Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
File: 6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json)
Hash identifier: sXZkglgl2qrqiRSCF2W9T0F2clfOp/PQw+T4LBMzkZY=
Subject key identifier: 42:24:3C:BA:13:62:5F:C1:62:16:18:FE:85:9E:1E:BD:0C:FE:46:14
Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E
Certificate issuer: /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
Certificate serial: 019A7112FF69784CA13D33A6308F00FF1CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
Manifest number: 0B32
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: 9kw14ArXS8roTA8RQ2O13D1X1nFV5bPP6Nmfq35Lc1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ff:69:78:4c:a1:3d:33:a6:30:8f:00:ff:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=42243cba13625fc1621618fe859e1ebd0cfe4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:da:dc:e1:09:62:af:b5:10:2f:ca:d4:1a:
3e:96:b5:7a:27:b2:f7:a1:3b:82:bc:47:ce:69:f1:
15:4a:1c:41:77:91:f6:34:e3:26:4a:3f:c0:08:23:
be:0e:14:48:e6:55:f8:80:ea:a7:e8:84:30:f0:20:
2b:02:22:58:e5:55:3c:3e:09:72:02:a1:50:b1:17:
9c:a7:7b:c9:61:f2:24:06:8a:c0:7a:ad:fe:ae:94:
78:94:45:cf:10:bc:ca:ad:6a:1c:f6:b4:74:06:26:
64:a5:41:79:8c:14:42:bb:52:77:e0:08:6b:2d:dc:
40:48:8a:9e:60:43:fe:a1:c7:90:4c:bf:95:63:c1:
67:90:56:d1:b3:13:15:6b:bc:f3:a9:57:29:12:0b:
fe:f8:be:92:74:27:3c:ed:39:a0:d9:33:84:5d:1d:
3b:2e:e7:73:b4:30:7e:9d:6d:ec:ab:5e:09:a6:dc:
41:47:85:68:c2:ff:16:af:ec:a5:28:9b:b8:ea:66:
0f:50:76:7e:a7:6d:e9:b4:23:84:b6:18:59:55:af:
05:ec:76:d9:8d:26:d6:31:77:6a:95:a7:f5:8a:c6:
b3:e5:7d:fb:55:11:bd:31:8e:7f:14:a4:20:52:b4:
42:c4:f6:b6:ce:2d:28:60:7b:71:50:ab:95:bb:73:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:3C:BA:13:62:5F:C1:62:16:18:FE:85:9E:1E:BD:0C:FE:46:14
X509v3 Authority Key Identifier:
keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:d5:3a:c0:85:41:a2:a5:17:75:68:c8:c4:c6:e7:85:32:
37:70:8f:41:fd:41:c3:19:21:ab:95:9e:13:a2:41:51:b3:48:
a6:b0:21:c7:d3:e1:df:f1:23:57:ec:68:b8:21:67:5a:34:20:
c9:e5:ec:fd:0b:e0:1a:19:f5:73:8a:d0:bd:1f:b8:44:06:d3:
51:54:88:51:f6:4e:1a:4f:b6:66:e0:93:e8:1b:6a:46:bf:da:
e6:e0:6d:4f:84:7a:24:6d:17:ba:92:27:52:2f:35:4e:87:09:
7c:3c:81:32:f4:c4:9f:95:12:18:2c:61:cd:81:70:99:10:3c:
f6:51:7f:0e:ee:db:f3:f9:c0:d5:69:03:06:85:1e:12:c8:61:
a9:d5:3d:ba:5d:f5:fd:49:63:38:33:64:77:04:24:56:dc:18:
12:6f:7c:5b:5c:98:c4:fe:84:91:e3:10:55:0e:30:e0:ec:3d:
79:ba:1f:d7:48:dc:d0:0d:54:82:af:0b:6b:b4:03:a7:07:5c:
f7:6c:fa:c0:56:e0:15:e5:26:d8:ea:3e:8b:c0:a5:ee:d0:ce:
b4:a9:d9:94:33:3b:f6:2f:35:e7:60:d1:67:02:79:24:2d:8c:
1b:60:8a:4e:f4:03:f0:7c:09:9f:16:9b:23:38:e9:9a:3f:f9:
f5:2c:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:17 2025 by rpki-client