Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: IkqvxC52egV6ciPzPJsz9IHYV9tPsWDe32cTbchoOVY=
Subject key identifier: B4:D3:6D:A3:49:91:DF:63:81:35:3A:E5:03:F7:4F:41:F6:88:2F:39
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 01989E5EAAE3D08F626E3F36AD59C700CC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0A44
Signing time: Tue 12 Aug 2025 13:01:00 +0000
Manifest this update: Tue 12 Aug 2025 13:01:00 +0000
Manifest next update: Wed 13 Aug 2025 13:01:00 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: HTrIvyF8/3yx+zOYMw3fquZlHrVV1CnUeA2oy7PXcVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:aa:e3:d0:8f:62:6e:3f:36:ad:59:c7:00:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Aug 12 13:01:00 2025 GMT
Not After : Aug 13 13:01:00 2025 GMT
Subject: CN=b4d36da34991df6381353ae503f74f41f6882f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:e1:22:51:64:4a:64:a2:3f:79:45:ee:88:
c3:ef:79:39:30:88:84:43:d5:d5:4b:e8:d8:e8:94:
0a:bd:a3:b7:e8:9b:ed:60:83:62:76:f4:9e:20:8c:
b4:3c:b9:5b:be:9f:21:32:4a:39:9a:c5:8c:ba:96:
33:53:94:6c:1a:10:6d:0a:be:f0:d6:19:f0:ea:a9:
e2:6c:b3:94:ae:17:ec:43:14:a5:1a:08:dc:5f:d9:
a7:6d:7a:3a:ca:6d:4d:6f:30:c8:b4:cb:8a:1e:0c:
a2:89:e0:ae:d4:80:88:bd:7d:e0:ee:cf:6d:64:eb:
f6:f3:c7:f8:02:3b:38:d9:fe:99:72:4a:ae:9d:aa:
27:41:38:b9:82:8e:36:5d:ce:c0:44:64:76:3a:79:
51:ed:ba:84:a1:45:e8:fb:43:3f:d1:c0:f8:8b:23:
8e:67:d3:3f:3f:eb:bc:03:fb:d7:82:5b:ff:26:45:
a5:b9:2f:8a:21:e7:9d:23:ab:f8:2e:0b:15:5b:41:
ef:66:8a:ba:fc:c9:28:87:d7:4a:e3:a4:ba:0a:0a:
0d:f2:4b:8f:79:11:5a:29:a6:55:3a:15:0c:15:6c:
b9:d6:1f:21:b2:b6:8f:df:d0:20:df:c0:77:79:c3:
85:15:10:05:c0:e9:51:e1:3b:3c:53:5e:15:0b:b2:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:6D:A3:49:91:DF:63:81:35:3A:E5:03:F7:4F:41:F6:88:2F:39
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:4d:de:80:e4:c1:b6:a8:f1:c8:3a:19:c6:7e:a8:b9:b4:
ab:61:b6:95:c5:83:e4:c4:31:43:fa:e1:9f:f0:64:65:bf:f8:
69:df:1f:62:8e:f3:97:ee:ae:20:c8:6c:08:ea:43:e1:40:7d:
e4:ca:a6:0f:07:68:e5:9e:0a:1d:0c:15:c9:ec:6e:b6:1f:49:
29:2c:69:de:16:8c:49:90:7a:f1:dd:f1:1d:72:0e:67:eb:1f:
85:c8:58:9f:8c:6f:15:54:cd:b1:f4:04:d6:bd:5d:fe:f6:76:
1c:fc:3b:77:d5:0d:26:f9:18:3b:f4:13:8e:a8:a8:17:f3:96:
42:4d:93:e4:5a:04:00:a5:07:93:38:e9:54:21:81:1e:93:04:
6d:19:48:94:77:9c:57:e8:09:d3:d0:ff:81:64:f0:04:cc:6d:
c3:e2:d1:7e:26:5d:3c:21:59:c6:b9:5f:a6:56:b1:8d:44:bf:
c8:8c:c4:5b:a6:41:b2:f0:a8:db:35:86:21:8e:26:59:69:a7:
76:67:f9:fe:9d:ca:95:13:96:bf:11:60:41:46:8e:5b:1f:f1:
62:45:61:b0:09:4d:4e:f8:b7:23:a1:1a:6b:e4:d7:fa:ca:5e:
05:f0:a8:60:a9:0c:3d:f3:d8:2b:3e:ee:d1:d0:9f:49:08:b3:
db:c2:f2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXqrj0I9ibj82rVnHAMyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy
NTNiZjUwHhcNMjUwODEyMTMwMTAwWhcNMjUwODEzMTMwMTAwWjAzMTEwLwYDVQQD
EyhiNGQzNmRhMzQ5OTFkZjYzODEzNTNhZTUwM2Y3NGY0MWY2ODgyZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EXhIlFkSmSiP3lF7ojD73k5MIiE
Q9XVS+jY6JQKvaO36JvtYINidvSeIIy0PLlbvp8hMko5msWMupYzU5RsGhBtCr7w
1hnw6qnibLOUrhfsQxSlGgjcX9mnbXo6ym1NbzDItMuKHgyiieCu1ICIvX3g7s9t
ZOv288f4Ajs42f6ZckqunaonQTi5go42Xc7ARGR2OnlR7bqEoUXo+0M/0cD4iyOO
Z9M/P+u8A/vXglv/JkWluS+KIeedI6v4LgsVW0HvZoq6/Mkoh9dK46S6CgoN8kuP
eRFaKaZVOhUMFWy51h8hsraP39Ag38B3ecOFFRAFwOlR4Ts8U14VC7JOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTTbaNJkd9jgTU65QP3T0H2iC85MB8GA1UdIwQY
MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt
ZjMyMTFkOTE1MjBkLzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk
LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjdN3oDk
wbao8cg6GcZ+qLm0q2G2lcWD5MQxQ/rhn/BkZb/4ad8fYo7zl+6uIMhsCOpD4UB9
5MqmDwdo5Z4KHQwVyexuth9JKSxp3haMSZB68d3xHXIOZ+sfhchYn4xvFVTNsfQE
1r1d/vZ2HPw7d9UNJvkYO/QTjqioF/OWQk2T5FoEAKUHkzjpVCGBHpMEbRlIlHec
V+gJ09D/gWTwBMxtw+LRfiZdPCFZxrlfplaxjUS/yIzEW6ZBsvCo2zWGIY4mWWmn
dmf5/p3KlROWvxFgQUaOWx/xYkVhsAlNTvi3I6Eaa+TX+speBfCoYKkMPfPYKz7u
0dCfSQiz28Ly3g==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:50:28 2025 by rpki-client