Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: Ri4tMgXx7nHc+LouS06Au1E9GRXnh7oUD3Bk//ceWmM=
Subject key identifier: A2:2B:46:B0:88:BC:BD:9C:07:10:B0:15:0A:8A:DB:4E:47:C7:D6:07
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 019A71B821D8AB91CF387B5613C206FFBC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 11FF
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: NIvD+eyStrEdml8xVFRaKEadluQ4/ndLX3O/qxOm23c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:d8:ab:91:cf:38:7b:56:13:c2:06:ff:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=a22b46b088bcbd9c0710b0150a8adb4e47c7d607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:4e:b7:6c:72:88:13:d5:32:ce:df:cb:d4:
ea:b0:89:5c:3b:18:4b:04:2b:64:c7:cb:b4:ca:be:
b5:a4:80:c4:2c:6c:24:aa:3b:f9:89:54:be:f7:28:
66:22:37:93:ed:42:eb:8c:96:4e:81:2a:7e:ff:aa:
40:11:90:e6:54:9a:98:1f:7c:57:7d:41:ac:90:62:
06:f1:7b:98:0d:f6:a4:66:95:0d:91:1e:07:94:52:
58:59:00:54:9b:86:db:72:65:f2:4b:ab:e3:25:ce:
87:b1:37:e6:ae:93:ca:6b:97:de:a3:e2:b1:fc:67:
b7:6c:e5:c1:cf:e5:90:49:e8:61:9b:77:da:03:70:
d9:79:9c:2b:c0:61:f5:ac:c3:c5:96:22:d7:c7:24:
8c:23:d7:a3:8b:1a:f4:d7:62:4b:7b:5a:ac:53:91:
ae:12:94:e2:e5:70:1f:01:9c:fc:91:6e:d5:99:2d:
94:33:cc:b1:0a:dc:ee:4e:b5:13:75:f1:86:45:4f:
78:d8:42:d7:12:05:87:62:08:b0:a8:b6:f7:69:cf:
12:8b:b4:69:7e:23:64:56:0c:79:7d:cf:05:99:b2:
f9:87:cd:91:a7:fa:e0:83:84:0e:c7:85:93:37:1f:
0f:9c:05:90:24:7f:8f:76:6f:be:65:47:21:fe:df:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:46:B0:88:BC:BD:9C:07:10:B0:15:0A:8A:DB:4E:47:C7:D6:07
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0e:84:fe:c1:ee:f7:ff:32:91:51:62:31:cc:8a:5f:f4:55:
e5:b5:c8:91:c5:1f:f0:01:70:f7:91:56:f1:4c:b8:f1:e5:39:
32:c5:b0:0e:24:0b:56:7f:dd:b3:d2:6a:57:a0:86:5d:59:6b:
e2:76:0c:42:f3:74:ca:12:bb:5b:01:85:de:b5:89:26:d7:79:
50:fd:f9:10:92:45:cb:53:90:a4:7d:96:5d:26:e4:8f:77:24:
40:69:9a:d5:00:98:c3:c1:69:82:27:66:52:75:a5:ca:0a:7b:
63:73:12:5a:20:59:40:8e:4f:9e:98:e0:a5:62:13:e2:5e:53:
32:6e:87:94:e9:7d:4d:e9:3f:2d:37:6c:0b:a2:7a:46:28:d4:
5e:a1:26:12:94:0b:16:7e:71:03:b9:1b:e5:90:54:17:be:5b:
57:12:da:f6:be:03:82:e3:ad:77:2d:91:75:59:25:ce:08:6e:
e6:f4:35:1c:97:b9:07:bd:c9:90:22:97:92:cf:d3:c6:0b:b9:
ed:9c:27:26:26:16:ab:f2:f5:45:92:6e:e9:fe:a1:31:36:ad:
a9:90:cf:ea:b8:6d:7c:cc:a1:86:cd:dc:55:3a:b2:da:86:3b:
6c:bf:9d:fb:5a:d5:80:be:26:4b:e3:aa:28:35:74:8d:1a:ec:
0e:2e:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:12 2025 by rpki-client