Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: jQAsR2EW5w6XdUPhAaA0aPuQ4NSwiknXEqlBKOjAAlA=
Subject key identifier: 6D:78:C6:16:F8:6F:3B:CE:0D:A1:0B:97:08:B4:0D:D6:F6:66:A1:52
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 01988EECEC0C3F1157001A5201F17CAB9113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 0CF6
Signing time: Sat 09 Aug 2025 13:02:28 +0000
Manifest this update: Sat 09 Aug 2025 13:02:28 +0000
Manifest next update: Sun 10 Aug 2025 13:02:28 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: a7KVxHWhi90xmWZAD7hOouVxpY2VsEjwQRiWYMBsuk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:ec:0c:3f:11:57:00:1a:52:01:f1:7c:ab:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Aug 9 13:02:28 2025 GMT
Not After : Aug 10 13:02:28 2025 GMT
Subject: CN=6d78c616f86f3bce0da10b9708b40dd6f666a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:e8:c5:2a:df:e4:1e:91:24:06:c0:1b:3c:
87:cc:4c:84:8f:35:7b:83:bf:7a:43:7a:8b:9f:a7:
10:95:8b:fe:4a:ef:69:6c:b9:3a:7e:88:2d:a2:ad:
42:17:4e:03:1d:4c:7c:81:20:73:d7:26:c2:c5:f6:
f6:98:75:87:e1:db:d9:75:ae:1c:75:88:6f:6d:32:
ee:1a:e0:c4:67:20:3c:02:8d:fa:ce:c0:c1:72:49:
8a:39:68:42:dd:79:24:43:a2:6a:67:8a:69:df:c2:
c6:58:83:5b:01:a9:2c:c4:c9:f5:77:0b:42:14:9e:
1c:2b:df:55:34:ac:fb:9f:df:65:ee:c8:50:0d:c8:
2e:38:df:3f:1e:a9:91:1f:b4:24:bc:14:86:cb:b3:
ea:82:c8:5b:4b:e8:e7:3e:40:85:c9:9e:a5:8f:b7:
d9:c2:eb:9a:ca:dd:0a:54:0b:3c:ca:5d:bd:47:df:
ad:99:ab:77:e6:1b:0c:5d:44:eb:62:59:b8:82:02:
bc:ff:f6:05:1a:07:79:43:61:8b:43:26:76:91:38:
3b:c9:69:35:36:1a:24:d4:92:eb:1b:5e:78:05:a2:
3a:df:06:59:37:c2:e1:47:24:83:dc:61:fa:87:6a:
6f:12:9a:2d:75:bf:58:57:0d:58:42:b0:6f:5e:e1:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:C6:16:F8:6F:3B:CE:0D:A1:0B:97:08:B4:0D:D6:F6:66:A1:52
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:40:98:de:5b:c6:46:4b:5d:10:44:dd:a1:fc:9a:86:dc:
ac:17:07:0f:9b:70:c3:8f:40:de:e2:f0:2a:36:41:9d:ce:8e:
ae:98:d6:4b:e7:77:95:c9:aa:36:28:f4:b9:ee:41:1d:18:af:
1f:53:63:4f:1d:b3:89:3a:e1:2e:c3:ac:e4:fb:e4:95:18:79:
64:27:77:22:d8:c7:6b:9d:d7:ee:23:58:74:fa:7c:62:3d:80:
e8:5e:99:54:fc:56:63:e8:83:ee:ce:dd:f8:39:5b:69:06:95:
b8:9e:78:ae:fd:3a:3f:b2:28:6b:8e:c5:e0:1f:76:b1:f1:4f:
c7:74:29:9d:51:31:f5:1f:02:fb:3a:d3:31:63:b1:c8:11:68:
f3:6f:05:59:08:2d:81:6b:f4:1f:09:08:3b:b1:f0:c8:fe:09:
16:4a:05:98:5e:42:ff:04:19:d4:76:7d:d0:fd:1b:64:24:62:
21:fd:e1:62:e7:72:ba:67:b2:ce:12:20:7c:49:3f:e3:fe:4d:
0b:90:38:71:bf:5b:2e:71:d5:8c:1b:f3:96:ba:b8:c0:23:d7:
5f:b5:38:dd:16:82:4e:15:35:a3:84:fd:29:97:9b:37:ef:f0:
85:46:ef:37:f0:0c:c1:10:b9:8f:7f:70:31:5f:ca:b1:8f:1d:
05:58:ff:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7OwMPxFXABpSAfF8q5ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjUwODA5MTMwMjI4WhcNMjUwODEwMTMwMjI4WjAzMTEwLwYDVQQD
Eyg2ZDc4YzYxNmY4NmYzYmNlMGRhMTBiOTcwOGI0MGRkNmY2NjZhMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s7oxSrf5B6RJAbAGzyHzEyEjzV7
g796Q3qLn6cQlYv+Su9pbLk6fogtoq1CF04DHUx8gSBz1ybCxfb2mHWH4dvZda4c
dYhvbTLuGuDEZyA8Ao36zsDBckmKOWhC3XkkQ6JqZ4pp38LGWINbAaksxMn1dwtC
FJ4cK99VNKz7n99l7shQDcguON8/HqmRH7QkvBSGy7PqgshbS+jnPkCFyZ6lj7fZ
wuuayt0KVAs8yl29R9+tmat35hsMXUTrYlm4ggK8//YFGgd5Q2GLQyZ2kTg7yWk1
Nhok1JLrG154BaI63wZZN8LhRySD3GH6h2pvEpotdb9YVw1YQrBvXuEwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG14xhb4bzvODaELlwi0Ddb2ZqFSMB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpxAmN5b
xkZLXRBE3aH8mobcrBcHD5tww49A3uLwKjZBnc6OrpjWS+d3lcmqNij0ue5BHRiv
H1NjTx2ziTrhLsOs5PvklRh5ZCd3ItjHa53X7iNYdPp8Yj2A6F6ZVPxWY+iD7s7d
+DlbaQaVuJ54rv06P7Ioa47F4B92sfFPx3QpnVEx9R8C+zrTMWOxyBFo828FWQgt
gWv0HwkIO7HwyP4JFkoFmF5C/wQZ1HZ90P0bZCRiIf3hYudyumeyzhIgfEk/4/5N
C5A4cb9bLnHVjBvzlrq4wCPXX7U43RaCThU1o4T9KZebN+/whUbvN/AMwRC5j39w
MV/KsY8dBVj/Iw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:09 2025 by rpki-client