Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: s3HFwEsZJA7/K5dQ4DSiveI7pdYihJyxLn86fin9eYs=
Subject key identifier: 2D:AC:54:E3:95:1C:AA:83:D2:C7:B2:C4:42:9D:9A:11:1A:CA:79:DA
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01976C61E3B601A43A4A191E0E16FD53D401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0EE5
Signing time: Sat 14 Jun 2025 03:00:43 +0000
Manifest this update: Sat 14 Jun 2025 03:00:43 +0000
Manifest next update: Sun 15 Jun 2025 03:00:43 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: licV9bZYszbP6ApIwzfXxdTGI2Frp+7Rz1PmxZN9JCc=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e3:b6:01:a4:3a:4a:19:1e:0e:16:fd:53:d4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jun 14 03:00:43 2025 GMT
Not After : Jun 15 03:00:43 2025 GMT
Subject: CN=2dac54e3951caa83d2c7b2c4429d9a111aca79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:71:8b:27:b5:a2:e2:c0:17:b8:58:33:7b:
90:03:e9:e0:1b:eb:22:59:26:c6:c5:01:cb:73:65:
cc:14:ec:fe:f2:a3:43:78:50:de:f5:4c:ba:b2:9c:
f6:0c:87:cb:22:31:0e:2c:f2:85:4a:b6:57:78:d4:
f3:21:89:91:6c:d9:37:b3:1f:fb:35:c3:92:da:52:
4f:f5:54:1f:b5:f6:70:c9:81:5e:de:44:61:d0:8e:
e8:1e:92:7f:1d:09:0c:ba:a8:4f:ef:73:18:e8:d8:
20:6c:fa:62:7c:cd:43:92:7b:ed:a7:59:58:d8:a7:
05:da:32:32:c3:25:d6:43:12:ff:55:6f:32:8c:3e:
63:9e:1e:cd:44:d1:04:5b:2b:8f:21:19:5b:3a:f6:
49:11:bf:0e:ed:a9:21:ca:09:95:90:45:6a:16:bf:
f8:4a:be:85:79:7a:c8:9e:c3:da:ef:4c:31:f9:fe:
49:aa:04:84:76:b2:65:71:45:5a:70:1c:96:d5:4f:
c2:e0:dc:ba:af:6d:6e:a7:28:7b:20:10:4a:ab:c5:
b4:53:56:b7:86:cf:43:fa:5a:28:ad:8d:95:39:5a:
0f:04:80:a8:6a:b9:c4:99:b0:28:e9:be:4e:50:8e:
3f:98:58:55:a8:97:6a:d7:43:41:73:04:2b:cb:1e:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:54:E3:95:1C:AA:83:D2:C7:B2:C4:42:9D:9A:11:1A:CA:79:DA
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:df:44:f5:3b:67:2b:86:76:ef:a9:17:67:c5:6b:52:93:64:
28:87:9e:fe:98:5a:af:04:37:96:69:e2:b9:84:7d:30:89:1b:
2c:83:39:12:c6:a4:5f:b1:cc:2c:bc:6b:de:b1:39:e4:81:5a:
66:61:7a:c5:93:c7:6d:96:8c:a4:2f:bb:cf:5d:90:9b:b3:29:
10:6b:a3:cf:4c:bb:7b:71:5e:7a:7d:ba:ed:91:f5:29:1a:78:
bd:63:84:4d:bb:9e:30:8e:7a:ae:fa:d6:99:9a:ab:f1:38:04:
a2:85:94:fc:8e:10:f5:61:d9:66:7d:5e:c3:08:39:5b:bb:fa:
89:65:e4:70:61:88:0d:29:a4:a2:e4:4b:40:3f:5b:f1:34:30:
05:63:f1:97:b3:61:50:c5:f2:e3:c2:bd:c3:ad:fa:47:68:4e:
84:d8:28:94:66:87:7f:24:c5:ee:86:1d:3b:72:9f:28:37:b7:
1c:6a:6c:5b:f9:13:7d:76:9b:de:fc:47:be:7f:06:80:e8:61:
d4:2b:51:0a:4d:28:fe:f9:7f:18:6f:3d:a9:8a:8c:00:ed:af:
f3:bf:a8:55:c4:bc:e0:1c:0b:22:0e:66:90:7a:48:6d:b2:04:
65:9f:10:fb:6a:0a:be:cc:d9:b8:56:d3:3f:43:06:1f:aa:cf:
ab:74:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:24:53 2025 by rpki-client