Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier: jjEOcQ5yUEqj1U3UdqLIc1UvoVixTg/+VLSIwbur2s0=
Subject key identifier: 36:35:55:BB:C8:68:E2:DA:FA:C9:BC:8B:19:64:8F:87:B7:86:C3:1F
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer: /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial: 019923A059D7E7BAF86BF560A9E57232C37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number: 07A1
Signing time: Sun 07 Sep 2025 10:02:14 +0000
Manifest this update: Sun 07 Sep 2025 10:02:14 +0000
Manifest next update: Mon 08 Sep 2025 10:02:14 +0000
Files and hashes: 1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: jW6dNzrYLQvE9lKIheGnIzrXS9bjakz9sBQqh6EWY9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:59:d7:e7:ba:f8:6b:f5:60:a9:e5:72:32:c3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
Validity
Not Before: Sep 7 10:02:14 2025 GMT
Not After : Sep 8 10:02:14 2025 GMT
Subject: CN=363555bbc868e2dafac9bc8b19648f87b786c31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:94:b0:5d:b6:3b:3c:fd:f5:94:e0:83:eb:
1a:e5:a8:64:45:c3:0f:30:15:6d:4d:28:9e:8b:66:
af:4a:32:6d:b0:d8:94:ee:99:1e:18:46:db:e3:71:
c2:16:5b:d1:66:ee:05:bb:c2:dd:91:e2:da:d5:b2:
24:7a:44:22:f2:90:56:7e:f9:9d:db:6f:73:4a:a0:
0c:51:23:42:33:c8:93:75:32:7d:38:ed:87:54:5f:
0e:f0:e4:ba:d5:7e:bd:bf:74:16:c1:5b:c7:1f:41:
b6:3c:12:04:a1:d8:6d:1b:73:d0:fb:e7:96:1a:50:
94:60:09:00:e1:89:35:1d:13:21:d0:20:b6:d7:b9:
27:0f:65:2c:9f:6c:52:94:0f:10:92:53:cd:cf:dd:
44:24:7b:77:07:3e:7e:14:83:9d:27:d7:cb:72:eb:
4a:eb:96:e0:cc:5f:6d:78:84:ba:c2:26:d4:75:d6:
9f:eb:6e:74:8c:80:f6:30:56:31:ba:e9:3a:33:2f:
80:b6:bd:29:5f:ef:9a:59:b4:34:ff:75:60:01:b4:
23:10:74:76:05:ed:98:cf:0d:06:55:5f:a5:57:66:
6d:48:9e:c2:87:c7:9e:a6:53:71:e8:0a:6a:16:7a:
07:b7:74:72:57:70:e6:a8:61:b4:cc:f6:e9:42:1e:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:55:BB:C8:68:E2:DA:FA:C9:BC:8B:19:64:8F:87:B7:86:C3:1F
X509v3 Authority Key Identifier:
keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:be:af:4f:0c:1f:33:6f:21:85:45:b2:b4:38:4f:b5:fd:
d1:05:80:0a:2d:cf:8a:a7:9d:62:f2:ad:99:36:7f:48:34:4d:
0d:c2:b9:59:4f:18:64:6f:6b:19:09:66:e6:94:fa:2f:4d:bb:
30:52:d1:b0:fd:8a:26:e9:9c:51:a9:69:ed:bf:7f:9c:0c:02:
24:7f:17:b6:23:24:f8:e1:5b:f6:1c:4d:1d:a8:c9:dd:ae:b6:
82:ce:aa:a3:de:ec:eb:2e:92:6f:6e:36:2d:d2:93:e8:2e:3e:
6b:1a:cf:94:56:f0:64:1e:be:23:dd:dd:86:06:53:ae:7d:57:
be:04:ca:28:33:8f:5d:83:0e:d7:c3:f0:d3:da:d3:22:6a:48:
b7:14:01:c5:4d:93:8d:2c:b7:91:f2:57:b1:93:a2:a2:25:03:
3a:d5:d6:d8:bc:b8:95:50:bc:2e:e7:55:8d:69:1a:b2:b1:b3:
6f:3b:cc:1f:85:8b:83:22:83:0f:fd:8b:67:cd:af:ea:d5:2d:
e0:a4:84:cb:31:db:4a:50:ad:9c:55:24:06:c8:6b:43:cf:96:
0e:4b:39:c8:1a:6b:04:53:c8:6b:61:df:4f:0c:3b:e4:0c:eb:
e5:f7:1c:21:4b:2f:b4:49:00:d0:77:98:06:a6:d5:03:d3:aa:
53:c0:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client