Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: P6jpVbLz7TD9obmewDkeKIiIl/89AAgOMePeX5G5Qxc=
Subject key identifier: 15:05:7B:8F:A9:42:CA:7A:F1:22:50:07:A2:A3:5D:C7:A2:27:C0:07
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019A71B8378D679CFFD9D36876BFE9FF12A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: aVOzYasvKxGUIiQ3GMvfIAAztPfOtISS14BLg8eIUw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:37:8d:67:9c:ff:d9:d3:68:76:bf:e9:ff:12:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=15057b8fa942ca7af1225007a2a35dc7a227c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:82:2b:30:83:a6:1d:dc:35:02:55:8b:e1:
24:21:e8:d4:0f:4e:db:0b:9c:74:a8:9b:ac:af:b2:
30:92:dc:42:5d:8f:6a:71:4b:44:49:bd:10:23:43:
09:d3:9c:a7:4e:f6:68:19:6c:e3:a6:f8:ef:95:92:
a3:09:55:2a:ba:4e:e9:a8:8b:31:08:f6:85:43:b4:
34:c0:0f:09:30:8c:bd:07:ea:55:0f:f7:66:c2:26:
df:4c:b1:11:b7:24:e2:db:b0:e0:39:32:07:9d:56:
56:5b:60:c9:96:44:59:0d:19:70:e5:8f:a6:39:22:
9d:82:e7:f2:66:e9:f6:d1:bc:a8:76:6e:05:39:76:
49:2c:1e:83:e7:34:3b:8a:93:62:af:cf:83:89:26:
bf:41:ce:a9:5b:08:0c:31:14:5a:b6:3c:4f:1c:24:
69:5b:c2:f8:3b:82:cc:49:4c:6b:9f:7c:6c:d8:34:
ec:22:a8:94:2a:4b:30:8b:3a:c9:1b:68:29:7d:ab:
30:8e:ef:0c:f7:99:86:8d:fd:7e:d3:bf:17:92:2f:
03:9c:30:a7:5b:8d:2f:af:c4:72:69:cc:84:17:ce:
d8:1f:c4:dc:1b:23:07:fb:04:86:93:02:fb:48:49:
6f:35:25:bc:fd:41:1a:e3:f8:f4:d0:2e:31:fd:d5:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:7B:8F:A9:42:CA:7A:F1:22:50:07:A2:A3:5D:C7:A2:27:C0:07
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d5:fd:8f:a0:c0:e8:21:33:c5:b8:0d:78:50:af:6f:b1:02:
10:3f:c0:5c:71:26:1f:de:f0:04:8d:da:c1:f9:f4:38:f7:fb:
a9:35:e6:a2:88:86:e3:e0:14:d2:9f:8d:d3:a1:e6:45:39:1b:
82:6a:39:db:5e:42:74:7a:ef:c3:89:5b:b2:70:25:9d:fe:d7:
6a:16:ff:b9:86:92:ec:a4:08:42:05:60:68:48:92:7d:f7:a3:
db:35:d7:67:05:e9:f3:5c:79:88:04:39:55:13:6a:04:d2:5e:
55:2a:2a:3a:3d:2f:5a:17:64:2c:e2:23:cd:14:4f:14:82:92:
cf:20:96:72:a8:48:3a:0c:72:6e:ed:e1:eb:59:a4:d9:f3:c6:
8b:8a:cf:ec:e7:30:5f:37:61:18:ec:9d:72:3f:9a:30:ef:54:
59:f3:6f:c4:c9:18:4e:83:dc:19:c1:de:51:fb:d5:9f:b3:13:
ca:d1:52:fe:0e:56:38:4b:f7:d5:50:33:ba:08:09:ce:27:5d:
d3:f6:42:a1:d8:01:39:f6:a5:62:19:ed:f0:ad:82:7a:dd:bc:
90:d3:29:1d:3f:a0:08:39:fe:1f:ca:95:30:95:00:3c:d7:fa:
57:7e:80:20:d2:0d:2f:0c:f9:a4:31:c9:5e:96:4d:4d:1c:32:
39:95:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:46 2025 by rpki-client