Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier: X4+7BzoajgEkuqcAg5/v/YlXj4XwS8O5Z0ZJVRdcUAY=
Subject key identifier: A9:8D:6D:F2:0F:10:67:CA:E0:1B:38:99:2F:F5:FD:81:BD:48:57:86
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer: /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial: 019A7149C8050695CCD9DCEDEA4D52E2FE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: pzzo441BAUxcWy1H0bjwfjGqoqxHNK0j+zRE4b8QExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c8:05:06:95:cc:d9:dc:ed:ea:4d:52:e2:fe:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=a98d6df20f1067cae01b38992ff5fd81bd485786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:a4:3a:fd:fb:2b:91:8f:76:21:81:6c:ff:
05:5f:a6:d2:df:84:9d:18:a0:a2:91:6d:9c:4f:29:
e2:53:75:57:b5:93:d7:5f:f9:0c:04:c9:d0:5c:78:
ca:78:18:1b:55:db:19:a6:e2:dc:60:5e:92:5b:dc:
b3:59:4f:7b:4a:d2:40:e5:29:bd:01:2f:e3:f4:c8:
7b:e8:96:3c:6b:85:dd:37:58:e5:90:db:6f:e6:40:
d6:b1:ad:84:25:21:2c:e2:24:02:91:1c:7e:38:b4:
0f:2f:7a:35:84:66:dc:67:61:9a:2c:0a:38:76:d3:
0d:0a:d6:f2:e0:31:4d:e9:4b:01:57:62:34:f2:b4:
c2:a1:c8:df:4a:80:17:23:79:39:af:a5:b1:fa:20:
5f:1d:56:66:5b:36:db:a7:57:57:85:24:75:4a:00:
a6:00:79:1c:ab:90:8f:6e:65:0e:ac:e1:70:b5:67:
6c:57:a6:d0:6a:5d:a2:29:d0:5c:b3:7c:34:ae:a5:
9f:a7:7a:e8:41:03:57:23:da:a7:df:57:56:58:e3:
93:9d:6c:c8:4a:2e:7c:06:98:10:7f:9b:bf:67:08:
e4:dc:39:9f:86:c7:69:65:5d:e1:6b:d8:8b:fa:01:
05:ff:23:e3:02:b9:1f:be:18:ba:3b:d7:e3:da:f0:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:6D:F2:0F:10:67:CA:E0:1B:38:99:2F:F5:FD:81:BD:48:57:86
X509v3 Authority Key Identifier:
keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:77:b3:4f:59:b5:31:21:7e:0f:d1:42:fb:53:34:27:38:e4:
f3:cd:de:0c:d9:c5:49:36:01:8c:ee:4c:4b:e7:c1:af:35:15:
50:7b:d6:7b:09:3e:33:c2:b7:2d:54:dd:54:75:55:73:9a:e0:
e8:bb:4f:dc:4e:37:f5:2e:83:53:0c:ff:d7:d6:f9:e2:a5:2f:
a4:de:86:23:e3:1f:07:85:7b:d8:c4:55:c8:15:c0:09:0a:31:
76:3b:7c:4f:03:2a:f1:8b:5c:ef:14:e6:b9:ef:7e:1b:38:c2:
f7:49:aa:0e:95:da:03:8c:82:4e:9c:90:ba:82:26:d7:9b:88:
2b:1c:ad:40:ad:3e:8c:70:6f:b9:7c:bb:ee:1a:2d:63:6f:c0:
55:44:dd:85:f6:92:c2:cf:e9:6b:db:22:1c:14:c5:25:96:02:
c2:47:c1:e4:30:14:28:69:ca:52:f9:5c:57:1a:6b:68:a7:bb:
ef:b2:ba:c5:01:27:07:37:0a:f9:d3:0d:76:18:d1:98:1e:ad:
e1:3e:d9:e0:3a:93:2c:9e:0f:43:f0:60:81:97:14:a1:52:30:
c2:bb:93:a8:fd:75:92:aa:29:f2:7f:85:1e:5e:21:57:03:26:
5c:80:51:27:f0:8d:9c:7b:e0:5f:3b:f7:60:f0:b6:2b:fc:03:
84:9e:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client