
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File: 6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier: VIXxctGD3UmW9TEneJqgR/WOLDC55GKeVfvg5Gs4FDM=
Subject key identifier: C0:EB:71:A1:32:73:83:97:BC:6F:F9:78:3F:22:21:34:09:37:FE:DA
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer: /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial: 019922FA1B72BF37410AAA38AF97B018068B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number: 0D05
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: N0guKHbF2j1eoc/LFzeTgPJic9gAOr0FD38bvoYm5E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1b:72:bf:37:41:0a:aa:38:af:97:b0:18:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=c0eb71a132738397bc6ff9783f2221340937feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:12:cf:37:97:2e:13:4e:68:94:80:1b:70:5b:
c5:44:0c:5e:fe:08:5c:de:52:6e:83:99:bc:23:b3:
81:09:8e:ce:8c:8f:2f:d3:cc:c0:83:6b:c8:66:9e:
7b:a1:14:48:d8:a7:25:bb:c3:4b:ee:86:43:bf:a2:
be:5f:a0:fd:39:1f:62:56:97:5e:6e:83:b0:bf:3a:
d6:3c:4a:39:2e:db:a9:fe:73:a6:c9:53:0b:c2:09:
5c:93:e6:f7:4b:e3:b0:4d:6d:14:2a:5c:14:6b:86:
9f:1b:70:5a:07:b4:09:4c:b9:5f:46:76:51:3d:5b:
9e:97:b4:9f:35:40:e2:86:0f:92:fe:bf:b7:7f:74:
9f:d5:d8:c8:29:7b:aa:3b:74:fc:b5:0d:a7:ba:f5:
31:1c:70:fa:86:6e:e5:a8:4a:20:87:6f:2c:db:8c:
ca:03:96:4d:23:5b:0e:f1:dc:68:54:31:86:57:bc:
37:b4:8c:20:b7:8b:fb:5e:f6:75:76:24:7a:48:f1:
de:ec:33:b1:5c:60:fd:d9:14:40:34:cf:30:ec:6f:
90:9c:a1:5a:64:d3:37:f3:32:1e:5d:6e:70:5c:f1:
e7:22:3d:b8:3e:b9:74:ff:d4:05:83:ec:d7:50:09:
05:62:f3:ac:ba:1a:87:67:13:53:c0:d9:24:e6:95:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:71:A1:32:73:83:97:BC:6F:F9:78:3F:22:21:34:09:37:FE:DA
X509v3 Authority Key Identifier:
keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:f7:14:dc:8c:fc:fd:18:60:57:e8:e0:36:87:fb:5e:ae:
e8:cd:9a:b9:63:9e:c9:86:62:e6:8c:08:6c:23:64:49:d7:f7:
52:ce:eb:8d:d9:ec:91:dc:60:36:90:8d:30:bc:5b:0e:74:82:
3f:8a:a1:f6:00:e8:3c:08:14:73:de:7f:b3:91:57:0f:fc:a3:
7c:13:26:d8:c3:c6:68:b1:92:86:c1:75:b9:8d:53:85:bf:a3:
bb:ff:7a:d9:e6:16:43:5d:ba:90:8e:00:84:fd:29:20:34:f1:
82:bd:28:6c:aa:70:a2:29:92:54:d5:42:07:d1:ad:1c:d2:20:
5b:ee:48:1c:e1:3a:3d:35:05:b4:56:e7:7d:a7:56:1a:2e:80:
4a:34:9b:d6:71:25:a4:db:83:15:e3:74:b9:fd:7e:5f:37:83:
ec:90:7b:3b:58:bc:1e:f9:17:ea:fd:31:42:23:c8:37:44:79:
d1:71:25:f6:9b:43:f5:81:b8:21:1d:2c:14:ff:5a:08:42:f1:
4f:c9:f5:bb:1d:b3:6e:4b:76:43:c2:2e:77:f9:a0:79:bd:90:
01:fe:21:70:d8:06:77:7c:45:5a:cb:d2:c3:6d:fd:1e:e2:cd:
21:1b:e0:6c:43:da:0a:c6:3d:93:8c:91:f7:e3:9a:e5:55:17:
a0:6d:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:31 2025 by rpki-client