Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
File: t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft (raw, json)
Hash identifier: sBIxhIpUCwaTJ5ylbqw8NaHngbvaqj42iucM9Bejjvs=
Subject key identifier: 68:D8:C5:7A:34:F5:9B:30:31:3F:7D:EB:47:08:EF:4E:B5:8E:A2:6F
Authority key identifier: B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78
Certificate issuer: /CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
Certificate serial: 019A706E04E97469EF22A585DF0A8FE9BE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
Manifest number: 12
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl (hash: a+Qa4vUrJg9NyIbQzjgm7X5U9BoIni4r4BdXDIJkjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:04:e9:74:69:ef:22:a5:85:df:0a:8f:e9:be:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=68d8c57a34f59b30313f7deb4708ef4eb58ea26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:0a:fc:57:4f:ad:56:9e:f9:34:44:ff:ab:
60:47:d6:51:7c:29:b3:ef:d3:ec:de:5c:14:c3:ff:
ff:1e:a0:5d:34:67:d8:2a:ef:c1:58:50:ad:95:f0:
ea:42:68:35:da:23:cb:fc:af:ec:33:3b:b2:56:c1:
4a:c5:a4:00:8b:a6:e8:d1:18:f4:79:b8:a3:16:57:
16:94:72:53:89:8c:3c:f6:3d:da:87:a4:f0:13:7d:
7c:c0:4c:cd:17:c4:5b:0a:a2:88:7f:a0:22:29:97:
90:c6:8c:8b:df:cd:7f:aa:9c:f6:0c:96:ef:fc:df:
20:e8:6f:26:e7:ee:47:b5:50:ef:66:c1:61:8e:ce:
26:b7:c3:26:36:80:4c:02:44:96:e2:41:1e:5e:9d:
0d:14:ba:c9:90:7f:b0:50:86:df:db:e2:eb:23:9c:
9c:05:8f:d7:ec:a8:c8:2c:b8:ce:d0:36:b7:1a:4e:
93:89:16:a6:e7:29:40:bd:a8:1d:80:cc:d6:74:a3:
64:69:65:5d:8f:53:3e:09:fd:32:ac:8b:01:f4:dd:
0e:e2:4b:e8:2e:a3:7d:ed:05:34:1e:de:03:c7:0d:
11:d8:ef:bd:45:bd:cc:aa:ef:56:a5:43:be:fe:72:
37:d2:0a:1a:2a:64:a6:f8:c3:4f:5d:1c:6a:60:99:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:C5:7A:34:F5:9B:30:31:3F:7D:EB:47:08:EF:4E:B5:8E:A2:6F
X509v3 Authority Key Identifier:
keyid:B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:f3:11:d7:9e:da:4c:47:f3:6e:9b:c4:5b:87:a2:75:b7:
3d:62:4f:c6:41:bc:ed:00:e4:45:d3:16:eb:c2:ff:03:1b:83:
5e:ce:63:08:72:b9:77:dc:aa:fe:1a:1a:ac:13:cf:c1:23:25:
34:d2:b5:5f:0c:b3:cf:08:63:de:ce:52:79:43:da:c0:fb:3f:
7b:13:74:ed:f9:ba:56:a2:01:75:ad:09:3c:88:a2:55:c1:77:
32:c9:67:d0:51:91:94:15:59:65:40:74:1f:06:1c:3e:59:b3:
c1:f7:16:0b:8d:ab:2b:3f:98:11:a6:77:45:cc:0e:78:e9:8e:
a3:25:39:d5:b4:2d:34:2d:3b:45:93:25:91:69:b5:5d:d5:28:
fa:ff:4d:b6:d0:fd:21:86:31:be:bd:7c:94:cf:04:22:f1:0a:
3c:fd:68:20:cf:eb:81:b9:04:15:68:70:5f:f0:12:f1:09:88:
ac:67:59:d3:bb:9f:32:36:38:98:59:b7:97:fc:d5:6a:7e:21:
92:29:98:a5:96:7f:62:f2:2f:b6:5e:cc:93:0d:ce:62:cc:7b:
a6:f8:56:6e:9a:7e:7c:9e:c2:54:cd:36:66:8f:8b:d6:77:da:
ad:da:fa:1a:fe:95:ec:73:f7:ef:1d:44:1e:f3:5d:ae:b4:c1:
12:53:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:52 2025 by rpki-client