Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier: 6NTFhC7lok9839+U0yTp4WA2IGAjsk4vSBCPyg+qpuo=
Subject key identifier: 2B:4F:E7:78:99:D3:91:AF:5C:E2:79:EE:BF:43:23:18:EB:29:7F:5B
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial: 019A714A265370261B266BB6C5965AA3EA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number: 1068
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: 20yeGL13cieSLXy+uORCs9fPTOzrNhCbU0kshHVQ5KY=)
2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:26:53:70:26:1b:26:6b:b6:c5:96:5a:a3:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=2b4fe77899d391af5ce279eebf432318eb297f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:94:0e:ef:cd:07:65:fc:03:68:af:dc:47:
bf:47:ff:fc:69:d1:9a:f1:06:d7:86:16:fb:fb:bc:
77:83:b2:81:7f:27:bc:cc:c6:fc:02:c6:ed:d8:20:
a6:22:f6:2d:9a:1d:99:ed:5b:64:30:30:ed:22:17:
1b:15:9b:6b:c2:de:10:dc:79:4a:33:7c:2b:f8:ef:
b0:ab:ed:a4:2f:67:b0:65:0e:8c:ff:90:53:58:23:
5b:b2:3b:15:c4:09:ea:21:41:82:b6:c4:89:8c:05:
be:e2:d9:31:2e:b1:fe:be:31:f9:67:e9:26:dd:50:
95:63:2a:49:fd:0b:a4:fa:d0:a7:af:b5:4b:4b:2c:
d8:40:e1:f3:d0:24:9e:8e:cd:9d:8f:53:54:0d:aa:
b2:86:ce:51:ed:ee:72:19:93:f7:f7:71:5c:75:03:
a4:78:96:9c:64:d5:c1:dc:04:b7:34:fe:ad:8e:57:
34:57:dc:95:63:7e:44:fd:da:7c:ca:19:9d:2b:88:
3b:a2:ec:f6:6f:b0:ba:35:ef:95:59:20:12:58:2d:
e9:a8:b4:3f:fd:22:a5:88:9b:23:85:6a:15:0e:3d:
a8:db:97:b7:22:1c:45:dc:a2:69:a5:d2:26:81:0f:
55:e3:32:16:59:72:3b:50:a4:ad:e8:c2:24:9a:9d:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:E7:78:99:D3:91:AF:5C:E2:79:EE:BF:43:23:18:EB:29:7F:5B
X509v3 Authority Key Identifier:
keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:e3:b9:00:8c:c1:43:2f:57:38:20:8e:73:38:49:e8:b2:
a0:e9:35:f5:32:a4:1b:03:66:50:d3:44:4c:5a:59:49:6f:f5:
6d:50:73:48:b6:84:63:7b:88:58:0e:65:84:23:0f:87:07:2f:
80:78:8e:cc:19:0b:9d:ce:a5:1f:d3:02:ad:74:dd:36:b1:0f:
e4:6d:11:f6:94:72:d9:38:82:21:03:35:15:1d:9c:ee:85:8e:
a9:21:38:f3:34:78:fa:e4:be:84:87:02:29:7f:c7:54:c2:5e:
ae:60:ea:74:4b:b5:0e:5e:1b:73:29:66:ad:41:98:92:91:0f:
37:bf:70:b2:d3:c2:47:5d:a1:98:33:9a:6f:e5:45:a0:47:e9:
ea:ce:69:f1:31:94:ce:ed:51:34:29:8f:80:8c:a1:99:4b:c8:
96:da:86:6b:9d:76:e9:f1:3c:96:a7:f3:87:e6:25:f5:1f:88:
16:20:26:13:e1:33:78:38:30:c1:74:b3:6f:dc:a3:3b:b3:cd:
be:0e:70:22:de:a5:8c:e3:10:bd:fd:e1:f4:aa:25:de:33:40:
5f:e1:18:33:07:e6:8d:99:a1:2d:70:9b:f5:19:55:d0:61:d1:
27:09:ee:2d:ad:5b:10:18:cb:0b:bc:76:18:08:d8:29:53:f3:
15:21:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client