Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier: v41sqFG6lI8Xvjjn4H6Qkb7jRv+roOMdVhrvnxSoqhQ=
Subject key identifier: 69:1E:FA:BC:B6:B3:BF:1B:DC:05:12:D5:E0:31:68:20:1B:4E:04:95
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial: 019A7112D0889A825A9F261694B5B6EA3083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number: 13C6
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: AIdhvaQHA3BvxZouD1vgMl5IQgQFo0Trb0bMq/1Nq3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d0:88:9a:82:5a:9f:26:16:94:b5:b6:ea:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=691efabcb6b3bf1bdc0512d5e03168201b4e0495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:0c:c8:81:c6:74:6a:a9:5d:99:15:b6:f1:
30:c2:5c:9b:89:e3:56:c6:26:3e:6b:07:84:ed:51:
a7:f1:5b:39:1d:b8:8e:b8:d9:b6:8e:ef:37:36:60:
a9:4b:3e:df:34:d4:ea:6e:c8:4c:e5:04:4b:a4:d4:
59:6b:c3:36:fe:99:72:8a:56:09:53:87:72:84:cc:
b1:50:7e:8c:5c:78:25:bf:ca:67:5f:cb:c5:00:b3:
96:15:64:3e:8b:d3:1a:84:9e:a6:47:eb:b6:cf:89:
b5:7e:07:cc:98:24:58:a6:f2:7f:a7:e1:23:b3:a3:
04:09:ee:8c:31:91:4b:15:1d:6b:85:9a:69:03:ae:
06:60:d5:2a:dc:0d:98:59:5b:b3:33:ee:8d:7f:60:
a1:ac:36:c8:65:64:20:ac:10:3e:26:29:ce:c7:3d:
4c:d3:5f:01:d3:a4:d5:59:88:10:b3:90:db:90:4a:
dd:89:e4:76:0d:6c:ab:9c:f6:99:53:5b:e2:87:bf:
0b:3f:20:54:b9:b6:e2:10:2e:14:cd:16:19:cb:bc:
fa:fb:cf:3b:54:7f:e9:1d:e4:80:cf:43:40:a2:24:
e6:b7:7f:9c:bb:7e:f6:84:2a:3e:26:fa:7f:79:24:
f6:c3:9d:9e:83:86:4f:9e:e6:00:70:be:29:cb:2b:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:FA:BC:B6:B3:BF:1B:DC:05:12:D5:E0:31:68:20:1B:4E:04:95
X509v3 Authority Key Identifier:
keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:58:c4:e5:ef:9f:98:ce:72:d4:cd:2e:f5:18:ac:59:e1:
a0:84:b4:a2:f1:8a:b8:63:a6:cb:56:a7:14:72:1e:59:ce:5f:
f1:4c:08:83:2c:66:f3:d9:eb:d1:c6:82:e2:45:28:10:c5:51:
86:57:f8:a8:88:ec:59:5b:35:3a:ef:95:d6:fe:5b:6d:53:d2:
e0:26:ee:0e:f9:a1:b6:3a:2d:fe:0a:a4:cf:f2:0f:f1:7b:ce:
e9:3f:e7:4d:71:2f:0b:b5:fd:39:d8:67:c9:11:3f:6a:c9:b3:
c4:e6:16:d2:4d:31:2d:e9:76:82:d6:c0:5b:9f:81:01:fb:ba:
70:74:d7:ed:f7:e1:3a:ac:8c:33:9c:c0:df:91:ab:90:0a:8b:
5b:5d:52:3b:e3:3c:2b:c2:92:46:03:d1:66:12:05:09:ee:87:
83:f0:eb:94:64:27:b1:2d:89:48:fd:3c:b1:46:ce:e0:1c:ef:
4a:cd:38:ee:49:f4:72:d7:86:88:ff:d6:c0:52:d8:af:f3:0d:
94:37:37:bc:47:70:70:8d:d2:d8:bb:de:59:42:16:69:1d:48:
95:ef:38:07:e6:b8:17:73:c2:2a:a0:63:d4:78:a7:48:46:d4:
2e:13:69:29:f4:c0:f8:36:50:d3:4c:5a:74:fd:ab:54:9d:41:
73:d6:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:09 2025 by rpki-client