Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier: spbhI53V1Q/0Nyh6voTQcwo2ypksBHww4xObZL8zcjU=
Subject key identifier: FF:FA:05:BA:88:BA:D5:3F:F0:E4:0B:89:DD:6F:8F:DB:06:F0:1E:F7
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer: /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial: 019A72CA744ACDD15D0C009AAAF5A2EB6679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number: 1036
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: OvjwD3yd1aPYth7V/fptt+0Ize5nAnXu5OVY8CfffSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:74:4a:cd:d1:5d:0c:00:9a:aa:f5:a2:eb:66:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=fffa05ba88bad53ff0e40b89dd6f8fdb06f01ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:a7:ad:41:b6:03:b4:68:59:e4:3e:80:07:
0b:e5:c6:54:53:49:32:36:0a:48:76:d5:c5:74:1c:
32:a4:c2:93:a3:3c:ff:0b:43:3a:28:26:8c:d1:c8:
74:00:96:bd:13:29:1d:da:e1:14:e4:da:12:98:e9:
dd:11:ce:d4:bd:f8:82:e7:5c:0e:48:4e:59:2a:ab:
60:64:b0:de:82:19:00:b4:c6:c3:ff:52:a1:b0:1a:
62:38:32:c5:2c:a5:74:bf:96:56:fb:5c:09:06:f5:
2b:8e:28:2a:53:cb:b1:1e:c4:1d:9a:1a:bf:40:7c:
12:4a:0d:5e:eb:aa:4d:7e:48:87:ff:1e:09:9e:f5:
33:48:c8:e2:35:c0:42:b5:e8:19:08:4c:7b:a0:9b:
d1:83:1a:a8:b2:f4:8c:d8:3a:77:ae:50:e0:4d:6f:
49:f6:70:22:ea:b4:91:14:fc:86:70:7e:83:76:70:
1f:de:64:1a:ea:af:b3:02:fd:2b:38:c3:0c:20:c6:
dd:c7:90:10:05:09:ca:07:8f:97:f6:a1:03:51:d5:
0f:6b:fa:49:5e:7f:2c:58:c0:39:8c:aa:b2:6d:1e:
9c:c7:3d:2e:88:f7:88:b7:5a:23:37:f8:2b:d2:a5:
3a:e6:dd:6c:db:c7:49:87:89:60:4b:13:df:22:b3:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:05:BA:88:BA:D5:3F:F0:E4:0B:89:DD:6F:8F:DB:06:F0:1E:F7
X509v3 Authority Key Identifier:
keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:94:71:91:9e:6d:a4:5e:ff:ee:dc:2f:9a:dc:08:f4:45:ca:
88:1b:d7:01:ef:2f:7a:15:1b:e6:5b:81:11:c6:8d:a4:e7:0f:
ed:f4:05:8f:81:51:41:31:33:18:05:82:d3:8c:2e:d5:24:80:
fd:53:c2:b2:59:5a:f0:1a:ab:90:6b:9f:77:35:6e:33:cb:36:
66:46:a3:45:f5:45:b3:4c:07:1b:46:a8:1d:73:47:13:1d:5a:
31:20:8b:7a:7b:8c:c1:07:e0:29:38:5b:88:b4:14:d8:5f:01:
5b:e3:2d:bf:87:b2:63:ae:7c:b9:85:ea:93:17:11:23:35:d9:
da:03:61:96:b0:0d:85:99:db:3b:3c:f3:3f:37:2b:96:37:92:
80:8c:12:7b:56:c9:1d:a1:4d:67:1b:d8:f5:54:aa:aa:05:bc:
ae:dc:5a:29:90:ec:67:cd:85:9c:65:8e:5e:69:ab:fb:9b:6d:
db:ec:11:ae:10:d7:1f:30:23:1a:aa:4f:f8:a0:bd:a4:ab:6d:
0c:61:cd:06:62:40:92:6b:93:65:cb:46:e6:ad:6b:b7:74:1c:
94:70:de:74:0b:be:b3:9e:08:8b:47:09:b0:9f:21:04:c1:ac:
22:47:fb:ea:70:b3:6b:0d:c5:41:bf:51:56:20:0e:5f:49:89:
06:9d:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:11 2025 by rpki-client