Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File: c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier: 5dBRaSJS7c5/DtMoU0le8Bea8rmTeugDM4YjI68qY0k=
Subject key identifier: 93:A1:D6:26:0E:08:A2:9F:24:40:5B:B4:95:2D:F5:7B:66:23:E0:A3
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer: /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial: 019A711349A060080D52F44FB81D6777929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number: 16AA
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: rM8jeCF2xK6R0Nl2i6/KJk2W+MNJS90QkzeDYKGM7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:49:a0:60:08:0d:52:f4:4f:b8:1d:67:77:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=93a1d6260e08a29f24405bb4952df57b6623e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:f9:93:9d:11:c2:6d:14:00:8d:ca:76:e4:
f5:ad:8d:c9:ad:cd:c1:62:b4:d3:1b:f6:bd:ad:49:
63:0f:e0:c6:a4:68:94:cd:78:9c:ea:42:e8:57:20:
a1:27:a1:b6:0b:69:27:42:20:78:98:e2:2b:99:e0:
bc:a8:d7:90:96:d9:94:23:87:bb:b6:e8:1b:31:66:
0e:50:2d:e0:20:c0:ec:c5:73:83:04:d1:0c:72:53:
4b:80:f0:e6:f4:df:06:7a:79:b0:77:40:17:ba:78:
21:4c:b3:e6:0a:6c:69:49:b1:d6:31:d3:21:cf:04:
73:91:01:26:df:8e:c9:58:bb:b9:5e:b0:02:c8:2b:
c2:fd:f9:e0:af:52:12:35:1d:dd:74:0a:1a:aa:68:
81:5b:bc:80:70:07:6c:50:51:d5:dc:b0:f6:cd:88:
92:2e:6a:36:65:f2:f1:87:64:55:a6:2d:cc:3b:b1:
26:8b:46:92:a0:d4:4e:0e:b5:82:80:9b:6c:10:b7:
2f:58:5e:87:58:15:ea:ea:d2:0e:0d:14:69:14:f8:
e4:9d:ed:4c:f8:36:31:e1:55:d7:89:7b:d1:bc:1f:
5e:b0:d7:65:54:96:0b:7d:66:6e:c0:14:a7:15:54:
45:aa:37:17:31:bf:d7:25:a5:58:4b:18:a1:6f:73:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:D6:26:0E:08:A2:9F:24:40:5B:B4:95:2D:F5:7B:66:23:E0:A3
X509v3 Authority Key Identifier:
keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:59:37:50:d6:bd:61:a4:1d:c1:03:e2:4e:60:1e:05:a4:
ac:27:43:8d:a9:aa:cd:99:d9:fb:6d:2c:2f:e5:62:23:8e:c2:
02:6c:b4:d5:3e:1e:50:51:c8:e7:57:63:cd:53:5e:f9:55:53:
ce:11:52:cc:a3:f3:ac:ee:99:4d:75:34:b9:0f:a7:bc:34:1d:
e6:e3:97:51:0d:33:67:b7:db:77:3e:2a:77:bb:6f:2c:e2:71:
e5:48:00:26:d3:4e:53:5d:27:a1:89:ee:77:7c:83:1d:5c:c7:
8e:51:d7:b8:85:ae:2c:6f:18:c9:7f:8e:94:9a:1b:af:17:d5:
57:e2:93:1f:64:d5:73:37:59:b9:d5:b2:2c:27:d5:ac:06:3d:
1a:4f:15:ea:98:0a:64:d2:1d:f4:f7:67:d7:17:f0:7a:48:5b:
d1:b4:62:60:35:10:97:0f:4c:b3:23:bc:26:c4:45:46:de:d5:
96:b7:51:b3:a2:58:1f:7c:a1:94:e0:02:0b:02:c8:2b:c7:d6:
2e:50:5e:fd:11:ea:7d:9b:2a:43:a7:18:58:c7:81:6e:80:80:
de:7a:69:f3:4a:62:96:6e:81:d8:a2:06:3a:6a:34:1c:3d:0e:
58:ae:c2:dc:33:c4:43:6b:d8:66:f7:64:9d:cf:9c:bd:5e:2d:
a8:44:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:17 2025 by rpki-client