Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: NR0rIKMjF7EatxMGJ0N+HpCfKNAzLeyN1wklPWr0TX8=
Subject key identifier: 86:2F:F8:D6:10:49:5E:EA:E1:21:0B:A7:87:43:B5:A7:50:29:1B:67
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0197C425206485B6DDB26ACF7F8F2F00F7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 09D3
Signing time: Tue 01 Jul 2025 04:00:56 +0000
Manifest this update: Tue 01 Jul 2025 04:00:56 +0000
Manifest next update: Wed 02 Jul 2025 04:00:56 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: p+2KfpMJElFKyM1NLWlb6zjrAU07ii3wJfabiHS+Fss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:20:64:85:b6:dd:b2:6a:cf:7f:8f:2f:00:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Jul 1 04:00:56 2025 GMT
Not After : Jul 2 04:00:56 2025 GMT
Subject: CN=862ff8d610495eeae1210ba78743b5a750291b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:8a:e6:e8:9f:a0:55:b8:42:c7:21:36:6a:
6e:5a:e4:20:8c:0e:25:21:5a:cf:51:57:c6:f3:2c:
e0:ba:da:60:c1:e9:4c:ab:a4:00:22:bc:95:c0:10:
79:bd:7f:79:fd:de:bf:48:62:4d:6f:8f:46:b8:d1:
3c:77:ea:8e:1c:a6:3f:e3:3e:aa:12:ae:da:20:db:
18:89:d6:6c:8a:3e:77:32:a7:ab:32:d6:80:b3:11:
f5:28:45:ae:60:29:0c:fc:61:ef:d1:6c:37:ab:8a:
0d:23:0c:64:a7:4f:b9:93:0e:c7:e8:0e:03:f2:47:
eb:c5:af:5d:e1:b0:e8:03:73:2f:7a:40:25:cb:4d:
cf:73:0e:21:c3:cc:cf:c3:63:15:24:ac:59:d7:66:
3e:29:f0:5b:92:ac:be:4b:73:43:5a:93:2c:a7:0b:
8a:e5:c4:02:cf:d6:3b:97:64:cc:e4:91:fa:18:a2:
03:00:4f:d4:b4:bc:d6:aa:50:6b:f5:90:9e:3d:18:
5a:a5:f2:14:fe:0f:17:38:0f:f9:e9:21:b4:c2:11:
db:0d:43:77:ca:ab:37:b0:b5:bd:1b:0b:b6:00:90:
71:86:ef:bb:7c:5d:69:d0:8e:9c:80:74:07:ab:9c:
a2:a0:eb:a1:c9:ee:b2:21:c6:b6:83:8b:ce:95:45:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2F:F8:D6:10:49:5E:EA:E1:21:0B:A7:87:43:B5:A7:50:29:1B:67
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:13:40:b4:a5:f6:a4:9f:56:6a:f6:a5:ab:8d:69:4c:bb:
c3:97:24:12:40:65:8e:c0:60:1d:b8:d9:c4:02:e7:c7:e5:c8:
e3:f0:b7:e5:fd:93:a1:d6:53:04:b5:fc:93:af:8f:d7:25:0b:
3e:f9:85:6c:5a:74:b9:39:68:e7:5f:c4:7b:d2:67:c0:76:65:
d5:2f:95:5d:9b:89:75:f9:9a:eb:56:5e:0d:53:18:2b:31:c1:
61:f3:29:7a:c1:40:57:9b:64:55:99:e7:16:fa:b0:56:34:97:
c5:04:16:c5:13:f9:1e:36:0c:8f:1d:6a:b5:09:d8:d0:f8:4a:
fd:cf:30:d9:8c:09:c2:6c:ed:25:cb:92:be:3d:da:a3:c5:34:
7a:4a:46:71:3e:ca:6c:4e:bd:ab:b4:0c:7d:ba:21:73:42:8f:
1d:99:90:34:d5:d6:bd:9b:16:e0:78:de:46:a0:58:85:96:68:
eb:b9:5e:18:3a:63:4d:11:91:ff:c3:3c:a4:7e:e2:d9:74:e1:
f5:86:35:b8:c6:fe:c8:72:17:71:df:33:e8:a2:5a:a5:df:26:
56:e1:08:b8:19:84:9b:e9:c0:a8:80:6f:bf:1a:0e:f8:9b:60:
05:13:c8:58:8e:73:20:7a:bf:81:45:6c:2a:0e:27:f8:0e:7f:
5a:26:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:34:29 2025 by rpki-client