Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: EVfoO8lHNusFLS5ArXcmSv9TEZgPqBJJX/T47z91qqQ=
Subject key identifier: D2:A7:F6:B9:F3:14:2C:78:3D:C9:F6:D4:18:AC:B5:C8:2F:D7:28:E2
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 019A71B804EEB4718FB798A684C4CBEE6FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 0F46
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: Y4uhr/v25wLae7dXswT8U2kQAYXukEZx0tqD9KyPy/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:ee:b4:71:8f:b7:98:a6:84:c4:cb:ee:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=d2a7f6b9f3142c783dc9f6d418acb5c82fd728e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:f7:55:80:a2:fb:35:80:f9:82:9d:c2:4f:
72:22:9a:0e:6b:87:91:15:02:27:44:32:c9:4a:3f:
82:79:8b:55:f8:40:47:b3:82:47:3d:e2:f7:14:7f:
18:a4:bd:6e:d1:13:72:7d:11:21:7f:b4:56:e4:9b:
d6:15:ea:e1:4f:14:36:ec:1f:2d:99:fc:2d:a6:f2:
b9:34:46:f6:48:ae:3d:df:02:f6:0e:b9:5f:bd:d9:
71:7e:32:4b:e4:15:25:a9:17:d4:0a:71:db:46:26:
7c:fc:b7:0e:52:7d:0a:8d:f1:2e:73:b1:04:6a:e4:
af:8e:2f:d7:52:fa:cf:63:49:5a:ff:4a:91:d4:f8:
a6:02:72:a7:57:bf:6f:50:fa:fd:b2:2d:f9:de:3d:
38:d0:22:4b:4f:2e:a4:d0:40:35:c9:21:57:f1:63:
cb:88:34:8e:50:ea:6b:8a:24:9a:64:63:26:24:cd:
f0:be:e5:24:6c:a5:39:e3:aa:20:ea:06:9e:c7:2e:
e0:03:62:46:48:19:f8:0a:33:e2:21:c1:43:de:b0:
19:72:1f:28:9a:69:c3:b2:f2:b2:d1:2d:9e:2a:87:
3f:82:c6:d2:6a:92:9f:d4:39:93:42:6b:30:8b:50:
ac:fb:a9:20:2d:b2:84:a7:74:d7:ef:e8:5b:e8:29:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A7:F6:B9:F3:14:2C:78:3D:C9:F6:D4:18:AC:B5:C8:2F:D7:28:E2
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:86:c4:de:db:de:03:b2:a7:b6:cf:f6:49:63:44:8e:44:
2a:49:ae:e7:f9:ce:59:47:ea:3c:9c:4f:c8:ff:43:e8:81:a0:
c9:23:5a:97:a1:86:4a:db:c3:2a:04:f4:21:b7:5c:10:71:5a:
dc:61:d8:8f:90:11:21:af:2e:5f:f6:2d:81:6f:d4:72:50:9c:
e2:43:0a:50:ea:f8:f1:b0:97:f8:0f:e7:bb:0c:89:c4:ef:5f:
de:22:65:ce:36:72:e6:8c:45:e1:26:0f:38:18:8d:65:ef:42:
19:32:a6:61:9e:d0:04:38:39:56:00:df:4a:ed:6e:4a:75:dd:
0e:f0:7b:72:fd:12:51:9b:d3:d9:05:25:1d:fb:8e:8a:5b:6e:
b0:bd:d2:5f:b3:bf:d4:77:38:d5:37:f5:7e:e3:1b:d7:a4:1a:
d9:6e:8f:33:c8:59:91:cc:9e:45:ec:f4:1a:5e:11:cc:68:03:
c9:1d:69:bb:61:bc:bc:0e:5c:ab:16:94:3c:81:41:8b:4e:f3:
66:1c:89:72:36:2c:cc:66:bd:38:30:86:80:c9:cc:55:3c:70:
a9:5c:9f:b7:d1:1f:48:26:ab:eb:f5:f2:93:22:c8:da:17:36:
c0:e5:b1:ab:e1:0a:41:6f:ee:c9:8c:a4:bf:1d:8b:1e:59:1c:
7e:4a:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client