Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: d0tuPhyxgfmGk6yEYqiKUXfeGo/3EboOgUtEOlFxDYo=
Subject key identifier: EF:67:9C:18:30:C7:D5:C8:2A:0F:1D:1C:E6:93:EE:64:11:6C:B1:8A
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 019A71B8CF67D7D4351F35B96008D3F11C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0B36
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: tIE4T66PmnCda7OfyTTUU1K054wLUyC8YMTitvLFCNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cf:67:d7:d4:35:1f:35:b9:60:08:d3:f1:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=ef679c1830c7d5c82a0f1d1ce693ee64116cb18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:4a:d4:6e:d7:1b:da:61:e9:18:8e:61:0b:
9f:bd:1d:92:2a:09:6c:3a:4c:42:c3:f6:25:fb:27:
05:ca:04:43:20:cb:0a:38:9f:1d:2a:88:7b:a0:85:
d3:6e:18:b1:6a:a3:41:00:4b:bb:b3:5f:55:6d:0a:
40:e5:ad:0a:89:52:cc:11:9c:41:26:56:28:7a:9f:
1d:c3:56:20:db:be:95:8c:1c:26:a7:b1:08:85:07:
c6:70:30:eb:0f:65:2d:e9:a0:5b:6a:10:f5:f6:a2:
8d:8a:08:48:ca:ec:f1:52:cb:86:82:65:56:76:34:
13:5a:7c:de:2c:e0:4c:35:f8:ec:4e:2f:d8:f6:e4:
a7:55:51:10:76:bd:89:6a:d3:e3:56:13:47:ae:ee:
98:85:f7:b1:80:29:9f:40:e3:e0:24:ec:a3:92:55:
ca:3c:2a:c6:4f:55:56:1c:e3:07:14:46:35:7b:29:
9d:4b:c6:88:a5:23:06:76:cb:cd:12:24:a8:71:68:
1d:b2:8f:77:27:38:70:a5:de:21:f7:a4:67:b0:f7:
b5:1e:86:9d:30:20:96:60:57:1c:ce:e4:32:e8:a3:
5f:83:95:2d:ec:11:5c:17:65:06:db:e7:61:ca:30:
ad:17:a9:64:3f:04:68:94:f3:18:7c:02:2d:2f:2b:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:9C:18:30:C7:D5:C8:2A:0F:1D:1C:E6:93:EE:64:11:6C:B1:8A
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e3:0d:31:6f:ce:01:6b:a9:79:5d:2f:91:fd:38:16:2e:5c:
be:09:97:f8:52:23:7c:19:6d:ee:40:af:b1:bf:56:84:b4:59:
81:e7:57:35:3e:ba:24:8c:53:6c:6c:11:cd:9d:dc:82:31:da:
f7:0a:c7:24:32:e0:9e:dd:14:54:44:ce:8f:35:68:4b:38:a9:
28:83:f7:b1:fb:85:92:f1:d6:91:3a:97:dc:90:53:d5:bf:02:
c3:b2:e2:23:6e:05:03:80:06:bc:b3:48:59:3f:65:eb:48:46:
7f:d1:b2:04:0b:50:8a:9d:8c:f9:cd:dc:12:34:c4:eb:06:9c:
2c:34:00:10:15:90:41:09:ea:56:ea:17:44:86:4f:bb:14:72:
91:10:67:6d:50:b0:4a:92:36:a6:38:c2:aa:c2:c0:0b:17:72:
f6:a7:3a:74:ab:d5:17:46:3e:85:b3:f9:b3:47:68:91:f5:40:
0d:39:52:26:69:e0:ab:4b:ea:e8:ce:7f:16:b4:57:9d:26:05:
ba:4c:96:3b:22:92:ff:74:fa:8d:5b:e1:69:ed:25:b2:dc:71:
6d:93:3f:e4:33:08:74:a4:75:d9:30:a5:23:f1:81:b7:40:2c:
92:b5:eb:34:fb:86:85:81:0b:f6:bb:b6:38:cb:6f:82:39:ec:
7f:52:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:43 2025 by rpki-client