Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
File: l4ag6hgbRs2isjOCKvEAPBuxz40.mft (raw, json)
Hash identifier: mgqXtUwyBXLhcHukrwFSOmFxcfrX3rPt0F9RJXSDp40=
Subject key identifier: 6C:67:2F:CE:C4:E1:10:A5:5B:E3:61:7D:7D:9F:06:83:8F:DB:58:FA
Authority key identifier: 97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D
Certificate issuer: /CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d
Certificate serial: 019A725C707081B304F0A48F180E5FA07C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
Manifest number: B6
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: l4ag6hgbRs2isjOCKvEAPBuxz40.crl (hash: qFPK6VQg/xjCr+BbR11nQ3PeGDlG4g5ZL2ytgoFUMdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:70:70:81:b3:04:f0:a4:8f:18:0e:5f:a0:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786a0ea181b46cda2b233822af1003c1bb1cf8d
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=6c672fcec4e110a55be3617d7d9f06838fdb58fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:cc:f6:c8:73:c7:29:0d:c5:4a:02:21:e1:
98:d1:37:1c:08:1f:dd:79:98:31:bd:fd:60:d7:dd:
77:63:4c:f6:27:0d:f3:fc:c5:51:cb:63:a7:6b:da:
b1:c4:1c:f4:23:04:1f:59:9d:69:38:f3:6d:01:2d:
11:0f:e2:cc:b7:29:f8:64:d0:a1:81:72:c8:b8:6b:
88:ff:90:d6:9c:ec:be:11:67:cb:81:66:9a:92:bd:
cd:73:6c:c7:a0:a4:f0:e5:63:4b:ab:e7:1d:30:af:
e6:1b:b8:94:4e:b4:44:63:02:30:00:01:5e:a6:4c:
55:7a:3e:ae:ec:d7:c2:0e:99:13:56:af:0a:bc:d1:
a2:de:5d:94:e4:5c:33:a1:24:c2:85:58:f2:df:24:
5d:d6:39:a3:b6:66:42:45:20:96:eb:8b:ca:35:7a:
cf:a6:66:cd:be:ba:f6:ee:87:e0:02:0f:93:57:2b:
16:d5:d3:91:b9:c6:91:77:82:ee:c7:cb:55:1f:c4:
23:d7:e9:3e:21:23:f5:9e:39:5c:7d:28:0e:2f:1b:
2a:51:ce:30:47:e6:d8:2a:37:b2:ad:92:42:10:a6:
c4:8d:e0:31:dc:24:73:b7:14:45:22:fe:1f:00:7a:
5a:ca:65:3d:a4:e0:62:38:6f:be:f9:9f:7f:92:7a:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:67:2F:CE:C4:E1:10:A5:5B:E3:61:7D:7D:9F:06:83:8F:DB:58:FA
X509v3 Authority Key Identifier:
keyid:97:86:A0:EA:18:1B:46:CD:A2:B2:33:82:2A:F1:00:3C:1B:B1:CF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4ag6hgbRs2isjOCKvEAPBuxz40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2e65c9-a04e-4b87-a3fe-6503648711ba/1/l4ag6hgbRs2isjOCKvEAPBuxz40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1a:af:8d:5c:d9:64:e6:f0:69:f0:e5:39:f9:dd:ff:2e:2c:
e1:4e:a4:61:2a:83:4f:05:65:66:81:a3:96:95:91:7b:13:4f:
64:71:9c:95:2b:60:68:6a:71:12:ab:2a:d7:db:9a:0f:86:0d:
d6:1d:26:af:c6:1c:0e:22:8c:d7:01:83:c6:29:d4:e3:72:12:
80:44:20:13:2a:9d:17:23:70:d3:8d:5c:09:20:07:4e:85:33:
36:93:c5:82:01:78:2b:eb:24:28:38:55:cf:d3:c3:bf:34:c8:
be:9a:f7:13:dd:9f:d4:ab:02:6d:f8:04:94:b8:6f:0e:7d:76:
e5:1a:72:02:88:7a:32:26:3e:8a:80:af:d7:45:11:f5:c0:99:
a1:c3:59:f9:10:c2:2a:6f:2b:e8:2b:12:8a:83:d1:bb:21:84:
32:9e:a3:c8:80:d2:79:89:3c:37:e6:ac:d8:b1:52:d2:0e:00:
56:bb:cd:2a:3f:f2:bf:b6:e9:74:57:e9:84:b4:1d:b5:a3:14:
81:c0:31:d7:52:55:47:b5:75:1e:75:fa:34:e1:0f:b0:89:e2:
4b:87:e0:39:7a:66:d7:f6:9b:e7:67:3d:24:fd:85:a2:a8:6d:
56:11:c5:a1:bb:d9:c1:49:25:47:42:cc:9e:a3:76:a2:e1:61:
cf:bd:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:27 2025 by rpki-client