Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: FHaaeEELyb87pEM/xUmBS2a7MtRfOB7VQAk9d8QCnug=
Subject key identifier: 6A:7D:9D:D4:3F:FE:4D:CC:98:CF:E4:8F:28:54:00:99:41:75:51:CE
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019A73384D92E80DFA5C8580DFF26887ED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: F6
Signing time: Tue 11 Nov 2025 14:01:00 +0000
Manifest this update: Tue 11 Nov 2025 14:01:00 +0000
Manifest next update: Wed 12 Nov 2025 14:01:00 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: 5ifO2O/WeVeSxPHNzDRBK5tAVRYmxUpS90Rk0bFtg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4d:92:e8:0d:fa:5c:85:80:df:f2:68:87:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Nov 11 14:01:00 2025 GMT
Not After : Nov 12 14:01:00 2025 GMT
Subject: CN=6a7d9dd43ffe4dcc98cfe48f28540099417551ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:af:bc:fb:c4:fd:4a:35:3b:26:43:56:bf:
49:81:28:b9:69:f0:6e:03:2a:45:51:bf:69:10:99:
e5:9c:00:6b:ce:26:20:a1:41:3a:db:44:3a:c2:ad:
5c:26:ed:89:15:f7:37:17:72:95:74:3f:ee:4b:c6:
81:66:6b:ee:ce:eb:d5:06:2b:2f:e6:f4:48:f6:22:
53:93:b6:1d:18:dd:f9:04:22:8f:ec:74:19:51:0e:
f2:f8:bf:b4:99:bd:35:4f:54:95:78:c6:54:5d:0c:
14:8e:c9:6c:90:11:f3:8a:08:d8:03:2b:9c:7a:87:
dd:25:ec:fa:a5:ad:95:e2:86:aa:4c:3b:a6:7a:a8:
40:e1:5a:82:1f:59:3e:c1:a0:70:32:2e:e1:a2:67:
72:b3:e5:be:2c:30:d5:18:69:aa:ed:e4:ab:6c:f4:
a6:03:e4:0e:ed:15:4f:51:6c:da:cc:96:5b:99:40:
3a:0c:1e:7c:ea:82:8c:6b:1d:9e:dd:e4:3d:b6:8e:
15:89:af:84:d4:e4:ec:6a:6e:0c:26:06:52:b3:60:
68:ef:b9:5c:b5:87:71:9d:f5:03:47:f4:3e:e2:ed:
39:2e:be:2f:2e:44:c7:0b:fd:b3:f4:06:a1:40:3e:
39:a0:28:b0:3d:9e:2d:7b:f2:c8:2f:e0:af:38:de:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:9D:D4:3F:FE:4D:CC:98:CF:E4:8F:28:54:00:99:41:75:51:CE
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:a9:91:79:94:a1:bc:e9:2e:48:f0:c1:d2:70:d2:44:d0:
ea:3a:72:6d:67:7d:8b:38:63:10:4d:7c:cb:7c:29:99:b3:87:
51:39:6d:e1:76:54:ce:90:9e:36:bc:29:e4:ae:5a:06:b1:52:
64:be:3e:1b:5a:cf:07:a5:29:2c:72:da:99:3f:23:c0:9a:dc:
12:c6:0b:e5:6e:df:9b:8e:85:f5:9f:af:0a:94:2f:ce:81:84:
26:54:4d:ba:f3:f6:e9:82:75:ae:02:5a:02:5d:21:3b:93:e5:
82:75:71:b3:72:7d:5f:55:e2:2e:f8:1a:0b:5e:bb:20:80:5e:
70:d3:ab:66:86:54:67:df:61:d1:6c:14:d4:98:93:6e:12:9f:
a5:de:da:f3:cb:99:e6:13:83:a6:3d:7c:53:4b:3e:04:38:ba:
d5:63:13:f0:f2:a9:82:18:92:9b:2a:8c:2b:e3:1e:b2:3e:e9:
04:bb:af:8e:de:f9:53:79:ff:96:c4:fd:e6:85:0c:a3:23:8f:
22:6c:b1:00:61:2e:5d:ba:71:0b:d6:86:16:db:3f:c1:ac:f2:
af:ed:4f:61:3c:5c:b8:57:e3:c5:29:c9:23:05:e2:0a:e2:5c:
3b:fe:39:c3:0e:b8:5a:6a:21:61:47:1f:50:2b:2f:75:99:81:
c8:84:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:56 2025 by rpki-client