Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: 35n2C88rpZlN+VL8ld6iOsdSSx4atQTRMoeptfxsQnY=
Subject key identifier: B2:DC:6B:BE:19:C4:79:BE:F1:AD:5F:BE:CC:45:54:C0:9F:6D:6D:F7
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019A71B899D200D71B9F22A7543AFE53210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 0459
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: BPYoQ+4choi9ehn5Oay8TAqn1NQqj4WO4QeHYF7eH60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:99:d2:00:d7:1b:9f:22:a7:54:3a:fe:53:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=b2dc6bbe19c479bef1ad5fbecc4554c09f6d6df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:bb:31:af:84:ab:04:c7:21:c8:d4:14:95:
41:a3:3b:37:b4:cb:b8:65:c5:e2:9c:86:3c:ce:f6:
b8:70:1e:0e:a4:7b:12:1b:4a:48:1c:68:a9:fc:8f:
18:69:15:d0:6d:86:86:0a:ac:a1:9e:31:56:c7:c8:
66:2f:d7:2d:f1:83:8c:c9:7c:15:a6:20:af:f4:0f:
c0:f4:09:f0:d4:85:3b:12:b2:57:fe:bc:87:9b:76:
cc:df:70:ea:43:cd:7e:0d:90:a9:a0:8c:43:dc:a7:
0c:19:9f:55:73:e7:3b:0c:46:77:a0:63:c2:c5:ac:
ff:9f:6d:58:55:70:a0:6b:cc:1e:6c:5b:1c:31:81:
ac:94:ca:07:9e:f1:37:39:e1:3d:e0:85:8e:87:ab:
7b:13:51:5c:a6:b8:2b:78:cc:2f:84:ad:a1:cf:1c:
cb:97:c7:8e:4f:d2:1f:17:84:9e:1b:9d:56:92:88:
02:99:99:a2:3f:a0:ac:32:f1:e7:b3:4c:04:e4:3a:
d8:20:45:10:9e:5d:31:5c:bd:12:85:70:31:b8:6a:
73:a6:5e:d3:e3:bc:08:89:f3:e4:c5:18:d6:d6:b2:
47:7c:3d:31:26:02:1f:a1:a6:f6:ee:d8:d6:13:de:
6f:82:dc:d9:c7:04:92:c5:87:d7:eb:e3:30:3b:2c:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DC:6B:BE:19:C4:79:BE:F1:AD:5F:BE:CC:45:54:C0:9F:6D:6D:F7
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:03:29:11:eb:42:bd:50:25:36:26:dc:1f:4c:27:98:b9:
7b:b9:9d:db:ee:87:f6:8e:24:24:e4:e5:dd:92:4a:c7:c6:bb:
3b:03:0a:fd:e7:a2:c2:d1:40:1c:92:98:5f:3b:7b:24:bc:76:
b1:9b:98:1b:4f:6e:73:85:14:64:06:8d:a9:ca:f4:15:fd:c2:
3c:09:4c:de:39:4d:cb:2b:ea:bc:0f:c1:85:a6:29:bd:c7:ed:
c8:84:44:db:c2:63:f8:ec:10:1a:70:26:4b:22:54:2a:6e:a9:
fb:09:58:54:b9:d7:43:3a:35:bf:0a:7b:bc:0e:1f:ed:53:e6:
40:5e:4f:a8:6b:00:7c:dc:9e:c8:95:48:a6:e5:ef:b2:6a:62:
4a:d9:7d:19:e3:9e:51:f1:de:25:6f:e1:72:c1:b5:5e:f8:7f:
d1:86:d7:20:4d:65:04:64:42:b5:4e:d4:30:cd:e3:d1:0f:d9:
df:2b:04:23:27:77:0f:a1:32:b9:04:01:ff:eb:90:a7:b0:8a:
28:27:c7:da:f8:9c:0c:6d:44:48:c6:b0:31:45:d8:e0:16:bd:
d5:21:bf:89:e9:75:ea:b2:65:6b:af:f2:f4:c4:47:38:ff:ec:
c6:a7:3e:95:0b:a2:7b:fa:da:bd:2e:82:44:e9:79:27:b1:2a:
13:52:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client