Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File: 6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier: fK3v0XmaFgN+TwkWg27L4ZKprY9uExV6CbKVuchk6zc=
Subject key identifier: 35:84:DE:81:EB:3D:A2:78:C2:E4:D3:E7:86:44:66:59:56:A7:AE:3F
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer: /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial: 019A7112FB2C9942D0D5DFE68CDEB541DE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number: 0DB2
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: w44M+D5wRGlkbAMCEIZ2qSq4i/1oSBM8kamiwbaXPjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fb:2c:99:42:d0:d5:df:e6:8c:de:b5:41:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=3584de81eb3da278c2e4d3e78644665956a7ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:ae:e7:95:0b:d1:9f:68:32:ef:29:3f:7a:
73:e7:97:45:ea:42:c9:dd:3a:5e:ab:60:25:33:bb:
ed:63:fa:8c:e0:f6:34:8c:42:8d:db:bb:26:07:b7:
93:03:26:3b:6c:2d:12:46:e6:bf:8e:5e:b4:8b:91:
cc:05:28:0f:68:ae:e5:f8:1e:54:c1:ff:3c:bd:ee:
09:18:98:c3:38:76:ca:4b:0e:c4:58:f2:d2:cc:db:
04:66:ab:b5:34:4f:f1:b2:4c:1a:4c:3b:2b:9d:ba:
da:98:fc:8c:54:12:8b:2d:46:c3:00:cb:e5:ed:c7:
e8:92:ee:9b:0c:3c:da:d6:fb:18:2e:a9:fa:36:2a:
6c:31:d8:03:4b:8b:97:4c:91:bf:2d:04:c9:17:d0:
6a:41:a2:23:75:f3:47:64:ed:af:9f:a8:dd:18:b8:
9e:b7:da:7a:5f:e9:19:ac:6d:7d:cb:2e:57:fd:54:
72:15:c4:5d:ad:93:95:a0:3a:21:5b:50:b1:fd:45:
6a:f5:77:3c:86:3c:e2:c7:e6:e5:70:d5:f9:77:2c:
d7:1b:c1:d7:62:68:10:93:99:ac:f8:4f:33:eb:1d:
1d:93:3a:61:da:d9:5b:f4:83:13:f6:e6:91:ef:f1:
86:60:3c:7d:5c:3d:93:8b:25:83:2c:4a:39:0d:e2:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:DE:81:EB:3D:A2:78:C2:E4:D3:E7:86:44:66:59:56:A7:AE:3F
X509v3 Authority Key Identifier:
keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f2:8e:c8:aa:30:d5:c4:87:e6:d3:71:ed:52:9c:2c:59:e7:
3e:bb:2d:9b:21:3b:af:8a:1e:1d:85:0d:d5:77:5d:21:73:f1:
fd:98:f4:27:99:7d:7a:bc:bc:50:1a:e5:be:58:6e:68:ef:1c:
af:d0:b3:76:c9:57:7a:d3:34:8b:f1:35:fe:b4:72:8b:04:52:
46:c6:31:f0:8b:ec:07:25:ed:58:f2:ae:cb:f4:41:9c:e8:cf:
37:2b:13:e2:f8:87:0d:77:2e:65:88:1b:b9:25:4d:48:c7:e4:
79:0c:f0:f0:77:5e:7d:8d:89:a0:23:33:53:dc:2e:c1:6f:1c:
a1:50:43:dd:e8:35:50:d9:c5:0b:4a:f3:3d:8a:c7:c4:52:96:
53:e4:d8:88:e7:ca:ed:c0:80:98:a0:c1:b2:db:62:d5:f1:72:
ae:73:36:bb:d6:31:6a:03:3a:21:56:8c:71:fb:9d:d8:be:c9:
a7:ca:e7:91:a9:4b:23:42:f0:19:78:3e:08:b2:2f:c2:76:f3:
9d:7c:0a:89:42:8d:a1:36:6f:42:bf:71:a9:0b:73:9e:d5:0a:
28:dc:ba:97:54:2c:7c:82:8b:8e:aa:de:bc:23:49:d3:fa:6b:
d4:73:5a:ed:a4:57:5b:fb:79:27:c0:45:73:59:a4:58:81:6d:
61:49:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client