Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: hBi/3gcRwpAJu7P37jBOtK/ECKeO1R1BFGQgIBY8gCE=
Subject key identifier: 0E:CF:34:B1:E7:37:85:F1:BA:08:C1:DD:F5:E7:2F:D1:77:AE:33:FF
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 019A7225AD1E949578BB5306EE865E49ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: F6
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: x+NIqighSLWNwNs3zkIvKkSaLNfxM+tdxQYXICOFLKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ad:1e:94:95:78:bb:53:06:ee:86:5e:49:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=0ecf34b1e73785f1ba08c1ddf5e72fd177ae33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:2e:c9:30:51:3c:4f:c6:63:96:fb:89:ac:
de:03:e1:b8:33:f1:a5:37:7d:35:bd:9f:83:01:a8:
5d:9c:71:04:e3:ab:65:2c:1d:5d:fe:76:10:61:99:
8d:8c:0b:1a:de:39:c6:6d:66:06:63:8c:0e:fa:09:
52:e8:af:92:cc:af:3c:bf:dc:ff:1c:70:75:36:8a:
29:19:ce:d2:84:0f:4d:26:6b:24:e2:c9:e5:74:9f:
91:db:15:29:01:8a:cf:1a:5d:df:a9:b7:c6:0a:df:
3b:82:1a:f8:cb:95:f4:96:0c:c9:91:57:01:b0:fb:
6e:80:80:e1:bc:30:00:9b:a1:4a:00:c9:16:4c:c5:
79:73:1c:44:a8:19:d3:b0:f3:c7:fb:a9:d5:eb:7e:
6e:c4:b9:f3:14:33:5b:0e:cc:d4:b1:70:11:cd:58:
76:72:60:28:29:f9:39:16:20:12:be:71:dc:22:c7:
db:e3:c9:d6:67:bb:10:1a:f2:b5:74:4b:55:ab:9c:
ae:96:b1:03:36:97:16:ee:d1:81:a6:d2:8f:de:fa:
64:fc:76:72:96:b2:5f:48:49:bd:7f:cb:34:4d:b8:
e5:1d:4e:20:32:40:96:fc:ec:9d:72:af:0f:80:68:
b8:bf:df:98:07:6a:02:fe:d4:87:b1:d1:d4:27:c1:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CF:34:B1:E7:37:85:F1:BA:08:C1:DD:F5:E7:2F:D1:77:AE:33:FF
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:9a:cb:58:0e:6d:b9:dd:be:48:fe:2b:b2:0b:7c:7c:74:
fd:18:40:e1:47:90:83:16:5d:73:6c:33:a2:c4:72:10:31:5d:
9b:72:13:00:d7:ab:e9:52:54:7e:8c:17:99:01:de:39:94:41:
6c:01:fe:23:12:04:13:dd:ad:34:3a:38:fe:17:57:59:a6:11:
3c:f2:ff:2b:b6:6e:c4:bc:e3:0c:4b:d2:01:f1:a6:66:44:42:
b4:a5:1e:5e:3e:68:c0:d9:cc:31:b5:1e:3f:48:ff:a1:be:14:
3b:cb:8d:18:e6:5b:89:8d:97:fe:7f:11:5f:a9:5d:2f:a3:f5:
40:d0:7e:5d:1b:7e:67:91:ec:71:64:f5:58:34:60:c6:8a:79:
9b:ea:80:66:52:19:46:0e:1f:72:2b:c7:db:f5:03:3e:0a:31:
61:fd:7e:22:e9:0e:46:cb:93:88:76:c1:2e:56:fc:2d:eb:c1:
5d:2d:e4:70:13:17:6f:d2:13:ab:cd:e9:c4:1c:7c:1b:18:b1:
00:4b:8f:bd:c3:99:40:bf:0e:9e:0c:81:46:cc:a9:cb:42:c2:
68:1d:b1:c3:81:27:77:94:b3:f5:b4:65:04:aa:fb:d8:3b:01:
e6:8d:d6:97:8d:91:ba:e8:be:eb:12:cf:62:fd:2f:fd:89:6e:
48:4d:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:53 2025 by rpki-client