
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: J0XvwYKSTsHbWgKwTxI043u21/2NlMEcXLAmwAgn2Ig=
Subject key identifier: 36:C9:7D:B1:11:3F:18:73:8A:4C:F1:19:AA:97:67:2D:77:5B:BA:B3
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 0199239EAF89BA6C377F5774ED86A59DCA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0E75
Signing time: Sun 07 Sep 2025 10:00:25 +0000
Manifest this update: Sun 07 Sep 2025 10:00:25 +0000
Manifest next update: Mon 08 Sep 2025 10:00:25 +0000
Files and hashes: 1: 1caWY1h99shWYECynlPTo8_1vrA.roa (hash: Aon6FQO3a7yW1GjMXQDU5WdJ0X3x57CSJl9oOPxCpMk=)
2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: +6cjEmggQEPhOi0zt1j4IQCRTUD8k5LVUd6i5+PN4q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:af:89:ba:6c:37:7f:57:74:ed:86:a5:9d:ca:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Sep 7 10:00:25 2025 GMT
Not After : Sep 8 10:00:25 2025 GMT
Subject: CN=36c97db1113f18738a4cf119aa97672d775bbab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:db:b7:9e:10:a1:bc:15:6a:ce:49:af:52:
ef:0c:95:18:4d:9c:b0:08:7d:e3:00:92:8a:47:de:
45:76:a8:4b:fc:fc:c0:59:05:24:bf:be:c5:94:df:
a8:7d:e6:4c:0a:98:b1:82:6c:64:0f:c7:15:47:8d:
2c:2b:c4:5b:50:7d:35:56:fc:07:a7:6f:07:21:9d:
7a:a0:54:07:c0:42:74:fd:ac:b1:28:ac:c7:2d:3d:
40:0a:17:db:29:28:7b:b3:c5:ec:93:f1:2c:0f:92:
e4:67:55:c6:25:d1:bd:6a:77:b0:ed:b0:05:a3:e5:
fc:35:6b:f5:8d:75:f8:1e:da:7d:4b:92:c3:79:ef:
80:c2:fd:82:a9:8b:36:71:de:21:94:35:09:c0:83:
41:7f:1a:5e:90:48:8f:e3:35:a9:53:89:63:9c:35:
23:ff:a6:14:35:7a:62:14:0c:01:f6:33:d4:c8:71:
bf:97:39:5d:3c:21:81:59:d0:43:3d:6f:e7:60:64:
ab:f2:4e:48:f3:cd:53:9c:56:59:d8:bd:dd:77:ba:
4b:77:34:ef:2c:5e:dd:2f:3e:95:79:d9:87:6b:c4:
b9:ea:6d:e4:a9:55:f5:75:48:70:47:c8:4d:12:88:
3a:dd:2c:53:9a:bf:34:b2:17:30:9b:2a:fd:15:ce:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:7D:B1:11:3F:18:73:8A:4C:F1:19:AA:97:67:2D:77:5B:BA:B3
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:f6:10:91:42:49:2f:a2:7f:39:2a:c2:a4:76:eb:2f:b2:
73:35:e2:a9:b9:94:b1:65:49:b7:51:34:c2:0d:0f:5e:ca:a3:
0b:12:91:33:fc:a9:76:bf:87:2c:da:12:79:ed:e9:71:c3:30:
17:5f:bd:5e:cc:ff:9b:aa:46:34:90:c4:dc:27:bd:79:ff:2b:
c6:49:1f:09:6f:3a:c0:2f:7d:7d:a7:4f:e4:b3:2c:72:91:d4:
71:dd:43:fa:7f:71:d1:17:13:9e:4a:fc:10:b7:83:ee:a2:c5:
99:fe:26:69:d3:fe:26:80:b1:33:7d:01:7c:a4:3e:b8:56:e8:
59:99:d7:22:82:7e:af:43:ee:40:d5:df:80:7a:b7:b5:83:ad:
2e:45:b7:3e:b5:89:85:c7:92:91:87:ba:4c:42:ec:25:d4:1c:
3f:15:0b:93:5c:26:6d:9b:37:2a:c3:18:ca:c7:1c:09:38:c6:
2e:0f:21:b5:ae:b2:13:67:34:cb:ac:8e:87:8c:fc:9e:59:6d:
ca:b7:64:1f:80:dc:8f:41:68:1d:4c:22:e0:a4:51:b1:e8:98:
61:6b:40:67:42:51:dc:78:f1:98:bc:6d:f3:32:fc:b1:4a:9b:
86:22:62:d5:cb:86:a9:ba:d8:ae:a8:18:25:19:f0:b4:60:2d:
85:ad:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:17 2025 by rpki-client