Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: GpmTr3LfX+G82rW0JSaQLiNvfaWjwRq63y//UgBjaiw=
Subject key identifier: 56:1C:8A:C9:C9:3B:36:42:C6:9F:49:83:8F:AA:02:D3:74:84:88:91
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019A725CC828E3AC23AD2B4D6BBF8F9CAEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0606
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: 96UA8WMS+nDtC8S3IzDHegyZOLdHLpWqoLF9cCKDTp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c8:28:e3:ac:23:ad:2b:4d:6b:bf:8f:9c:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=561c8ac9c93b3642c69f49838faa02d374848891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:07:24:5c:60:64:67:32:f1:1e:11:34:dc:
24:b5:04:ea:0e:29:81:d4:c5:63:dc:a8:18:43:71:
fa:dd:ab:f1:aa:d0:96:f8:65:54:34:32:e4:d9:48:
a5:30:0f:ca:30:de:44:e1:07:16:25:ce:1c:90:10:
b4:c4:0f:96:61:d2:18:2b:78:46:83:70:34:18:1a:
ed:ff:a1:51:54:4a:79:fb:11:4c:f8:b3:cc:2e:e7:
2b:05:82:cd:07:40:6e:c4:2d:0c:95:0d:ad:da:1d:
07:8f:67:b3:96:fe:d2:f1:03:0d:8a:69:e0:a9:15:
b2:63:d7:d5:b6:3f:99:56:70:99:5a:d7:4c:78:64:
1d:a8:23:cf:1c:cb:f5:bc:af:47:ba:51:a9:2c:e2:
d1:ad:65:b2:dc:e9:af:5b:c7:bf:ea:cf:76:fe:c4:
ae:1e:98:ec:aa:96:75:39:43:e6:fa:c0:5a:0f:f5:
d2:25:e4:72:fe:f7:97:1e:cd:48:f5:5c:49:94:e8:
97:19:b8:07:39:dd:0c:b2:1b:66:b0:9b:9b:eb:25:
2f:76:11:56:07:1c:df:44:17:56:73:a0:a8:83:a3:
78:c9:a7:60:69:e3:ad:50:a8:06:39:8e:f0:fe:7b:
ac:60:fc:04:8b:bc:ef:3b:7a:46:86:ae:0b:d4:d0:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:8A:C9:C9:3B:36:42:C6:9F:49:83:8F:AA:02:D3:74:84:88:91
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c9:5a:11:0f:e5:6d:6f:52:71:c8:a7:88:a5:77:47:aa:87:
f9:44:75:11:b3:24:e1:56:a2:0b:0c:66:a5:7f:4d:99:bf:ab:
8c:9d:95:d7:36:bf:38:7c:7c:1b:06:ad:57:5a:71:c9:3b:9d:
14:e8:1c:06:54:77:af:06:2a:44:09:b0:09:8e:9a:31:0f:25:
86:29:59:bc:24:00:41:df:4e:99:8f:5f:f0:53:bf:40:8e:26:
ba:41:59:ab:48:7b:69:bc:60:8a:49:db:c0:50:e0:6f:2b:32:
45:36:4f:07:48:ec:3f:01:07:3c:d8:a7:6d:2a:da:12:72:1f:
f0:db:7d:29:f5:a9:72:84:db:09:69:1b:6e:77:26:04:61:a3:
3b:b4:b9:4d:0f:e4:e9:f2:7b:56:ff:2b:b4:04:78:45:c7:9c:
f8:ae:76:50:2b:aa:a7:25:e0:11:c4:cf:cf:bd:15:8d:05:b7:
41:9f:3a:0f:d2:6b:3d:40:77:5f:9f:83:a6:be:55:d5:34:14:
8f:a7:f0:8d:c3:d5:92:09:5b:01:10:66:fa:77:2a:64:5e:c1:
2c:d4:f7:e6:41:b5:ff:ff:b1:5c:b0:ed:ab:45:1d:5e:2f:b5:
af:0f:36:b6:f3:db:e5:65:b7:12:19:52:c6:f5:25:3c:99:78:
4e:e7:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:03 2025 by rpki-client