Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: lewwnkbAxIMAKz56m96OIc8XVGVrliLwB2sKgJtEYkM=
Subject key identifier: 86:B6:DE:12:71:58:8B:C3:19:5B:B6:44:50:80:E8:3E:72:41:BE:A9
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019A722617F9A293030DF5AEFCD1D73C4A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 06FD
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: X8sVYA94+xoELZFJiOGyKkmImsGzOrWVN+4HCSlCpvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:f9:a2:93:03:0d:f5:ae:fc:d1:d7:3c:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=86b6de1271588bc3195bb6445080e83e7241bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:d4:ef:11:d3:7e:76:36:b3:c7:1d:7e:cc:
c7:b9:c7:05:0c:d8:dd:25:b9:34:a2:4c:73:72:69:
0d:d1:75:89:c5:a2:58:a9:35:7d:7c:9e:33:71:6d:
a7:95:1c:0b:27:c0:8b:f8:8c:75:5c:c6:b6:82:a0:
2b:4c:04:73:a4:15:a6:3a:ad:d8:54:d4:b9:02:6b:
24:df:d4:9a:0f:98:71:b2:c1:31:42:df:af:92:9b:
b9:08:c8:6b:11:57:83:16:cf:2a:8e:71:c5:4b:35:
2a:89:3a:b1:c0:20:48:77:53:a6:3d:37:2c:ad:2a:
a4:42:76:b5:e5:e3:57:d4:f0:1f:54:39:80:fb:f4:
20:5c:eb:f3:05:b9:4e:d3:f7:4d:94:60:27:6f:5f:
fc:5c:7c:50:81:c1:ae:80:a7:cc:4b:2f:49:4a:69:
bf:cd:a8:d9:4a:f0:6a:c2:ff:4a:c5:e5:13:b3:fb:
85:81:4a:d3:00:04:44:b0:9b:47:cd:b0:57:ab:e7:
3a:bb:dc:10:eb:66:bf:8c:c6:b8:d4:7c:00:7a:7a:
69:c8:db:07:94:0f:7c:ee:93:04:b5:a6:ad:27:7f:
d3:32:d1:42:97:cd:35:9f:c6:c1:d6:3d:b1:d8:4f:
0d:80:f2:0c:d5:e4:17:db:34:3e:fc:9f:6d:01:69:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:DE:12:71:58:8B:C3:19:5B:B6:44:50:80:E8:3E:72:41:BE:A9
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5f:61:d9:30:7e:e5:a6:b6:40:ba:07:e4:43:1b:40:03:6d:
f0:3b:5c:44:42:42:75:18:04:45:13:6d:c6:b3:5f:ea:f1:b7:
d1:21:ed:d3:8e:6f:07:cd:57:7a:53:c3:a3:71:3b:9b:f5:4e:
e5:56:80:76:a1:02:cb:7a:9f:c3:cb:c5:42:a6:0a:64:a3:53:
82:f9:1a:5a:8c:cb:f6:3b:ec:86:31:7e:7b:f4:ae:42:a5:93:
cb:ac:5b:92:2e:9c:5a:18:16:52:eb:3c:c7:2d:93:6d:d9:58:
02:f4:cc:1b:a0:9d:5c:fe:e9:e8:fb:87:42:96:d2:21:85:14:
b7:0b:4d:c6:07:9b:30:28:f2:9d:0b:7e:fa:11:39:ba:22:bf:
a3:f1:98:a0:21:37:b0:bb:e7:6c:0d:d5:3a:70:0c:74:9c:15:
fb:88:73:48:c8:72:90:9b:69:22:c9:1c:38:f3:a8:33:14:4b:
dc:3f:43:8e:f1:96:97:45:ac:56:4f:a9:f4:41:63:a1:ed:23:
f4:fd:53:e0:bd:b6:9d:de:3f:41:8c:03:c0:32:83:84:e7:16:
32:c9:07:39:cd:ac:79:24:98:48:90:34:7c:ae:9c:45:26:ba:
80:80:26:71:58:4d:5b:3b:2b:d6:2c:0f:3d:e7:59:dd:65:5f:
b3:45:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client