Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: rSHhG3Ou/klX2UaUWkR+NLKDwHCRQYg0VmjwL+2NMsg=
Subject key identifier: E2:AD:87:E3:DB:6D:55:87:F8:20:D0:63:97:28:58:B0:FB:8A:43:19
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0199239F43A1F7A488C19B656A6362280E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0A89
Signing time: Sun 07 Sep 2025 10:01:04 +0000
Manifest this update: Sun 07 Sep 2025 10:01:04 +0000
Manifest next update: Mon 08 Sep 2025 10:01:04 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: 8QHnlSKzkWZyb4FFLC1G9F7PPVBLUvwlBb1PvOSN2h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:43:a1:f7:a4:88:c1:9b:65:6a:63:62:28:0e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Sep 7 10:01:04 2025 GMT
Not After : Sep 8 10:01:04 2025 GMT
Subject: CN=e2ad87e3db6d5587f820d063972858b0fb8a4319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:bf:91:51:53:05:ed:e6:39:7c:14:5d:b7:
e9:33:f7:ae:34:ba:99:ce:04:f4:a2:ce:5d:16:ec:
59:cb:65:3a:36:9a:7f:66:9b:ab:63:35:7f:4b:58:
10:4b:d7:79:3a:2a:97:d7:ef:88:ae:4e:4f:e4:b6:
1d:35:b8:b5:f5:60:d2:0b:27:d1:8a:e2:5a:e5:08:
96:d0:1a:5e:17:92:e0:f4:dd:9a:a4:bb:18:2e:bc:
e0:f2:c6:f1:40:66:a2:8f:46:aa:86:7c:bc:32:8d:
2b:ba:69:03:b8:f2:44:14:cc:cf:42:cb:60:96:dc:
20:0f:0d:27:e8:fa:c2:72:58:20:7b:30:0e:d1:ca:
0a:e9:ff:a7:0e:f9:56:9c:d3:06:46:31:39:dc:6f:
ab:b5:3a:f5:73:3a:89:9e:b5:d5:92:14:35:a9:13:
82:bc:31:9e:de:d1:5c:a8:07:47:38:a3:75:7d:4b:
5f:c6:61:83:01:0c:ce:c9:63:b9:b5:11:7e:88:39:
1f:56:fb:45:1a:c7:63:f3:e7:9d:5c:76:49:76:c3:
36:1e:c2:73:77:78:04:4e:9a:5f:e2:d9:bf:b6:d2:
18:14:8c:fb:f2:b5:11:84:57:a5:0a:56:f3:05:6f:
4e:d4:23:ab:f8:f8:e5:19:19:6d:57:ee:1b:96:6f:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:87:E3:DB:6D:55:87:F8:20:D0:63:97:28:58:B0:FB:8A:43:19
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fe:f0:a0:b1:ee:90:da:9b:47:ff:9a:08:42:00:2f:0f:c8:
b3:c0:bf:2c:cd:9b:52:cf:b4:c4:b0:b1:e0:aa:9e:ba:ca:c6:
ed:9c:6e:d6:fe:ac:8c:25:e1:c8:0a:4c:1e:88:b1:7f:db:d0:
87:dd:c5:4f:86:fb:c6:17:f9:2c:a2:6b:d2:b4:60:2d:0b:bd:
10:47:c7:51:8e:4b:60:f3:26:89:0f:3b:46:c5:b2:c3:2e:f6:
d5:0b:bc:7d:12:07:93:80:95:3c:7d:2b:66:85:ee:50:eb:8d:
ef:66:48:fd:8d:86:a1:f7:f2:c3:d8:60:da:4f:72:66:f0:e4:
55:44:8e:f9:48:9f:f3:2c:88:12:e5:c3:f9:bf:28:ec:6e:49:
52:bf:c8:59:fd:71:c2:d2:a9:f3:06:7e:8a:ba:a6:21:d0:ba:
35:99:1a:2f:3a:c7:26:6a:89:c5:12:85:7b:ae:38:99:2a:5a:
8f:5b:12:2e:a7:0d:e9:f3:87:41:f5:ff:8d:8d:8a:b0:e2:a3:
02:96:2d:02:ff:2f:df:a1:51:83:67:b3:88:c0:4f:08:18:58:
50:c0:3c:44:59:8b:76:65:f4:53:65:f3:8f:56:52:b8:f9:6d:
70:30:ab:01:02:09:9e:93:a9:63:73:fa:79:aa:1b:f3:1c:83:
9e:22:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:29 2025 by rpki-client