Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: bSMNUBl0kgq1NSQn5y72qSkNaXmA830pbaayOnAZC4o=
Subject key identifier: 68:D1:2A:29:84:17:2C:F7:BF:30:10:EC:86:73:17:8C:94:56:C3:15
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 0199221F4C552EAB3DFC33F60750A972FDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:40 +0000
Manifest this update: Sun 07 Sep 2025 03:01:40 +0000
Manifest next update: Mon 08 Sep 2025 03:01:40 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: J4OoDyDFuTPAdsWYVfGcFdkcY/56VwAFUZgBqIFlxNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4c:55:2e:ab:3d:fc:33:f6:07:50:a9:72:fd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Sep 7 03:01:40 2025 GMT
Not After : Sep 8 03:01:40 2025 GMT
Subject: CN=68d12a2984172cf7bf3010ec8673178c9456c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:73:a0:aa:07:5f:14:93:5e:84:c2:0c:d6:
db:f5:61:2d:20:cd:c3:e5:db:ac:1e:d8:ce:33:1f:
5c:d4:b0:84:d7:04:40:63:ec:71:98:2d:31:e3:b5:
c5:31:6c:30:07:08:3e:80:35:58:82:cc:6c:d4:de:
e2:86:c9:15:6d:67:12:6d:50:b0:3f:8a:fc:88:c6:
0d:76:50:8c:dc:9f:04:be:bd:68:e3:ae:3f:98:a2:
60:41:f6:76:22:31:9d:3d:a1:e9:ca:76:f7:50:61:
af:82:8a:50:68:09:6c:3a:99:7c:85:f2:1e:6b:2d:
f0:42:33:e9:62:10:ab:04:df:f6:b9:9e:4b:d6:42:
2c:f7:72:a9:2a:f5:65:3d:e2:7c:8f:49:b5:08:57:
0c:46:8c:37:9e:e2:2c:dc:95:83:f8:99:54:a5:3b:
ee:66:ec:08:2f:47:fb:63:95:c8:d4:86:2b:d2:06:
5a:b1:52:fe:d5:6f:48:88:df:e1:31:6c:41:15:46:
4a:dd:0a:55:91:46:3d:62:92:98:c7:ea:92:1e:35:
6a:7c:be:01:6e:bc:d4:db:66:f6:64:7e:50:9f:91:
4e:1f:81:f7:31:4c:4c:56:38:86:d2:f1:e3:c6:3f:
c3:d2:70:f3:8b:e5:19:a6:27:44:f3:0a:58:29:b4:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:2A:29:84:17:2C:F7:BF:30:10:EC:86:73:17:8C:94:56:C3:15
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:da:67:66:97:1c:54:f2:8d:00:6a:d9:c1:37:73:1e:10:95:
86:58:e1:71:4b:1d:ee:ad:6f:52:7b:1e:49:b7:c8:29:4b:a8:
4f:04:2a:49:1b:93:2e:10:96:c7:e9:82:1e:a3:6a:77:ab:e7:
10:4e:c7:d7:d7:d6:73:50:a7:08:a8:f7:99:96:b8:5f:4c:9e:
73:6c:16:21:98:3f:f9:ca:d8:d1:99:6e:4d:24:88:8d:09:ee:
82:f9:08:70:c9:c0:77:61:da:46:e5:7a:f7:7f:1f:5c:61:eb:
a4:37:c7:2c:34:fd:5a:34:5f:bd:6c:b7:89:6c:e5:f9:8c:d3:
e8:3f:07:ea:e3:ef:18:e1:6f:0b:c2:f6:c4:f1:e0:b3:88:0d:
46:7c:4d:e4:a4:f3:5a:9b:16:ad:60:22:f5:54:15:1d:06:8c:
d2:62:d9:29:42:5b:2f:72:88:8e:e1:88:29:a3:a8:94:d3:32:
a1:97:3a:2a:fd:73:41:cb:c5:b3:6d:ff:6d:d7:21:4c:8d:36:
89:e6:0d:7d:44:40:a4:0b:c1:76:7f:a7:c9:b3:bc:44:59:8c:
69:b0:41:0f:8f:20:76:87:b0:69:14:ba:ab:e9:63:60:ac:51:
dd:bd:42:2e:1b:51:80:5f:c7:23:61:be:37:34:a3:35:a5:0c:
97:da:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:02 2025 by rpki-client