5:fb:4f:38:56:07:40:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Jul 28 17:00:21 2025 GMT
Not After : Jul 29 17:00:21 2025 GMT
Subject: CN=749149a1260e886b0708c0b7d139a3d6927bdc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:5b:77:ac:28:f1:48:2d:52:6d:f9:5d:3d:7a:
24:2a:a8:73:45:1d:b0:78:9d:8d:54:e9:d1:ab:8e:
22:3b:68:e5:5e:8a:c3:a3:b3:45:d7:bf:06:52:6e:
b5:fe:66:dc:bf:c3:f1:e4:83:8d:39:41:bf:8a:ca:
86:47:32:34:47:ce:a5:77:ee:9f:f7:39:c1:67:71:
5f:7e:3e:99:d5:72:d1:73:0e:ff:f4:52:d0:95:9f:
d0:58:24:4e:53:5b:50:8c:9c:39:07:da:03:11:92:
44:a2:55:7a:fe:83:03:39:06:22:d0:af:c1:7f:a2:
e9:9a:e5:d7:c7:19:90:e8:0f:7e:1d:05:7d:da:d1:
ab:f3:a4:6b:32:55:ff:56:34:33:22:4e:05:a7:79:
f6:e0:cb:58:56:c7:5b:92:0b:6e:d3:9b:b0:a2:59:
83:98:61:a3:1b:27:ce:4f:c6:1a:d7:d0:f4:f6:04:
27:6f:5e:98:04:98:04:82:46:ef:bd:b2:18:df:9a:
73:ec:ca:f1:4d:a1:c8:6e:5f:3d:8a:81:92:94:0f:
4d:0e:52:5e:36:f1:53:45:16:50:36:1c:57:3d:e6:
60:61:9d:8c:87:42:93:ac:f9:4d:57:30:f0:a1:48:
d7:1e:cb:95:bb:b0:68:6a:79:e5:f8:de:2f:9d:4c:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:49:A1:26:0E:88:6B:07:08:C0:B7:D1:39:A3:D6:92:7B:DC:5B
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:d6:2a:59:2a:7c:1c:c0:9f:2b:bc:64:81:36:00:a2:c1:
78:3d:eb:f2:10:01:80:4f:b1:a3:b4:a9:af:59:58:01:4a:ff:
9d:1c:bf:56:fa:a9:38:64:22:d6:17:91:cf:cb:ab:5d:bf:51:
c3:03:aa:d1:0d:0e:23:d4:09:f7:a7:fe:b4:bd:f6:2b:e0:dc:
93:44:7e:f1:28:15:d0:8b:01:0e:2c:c6:e5:2a:18:07:ec:2e:
a5:44:f8:1e:e4:2a:cb:e5:05:2f:e7:1a:13:12:da:75:6b:52:
30:db:4f:4e:76:0a:16:d8:80:a8:84:b0:5e:ae:9f:51:1b:7b:
9b:ee:e4:30:8d:a0:5e:0d:61:97:56:a3:42:35:9e:59:6c:83:
77:79:61:83:f7:b3:17:44:a3:03:4e:89:f9:2e:67:d2:9f:a5:
ae:94:1d:13:54:26:52:38:b7:b5:79:6c:7c:7f:c5:95:b1:d4:
71:1f:90:a4:55:f5:ad:2a:4e:39:2c:a6:91:0d:af:93:69:71:
95:32:ad:08:f9:b3:69:12:0c:7e:55:af:25:f0:d5:b2:22:8b:
1b:76:9f:88:96:af:ad:7d:3c:f8:f5:5e:30:e2:87:4a:d3:d6:
33:be:20:41:ca:0e:a1:91:61:e9:30:44:ba:f1:95:64:b5:ec:
5b:bc:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:05:34 2025 by rpki-client