Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: GdlghkZhtN5OjyTpwGZn+r7bJtekpnYn2T70PNjsge4=
Subject key identifier: E1:EA:47:4D:3F:C3:01:6B:86:F7:0C:38:F2:41:5E:9E:37:83:2A:B9
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 019A706E3A4225111C233BE5DB72764557CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0A89
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: QmStWTct4JMEAMl+YTog8wUe+ctfa8x+KmWI8P3oOK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3a:42:25:11:1c:23:3b:e5:db:72:76:45:57:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=e1ea474d3fc3016b86f70c38f2415e9e37832ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:79:38:7d:7a:91:bd:8e:47:62:0f:55:e2:
62:37:c4:de:75:41:f4:e6:31:4d:db:c4:7d:5a:a5:
1f:4d:3b:4d:ee:0c:7d:9a:1c:5b:79:5d:41:4a:81:
3a:ef:13:67:5b:60:b5:97:cb:1b:60:2b:e0:62:0f:
0b:7a:72:53:59:f2:b7:0f:cc:fe:a1:29:a9:dd:87:
76:85:3f:1a:36:68:55:f2:09:d3:fc:07:b1:37:46:
34:1a:64:23:f0:1e:37:67:fb:ab:af:5c:a7:db:3a:
ab:38:b5:69:36:ac:28:2d:23:59:f9:4b:87:6f:a5:
50:9f:06:6d:22:4e:6d:32:4f:13:a6:6f:42:9e:3d:
c6:ba:55:30:64:bb:a5:f0:62:9d:06:ca:8d:0b:20:
88:33:40:39:fc:38:f8:16:20:9c:75:65:e7:77:73:
4b:f9:9a:34:f0:ed:e0:27:c6:da:1e:a4:d0:db:b7:
32:cc:b1:bd:ea:59:7b:bc:98:7a:3c:f4:c1:ef:ba:
65:10:05:ed:50:cd:54:dc:90:67:04:3d:7f:51:a7:
2d:8c:8e:22:b1:5d:be:5f:f4:7c:ad:02:98:c0:c4:
f2:4c:ca:12:f2:c6:55:cb:40:fe:ed:f6:88:96:52:
4e:4c:0e:d7:15:df:dc:0a:5e:3b:9d:45:72:9e:2d:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:47:4D:3F:C3:01:6B:86:F7:0C:38:F2:41:5E:9E:37:83:2A:B9
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cc:fb:a7:60:ec:85:f3:4d:59:0e:3a:e2:91:ed:22:af:9b:
b8:5a:9e:f3:c2:8c:ce:a2:b6:3e:05:3e:20:be:f0:fc:2f:ea:
d8:3d:64:bd:15:74:5b:a9:59:78:1a:19:75:c2:12:0f:7f:ac:
43:5b:b3:f9:42:80:cd:d0:d1:1d:b3:77:cf:52:a3:f8:91:bb:
08:25:30:f6:31:06:19:d7:9b:91:e7:48:08:d0:7e:2b:49:10:
bd:4b:5a:4f:29:03:91:63:9d:4a:f5:27:af:06:3d:98:0c:55:
58:1a:50:7f:02:5a:fb:a8:dc:49:54:6c:9a:7e:75:3a:f1:3c:
0b:eb:5d:7d:28:c7:60:68:ff:08:f9:4f:67:fc:4d:6c:45:ce:
fc:59:7f:75:02:f3:ea:a8:1f:e8:47:69:be:af:47:0e:f8:c8:
c4:d5:a8:df:25:a3:4b:44:ac:3f:61:12:81:8e:99:ec:de:24:
8c:a9:10:82:50:4c:65:f6:54:64:38:2d:2f:7f:33:81:46:5f:
ea:a2:f6:29:0a:77:49:d8:c5:a0:4e:bf:19:1b:f5:71:98:c1:
07:c5:5a:f0:2d:98:5d:51:90:8a:fe:80:56:71:da:90:8d:98:
a2:81:1d:43:c3:2c:6c:a8:b9:ac:43:17:3a:95:15:7f:8b:80:
64:5d:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:49 2025 by rpki-client