
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: pCxo+qVuhdKqHAZiFVVyrHug/GTB16rST3HWH/f+3DQ=
Subject key identifier: A2:5B:16:C9:8D:B1:1A:6D:18:8F:84:89:CF:13:D9:5D:B8:01:35:6B
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 0199225523E109C661D33ED5407469A5CF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 04:00:28 +0000
Manifest this update: Sun 07 Sep 2025 04:00:28 +0000
Manifest next update: Mon 08 Sep 2025 04:00:28 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: tlKne1yWto8OoSCPf34i06AMpLWdwXfCE3PQrCpHxSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:23:e1:09:c6:61:d3:3e:d5:40:74:69:a5:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Sep 7 04:00:28 2025 GMT
Not After : Sep 8 04:00:28 2025 GMT
Subject: CN=a25b16c98db11a6d188f8489cf13d95db801356b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:29:51:59:65:a8:2d:b7:0a:3e:d3:5c:05:
7d:9c:82:13:71:83:e8:0a:c8:68:bd:ad:95:ec:af:
2b:fd:74:95:41:4d:f5:f7:6b:82:5c:29:67:35:14:
d4:4c:87:73:84:cc:40:2d:78:ca:ab:5d:4f:89:d7:
21:84:2f:7a:de:1c:04:6e:b5:0b:a0:f5:64:97:52:
16:0f:aa:d9:ec:84:67:3b:5a:56:0f:49:76:4b:8f:
e3:7c:f2:74:27:6a:c7:b3:34:86:64:58:69:f4:a8:
13:bb:74:ec:29:63:35:7a:7f:f7:cf:9a:15:8f:b6:
e6:74:4e:26:5b:67:48:ec:8e:dd:58:b2:e5:b2:bc:
7b:8e:be:9d:6e:07:89:fa:2d:33:60:e6:80:11:91:
1f:79:a2:a1:87:c2:76:65:04:cc:4a:47:8d:fb:36:
6f:07:98:c9:f6:14:49:8a:e1:aa:cf:2b:c7:bc:42:
36:10:f6:c4:cb:89:68:08:05:54:d9:e6:50:06:ca:
56:92:06:9c:82:f6:58:40:a6:6e:a4:bd:fa:4f:81:
b7:b5:3e:c1:c6:e0:0b:7d:3f:1f:62:c8:1e:98:77:
3c:a5:4c:23:d0:98:d1:50:28:d1:b0:be:b8:ae:1a:
9a:29:3e:72:25:1b:bf:e6:66:68:ea:2d:c5:0c:bf:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:16:C9:8D:B1:1A:6D:18:8F:84:89:CF:13:D9:5D:B8:01:35:6B
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9c:c6:4d:16:fe:04:c8:2a:e5:3e:8d:68:48:f0:eb:c1:b6:
b0:ef:22:54:8b:b4:4e:b6:f8:9f:4d:12:15:61:ca:71:28:e7:
9b:9c:eb:12:66:af:df:26:b5:5f:f7:b8:8d:c8:45:ee:24:3d:
5c:97:58:8b:9e:e2:6f:7e:44:b0:e9:87:5f:0a:2b:7c:45:bf:
86:61:63:b7:c1:f4:fd:98:f9:a4:92:93:22:6b:ae:e6:35:de:
77:75:c3:c5:82:9f:6a:79:60:f6:5c:7e:08:24:fc:ac:ab:58:
a4:ec:b9:5e:eb:98:15:a2:d7:c7:30:6b:fc:7e:42:ac:c4:ef:
8a:59:59:2a:12:38:c8:a3:37:1a:47:d9:28:17:d2:7d:fb:67:
b7:b6:12:91:60:21:8e:03:f7:cf:54:e5:52:86:30:95:27:d1:
19:c9:8b:82:70:12:32:47:e3:e0:fc:bb:c1:16:3b:5a:2f:c6:
0e:8a:67:75:73:d4:c6:e7:01:63:20:37:cc:c0:96:21:88:53:
64:4a:f4:81:d6:4f:d4:c1:6d:52:b7:b2:7e:e6:28:20:0e:d6:
13:b9:bc:7c:45:3e:44:e8:98:cd:cc:e4:b6:08:d9:57:0d:00:
d6:6b:c7:0d:89:f5:e3:09:61:ba:56:36:17:03:36:6d:e4:6e:
38:49:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:10:30 2025 by rpki-client