Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: Tm3mlDAD96MNBRa6HTXTSOnW5AoibSZlqJNPDr32VnU=
Subject key identifier: 56:C7:2F:6A:4B:1C:DD:8C:62:65:80:94:CF:AD:04:B5:22:3D:E3:80
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 019A71B81722D953367F7911C5D17D4ED590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 03DD
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: nsgU3HDqs6QVEsYOA6AR6AEFP2W5vz9Mg+UQ39ITHCE=)
2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:17:22:d9:53:36:7f:79:11:c5:d1:7d:4e:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=56c72f6a4b1cdd8c62658094cfad04b5223de380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:af:6b:30:1d:c4:80:ca:88:98:80:1a:75:
a9:c5:36:7a:d0:db:49:e1:95:e7:d8:39:f1:34:80:
83:64:91:db:f7:72:7e:26:0b:8e:83:c8:be:fd:0f:
40:63:58:77:da:70:d8:9b:31:21:bd:d0:df:75:1c:
1c:fe:74:3c:e2:3b:1f:f5:d1:36:b0:d1:34:37:a1:
15:0e:19:ad:18:29:d1:ff:1b:74:60:d8:17:32:97:
b6:80:07:c8:93:f9:3f:3e:77:a7:a2:8f:07:eb:6c:
22:c6:2f:f9:dc:84:44:77:45:f2:d3:01:b0:77:0d:
d4:7a:07:e1:91:25:e9:7d:f1:ee:d9:db:49:14:af:
5a:52:96:d3:cd:37:cc:fb:fd:bc:f6:e4:cb:b8:79:
9e:4e:01:9d:7c:c9:66:1a:5f:85:d0:1a:b5:b2:0a:
2d:2d:78:d2:2a:94:df:85:5d:86:67:d0:2a:37:20:
b3:e5:50:0a:a7:30:f8:10:5b:15:f3:1f:67:a3:ac:
e1:09:0c:41:d1:11:de:ba:77:8f:e9:af:b0:0d:d8:
ba:6c:33:da:fe:07:3d:81:5e:c3:02:69:ab:9f:4a:
68:f3:5b:a4:59:db:15:45:d8:b1:e3:a8:e6:eb:df:
9a:cd:b8:1c:09:57:1d:39:2e:82:02:e9:88:b8:7e:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:2F:6A:4B:1C:DD:8C:62:65:80:94:CF:AD:04:B5:22:3D:E3:80
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:06:33:1a:59:2d:ba:64:68:17:e2:a5:ca:b4:83:0b:10:b1:
ea:82:94:d7:98:2c:e7:35:ec:4f:64:9e:c4:35:14:55:b9:e1:
1d:1b:fb:3f:cb:db:18:15:9e:79:ba:af:c9:82:8e:49:42:ec:
e6:27:3e:4f:5b:18:a4:93:13:18:18:94:3b:28:e0:0a:93:f3:
17:50:de:7f:70:c9:b0:cd:0c:9b:db:20:7a:92:cc:83:10:a8:
2c:48:b2:47:9d:50:bc:8b:62:85:fe:c4:a6:9e:9b:ee:92:7d:
e0:46:9e:28:eb:b7:63:8c:db:3d:c0:b7:d1:c4:4d:25:95:ea:
ab:bc:be:09:71:2c:1d:22:f5:5a:54:a1:ba:ba:8e:b6:11:ed:
0e:fc:e4:a2:08:a9:5a:95:0c:e9:57:ed:74:37:e3:b0:1e:b6:
99:33:8c:39:0a:c9:30:68:69:85:f4:c4:a5:c3:b8:82:fb:76:
91:98:77:97:a9:91:a3:d1:2c:bc:b2:4c:e0:b3:a8:72:f2:01:
d4:d5:30:8e:3c:d2:84:68:45:3b:02:00:ed:9f:68:55:2e:b1:
4c:ef:ed:02:74:ed:f9:76:3b:b4:9b:9a:7a:16:a4:76:d7:9f:
c7:e9:54:d6:5f:dc:6e:79:16:a1:6d:2a:33:83:50:b3:3a:5e:
6f:f7:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client