Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: /BcoytOnfQIOInihfuPPSmJtm2HkRwOlrEhnPHv5mTA=
Subject key identifier: 2C:20:43:6E:A4:A2:25:95:11:AD:B4:73:A6:03:05:21:38:0A:8E:27
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 019A71B7E89123111F6EE099C86E96762739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 0DF0
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: dzOSLn0ebhn49OfhsXEwC24fAnGIicRlTDysL/VPzEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e8:91:23:11:1f:6e:e0:99:c8:6e:96:76:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=2c20436ea4a2259511adb473a6030521380a8e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:32:e2:f5:ce:b6:bd:6f:55:05:11:a4:4f:
51:ba:74:b7:e6:a9:a9:0f:25:90:d9:eb:fc:31:0c:
fa:b1:f8:12:69:04:84:2e:6e:72:49:a4:45:6e:54:
2c:87:ef:08:27:fa:83:84:d8:94:06:40:1f:a1:2e:
43:e2:ac:f4:61:50:49:90:ef:51:3a:d6:e7:0b:21:
d0:49:75:96:93:5c:87:72:db:72:d2:e3:1e:d1:f7:
0b:5d:19:28:99:1a:a5:d8:66:83:1e:43:b1:c8:d4:
42:d2:77:3d:f7:18:cf:2c:a6:4c:e6:9e:d8:97:42:
7c:c5:44:ce:f7:96:9f:c3:5f:99:f1:69:7f:1b:87:
6a:7f:db:e6:9b:21:4c:bb:29:05:a1:a5:95:08:29:
20:cc:92:ae:99:84:d6:61:40:ee:5f:92:f3:17:0c:
79:98:c1:98:53:25:d9:3c:fd:97:00:82:ff:04:e6:
b8:b7:99:08:d9:cb:d4:55:2f:3c:18:8f:d0:f6:4c:
8f:75:01:8d:c4:c3:6c:88:25:58:62:c0:cf:f8:9d:
fc:7d:b1:d2:dc:6e:8e:12:21:30:b9:fa:8d:1c:ae:
a8:1a:0f:4f:f6:c2:ff:a3:23:32:74:9f:5e:cc:cb:
5e:74:8d:ca:b6:5f:32:60:a7:c3:f4:85:fa:d6:7b:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:43:6E:A4:A2:25:95:11:AD:B4:73:A6:03:05:21:38:0A:8E:27
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:2c:db:c7:81:3b:b3:21:0c:cc:f3:d4:cd:63:9e:f9:f8:
74:b7:bf:54:6a:79:41:68:95:eb:d3:ce:7c:45:45:d2:1a:bc:
97:cf:8f:d4:38:3b:79:c9:cd:eb:ad:98:8b:34:26:4c:81:2d:
dd:70:d5:28:b0:2d:87:01:b4:6c:c1:89:ca:b3:19:e4:a7:48:
a4:19:65:6a:80:db:7e:75:4f:2e:34:74:3c:47:13:1b:16:00:
75:1b:68:54:38:99:d5:37:84:5a:4e:9d:41:da:da:fd:eb:41:
ce:7e:b1:b6:c5:b1:46:7c:f9:f3:21:71:bc:31:99:a8:eb:2c:
a5:f0:7d:3e:58:9a:2b:2d:54:03:82:3c:62:bf:c4:a2:e5:3c:
83:9e:d3:ca:ac:fc:96:88:aa:58:75:5c:10:0c:90:8f:92:fa:
4a:88:52:e8:df:f9:73:e1:5a:28:73:be:63:dc:bc:d7:aa:c3:
55:b4:d1:0a:1b:80:dd:76:41:82:ff:42:ba:44:bd:42:b3:a4:
dd:c4:47:47:02:ee:7f:01:ca:e8:2f:0d:e5:2a:02:d8:f3:26:
84:50:d5:30:3e:4b:78:97:c6:c4:05:6b:be:38:99:cc:ef:a5:
d3:e0:62:1c:5c:bf:5a:53:ec:35:c1:59:90:53:0f:cd:cd:bb:
c5:34:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client