Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: 81RPU4gww4/5zp/uANnZ8w+UqQcHCzU5+1f/kE6J8gM=
Subject key identifier: 73:20:1E:AA:0C:31:D9:EE:15:F2:64:73:60:B0:96:B0:B3:C8:49:3B
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019A71B8D44C2DC15D3758FDC2818F4FF61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0E3C
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: tyG7NMU6DhqbjH2clnvzxOuwTmB0N6YnuMTgc0s5LS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d4:4c:2d:c1:5d:37:58:fd:c2:81:8f:4f:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=73201eaa0c31d9ee15f2647360b096b0b3c8493b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:05:5e:e9:64:64:a0:d9:a0:75:a9:dc:ea:
ca:98:90:89:bc:9c:d8:f8:51:76:96:54:d7:86:07:
ca:8c:4f:47:73:f8:49:8d:24:9c:cb:9d:0c:fd:46:
e3:13:1f:88:e4:18:43:fa:35:44:04:54:f2:c6:41:
1d:43:2b:dc:37:6f:fc:51:21:92:8e:00:b4:94:a6:
f3:e9:41:b2:9e:44:4e:fc:13:b5:76:57:7f:09:d1:
1f:ec:56:a2:0b:a7:38:ae:50:fe:c9:e1:11:52:d4:
f8:ad:39:04:ac:03:fa:51:df:31:54:e8:b5:d4:03:
e5:24:c5:fe:1b:3f:25:dd:a1:3a:2c:1b:55:14:ca:
00:0c:c7:93:80:f0:4d:56:b0:12:c1:9e:67:c6:78:
95:ee:dd:97:e1:55:df:a8:8c:1e:eb:d4:65:ae:cc:
7c:68:21:c6:ba:80:5e:0b:e3:1c:58:97:73:f6:4a:
e4:ee:09:61:d6:49:20:5b:57:9e:65:81:2b:7d:f5:
d8:f7:06:c6:32:34:3a:fa:a4:f3:f3:60:db:86:bc:
27:2f:3c:cc:80:8a:05:70:99:ba:c8:c6:68:af:b3:
8c:85:b3:5f:dd:e3:15:f7:11:bb:b3:d9:c6:46:01:
d3:db:46:37:15:ce:69:25:9c:51:11:0b:27:83:e4:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:1E:AA:0C:31:D9:EE:15:F2:64:73:60:B0:96:B0:B3:C8:49:3B
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:39:2c:ef:31:ac:d2:c4:9c:d8:8a:22:66:bd:91:74:36:b9:
18:43:44:7b:9c:0a:3f:0b:12:be:07:58:df:8e:b3:1d:c7:8e:
47:7e:52:6e:c3:9f:9b:f8:f5:be:b9:7c:b2:1c:67:5b:ad:54:
11:36:a4:9e:41:20:1b:6f:d5:9c:e5:21:09:28:77:e1:63:5b:
2f:fa:09:13:e8:06:17:1f:e8:d7:a5:0e:7e:0c:b4:67:ab:72:
de:ec:e4:b9:42:31:5a:b9:54:44:62:c3:bf:b8:20:39:a0:75:
ae:8c:94:07:a3:2e:4e:f6:e6:bd:14:68:43:39:ca:3c:5a:45:
01:26:74:ec:f9:62:50:92:3e:05:9e:ed:38:9f:ce:01:55:58:
b4:70:74:a4:45:6b:1e:68:97:2c:99:8d:d7:be:e2:7b:b9:f0:
90:4d:c0:86:cb:73:0b:64:ba:69:70:7f:e4:c3:da:42:82:52:
1f:1d:33:f6:d6:70:3d:ac:33:e4:0b:60:02:cf:42:7d:7b:08:
70:6a:56:79:f7:c7:35:c6:b3:94:7b:67:09:96:7d:12:b4:99:
97:bf:93:37:18:57:4f:e4:99:11:90:fe:35:63:24:5d:31:92:
b7:b6:e4:17:3f:c5:12:3d:ab:29:cc:74:1e:21:6f:66:48:9f:
60:00:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:56:11 2025 by rpki-client