Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier: bgpWjrxunEm4EBf8HnXbCYFCgccNVoqQvd4o1pnAi7c=
Subject key identifier: ED:B3:9F:F8:64:86:78:E0:A0:35:FF:B0:28:0B:09:95:D2:E7:74:14
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 019A29307CC5803686ABF55E60BF9910E48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number: 0E4A
Signing time: Tue 28 Oct 2025 05:00:34 +0000
Manifest this update: Tue 28 Oct 2025 05:00:34 +0000
Manifest next update: Wed 29 Oct 2025 05:00:34 +0000
Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: tzn06XKSQd07vdk54PNmYCTqzjZZ5vUhlLSencgLp+Y=)
2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:7c:c5:80:36:86:ab:f5:5e:60:bf:99:10:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Oct 28 05:00:34 2025 GMT
Not After : Oct 29 05:00:34 2025 GMT
Subject: CN=edb39ff8648678e0a035ffb0280b0995d2e77414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:43:64:5d:01:11:34:1d:dd:84:9a:1d:89:
fe:90:f0:00:76:69:0d:a1:1c:f4:10:d0:d0:ff:63:
49:a5:5e:60:27:7d:db:0f:bd:2d:17:f8:02:f8:ee:
b2:31:37:20:8d:ce:b3:7f:7e:48:8e:2b:4b:bf:1b:
7a:ef:40:b3:96:e2:87:56:0e:fc:a2:4f:9f:57:6e:
53:d2:23:06:dd:ae:6d:7f:e6:ef:4a:94:78:d7:98:
98:b4:00:af:5b:56:08:ae:31:3d:51:15:6a:8f:42:
b6:f9:7d:6d:b6:5b:24:b4:00:92:7f:89:1d:d6:ef:
f1:8a:e2:04:22:15:e2:3c:bb:df:6f:eb:aa:c6:e3:
8e:15:b9:51:41:7b:23:44:c0:de:d0:7f:80:04:0d:
ca:b2:cb:8a:33:46:f3:50:c9:21:b0:3d:71:e0:16:
32:d7:cd:11:57:38:af:3e:d2:57:6e:91:d8:25:c2:
5e:3f:1f:38:6e:56:ad:ba:ae:6d:49:20:e7:f3:70:
54:37:6d:20:26:2f:77:6d:29:3b:3e:4a:55:0e:b1:
d6:1f:a5:d6:6c:c7:50:2d:ad:60:86:af:bb:10:38:
16:f9:6c:6f:f3:0a:79:68:bf:1f:9a:31:ee:c1:e0:
8e:25:b7:5e:d4:67:75:45:29:dc:4d:a1:bf:c9:eb:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B3:9F:F8:64:86:78:E0:A0:35:FF:B0:28:0B:09:95:D2:E7:74:14
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:1b:66:94:e9:ce:57:18:67:17:c4:f6:f6:00:de:c4:32:
45:58:ae:81:47:2d:f8:bb:f0:ab:19:2a:28:fc:d9:e2:f5:18:
73:be:1f:9b:33:9b:9e:6b:f1:0e:70:96:1f:85:c1:73:b0:24:
1f:92:61:76:08:71:93:fa:b0:6d:16:19:e4:7d:8a:76:dd:b6:
23:93:46:b3:8d:3d:bb:e8:bb:eb:16:e3:78:12:b0:1a:06:67:
19:ca:6c:eb:48:8a:85:9b:fd:20:27:2a:8c:cc:be:fb:a8:42:
da:5b:c5:1d:18:04:5e:7d:e7:07:60:08:33:9a:56:18:a4:2a:
83:fd:bd:a9:16:88:40:c1:28:54:0e:16:f8:c3:af:d9:27:6c:
18:61:f0:a2:3a:d1:f8:7e:25:fe:4b:47:e7:41:4b:1b:04:3e:
e1:e9:87:ba:5f:67:ac:27:26:8b:20:51:5f:b8:d6:33:aa:7f:
49:83:20:d5:b0:07:47:cc:ea:17:52:5f:73:05:95:ec:71:d1:
1e:10:a6:ce:a0:aa:7f:59:23:92:e3:e4:71:47:c7:cd:7e:92:
8b:f1:55:25:61:de:9c:d5:ce:d6:b1:e2:81:d6:e4:d9:19:a2:
bb:9d:e6:56:cd:23:49:d3:ab:30:52:6a:6b:65:02:06:af:f9:
62:b0:c3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:49:53 2025 by rpki-client