Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: 7HSFm2ZgJDOjQ0/foA56xmgZ9JZzdW52kKy5zTwambI=
Subject key identifier: DF:C7:07:9A:BD:08:9F:8B:68:EF:99:A7:BC:E7:02:A9:C7:52:28:34
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019A51F5A77E6AEA3B412961363394FBBFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 1065
Signing time: Wed 05 Nov 2025 03:00:44 +0000
Manifest this update: Wed 05 Nov 2025 03:00:44 +0000
Manifest next update: Thu 06 Nov 2025 03:00:44 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: U7x6revsXEOcTJex/mMUPilX2pxDjvBIoLQOhuLcAEA=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a7:7e:6a:ea:3b:41:29:61:36:33:94:fb:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Nov 5 03:00:44 2025 GMT
Not After : Nov 6 03:00:44 2025 GMT
Subject: CN=dfc7079abd089f8b68ef99a7bce702a9c7522834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:0a:e6:9a:99:88:b5:63:1f:1c:b5:db:9c:
26:6c:76:a8:62:8e:d1:be:8b:3e:d0:e4:82:cf:a5:
f5:35:11:2f:4d:9d:c8:f5:0c:79:8f:e5:a8:83:d7:
99:2d:1d:48:45:33:2e:66:84:f9:b6:16:8a:f7:ee:
44:6f:07:74:5e:4a:1a:18:a3:b2:63:80:e7:23:23:
8d:05:03:7d:ba:f7:a4:cf:dc:20:14:61:79:5f:5d:
ca:44:82:b9:4f:ca:92:9b:e9:7f:6c:39:d1:01:5a:
3a:9c:c0:d9:f2:57:12:69:f4:90:04:5d:13:4a:91:
07:9b:e6:59:b3:4c:5e:95:03:5a:d2:5a:24:cc:d4:
67:10:2a:16:45:4d:96:02:e5:c3:74:d3:9c:93:7b:
8a:a8:cc:b1:4f:9b:34:f3:0d:d0:c5:40:f5:09:fb:
66:ed:a9:cc:2d:0a:45:14:81:4e:73:1b:cc:e5:a0:
60:69:ae:e8:f4:b1:85:88:de:96:32:46:c3:dd:f1:
51:23:0f:23:5b:5d:0c:fe:b3:26:6a:30:bd:6f:75:
5c:b4:f1:f5:cb:ce:71:92:36:7a:a5:85:b5:f4:20:
fe:36:65:42:55:d7:5f:e4:b3:e8:05:e8:4a:32:a2:
78:34:64:9a:02:41:b6:92:ba:ab:64:e2:da:5d:48:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:07:9A:BD:08:9F:8B:68:EF:99:A7:BC:E7:02:A9:C7:52:28:34
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d7:4c:a2:a2:46:87:45:6f:9d:1f:05:e9:9e:9d:4f:91:cf:
88:a8:ef:c5:24:4b:bb:86:89:8b:d1:a3:46:6b:64:84:f5:e6:
4e:dd:4a:11:35:29:78:af:32:b0:4b:31:32:58:92:35:d6:60:
02:7c:d7:a2:4c:c4:42:db:3e:89:25:3a:71:f0:75:78:e2:ea:
de:2d:c2:1e:c1:18:e3:f2:45:c1:8d:71:2c:29:78:95:b2:02:
3f:54:74:90:db:0c:a9:08:f6:15:88:95:c2:e8:94:62:ce:1d:
ba:e5:0c:d5:26:0f:46:54:be:83:df:5d:2e:88:b2:b1:bd:87:
9c:da:5d:34:71:2d:ae:76:c4:74:48:ab:06:64:e5:e1:f1:e2:
4e:db:4d:d0:05:9c:cc:88:67:b8:ac:83:9f:ee:77:91:cd:d7:
80:13:12:d2:31:f8:44:f4:b6:77:ae:2c:0a:41:1d:cc:19:7a:
07:69:3d:b5:b1:bf:0b:6a:19:1e:5a:00:3c:79:24:a3:52:1c:
4e:bd:d7:49:ae:00:e0:67:2f:24:08:5a:77:af:22:7e:16:0b:
63:11:9e:bc:a0:2f:2d:96:c3:e3:8c:70:d5:c6:38:22:ee:88:
f3:78:3c:b2:01:5d:d3:a1:c7:2c:92:ce:db:df:70:d0:61:b3:
11:d7:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:50 2025 by rpki-client