Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier: pLxDhoAR9kOmTKqHsfW+93YMqS3cUwoRGAmQe7Sxt4A=
Subject key identifier: 42:DA:B7:67:D1:0D:1D:6F:C5:76:32:E6:04:85:91:D3:A5:89:FB:74
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial: 019A71B9479918F82EABE30862B04CFCB536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number: 0D76
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: tn7e9RVEAgX4+X6xkPzdl4+201+H9BvsooDQjbY4ymk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:47:99:18:f8:2e:ab:e3:08:62:b0:4c:fc:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=42dab767d10d1d6fc57632e6048591d3a589fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:f4:b0:b1:8d:16:a5:97:3e:49:9a:81:eb:
75:96:ac:fb:bb:eb:cc:5c:fe:d1:66:fb:3a:a4:27:
3b:f5:e2:f6:ca:1b:dc:0b:78:a4:ea:5c:93:a2:12:
5a:cf:4c:e6:e2:38:91:ea:83:bb:a4:bd:2d:28:ca:
97:c5:33:19:63:ff:12:31:f9:a9:0f:d2:5b:91:bc:
c0:0d:ab:cf:b3:75:d7:16:24:c2:a3:bb:a6:94:34:
9f:b7:1d:ee:12:a7:3b:c1:d8:be:32:fc:51:a5:44:
93:43:ba:e3:95:6a:33:75:f7:ae:6d:ea:a5:7d:c3:
0e:62:00:97:bc:3b:ae:65:60:27:00:6e:ad:02:df:
7c:ca:5f:a4:1b:9b:79:d2:3a:03:d7:f2:d7:28:1b:
d5:bd:61:64:9d:d5:4e:c7:81:1a:ee:26:11:1b:ba:
4e:4b:20:ca:88:f5:d2:05:9c:a7:18:99:90:27:53:
24:2a:34:37:e9:62:03:97:2f:11:32:14:13:36:0d:
86:17:39:df:2f:b1:57:2f:a1:da:da:2d:29:67:c4:
76:50:1e:bb:d2:82:b4:5c:c8:f0:8b:08:6d:6c:8a:
ce:cc:8d:c4:87:e2:19:d0:18:a8:46:80:76:6f:ba:
71:6c:f7:e0:c9:84:09:05:b9:a5:08:c2:b4:a9:05:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:B7:67:D1:0D:1D:6F:C5:76:32:E6:04:85:91:D3:A5:89:FB:74
X509v3 Authority Key Identifier:
keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:d5:6e:7d:cc:be:ae:f3:4e:b0:9b:72:6c:e2:54:e9:ee:
66:70:21:ef:9d:a0:9e:a7:1c:31:9e:a0:21:ee:62:10:f4:e0:
29:f6:ab:89:11:0c:ce:96:d1:68:a1:43:2b:ee:ca:4e:36:76:
a3:3c:91:97:13:70:c2:4f:1a:5c:4b:1b:a8:c3:7d:aa:18:5d:
e3:5a:72:30:2e:d2:63:6a:e5:34:fd:ad:60:99:78:58:e3:f1:
34:ea:42:ae:57:2b:c8:28:ea:1e:17:3d:61:85:cb:b6:bd:54:
58:cb:17:88:c3:da:51:32:93:9d:76:ac:9d:e3:d4:7a:2d:11:
2e:4b:19:83:e4:0d:01:1b:92:4c:d9:26:d4:6d:9f:4d:97:20:
65:e4:4a:3c:7e:83:7f:99:72:3f:4f:ae:7a:66:02:b6:8e:ee:
16:2a:51:56:b1:c0:9a:36:3d:c2:8c:8e:60:8c:01:e6:a5:85:
90:7d:cf:3e:1d:3a:38:fc:35:d0:dc:1a:66:17:0b:e6:87:10:
fc:eb:6a:b8:b7:51:8b:22:31:4c:0c:b4:f3:7d:ca:3d:bd:36:
7a:4e:d9:57:55:a5:5e:e4:81:2e:c9:15:ee:4e:43:62:2c:2e:
3a:8e:38:25:c1:0e:72:87:3e:f4:68:cc:c2:11:16:b3:d8:7a:
1a:bd:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:13 2025 by rpki-client