Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier: WLVnq75H4ksWWgAdiMG+ijlRlX+IvxXhcJ2+HKYiXOw=
Subject key identifier: 29:D8:2E:A5:87:C4:1B:C7:F0:86:BB:91:5D:C8:79:BB:E9:C3:F1:5C
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial: 019A71B8C5A877B117C40166DEB3EA85AAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: BnkXDk0MS1VZRzN+pRlPf+6+AqbqPckVkeHseNmkADg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c5:a8:77:b1:17:c4:01:66:de:b3:ea:85:aa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=29d82ea587c41bc7f086bb915dc879bbe9c3f15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:82:4a:18:cb:10:38:8e:ef:fd:fd:0a:fd:
dd:38:7a:3f:8e:88:b4:cc:3e:46:84:7d:41:21:5c:
de:5e:8a:a4:57:5a:40:02:3b:76:c7:8e:de:94:3e:
b7:08:2d:42:10:1d:1a:00:37:68:9f:e2:f5:19:d1:
2b:46:1e:e6:a3:f0:6a:bb:f3:ec:b7:2a:41:8b:c4:
e3:e8:e2:27:70:8d:b6:74:d0:a0:75:05:16:af:c1:
85:42:c8:7d:c2:fa:65:44:b1:3e:54:5e:14:d1:28:
d9:66:e5:3f:9d:68:e5:9d:80:0f:74:e1:6e:fb:2d:
13:24:7f:ce:83:36:22:7f:9c:b9:4b:08:5a:bd:2c:
15:3d:8d:c7:97:a4:1c:57:0a:09:89:c3:66:13:0a:
8f:29:3b:d5:fc:32:c1:c2:de:1d:73:ef:2e:34:68:
a2:98:99:6f:66:d0:7f:2e:74:e6:a3:cf:00:64:c2:
9d:b7:a4:1f:46:ea:0a:89:97:72:09:cb:52:fb:40:
69:70:1c:7f:74:41:45:ee:e6:c6:fa:c6:25:34:94:
40:84:17:69:99:24:b0:5a:95:25:56:1c:9c:07:87:
69:d1:9b:97:e0:06:e6:88:d4:7e:40:5b:cf:8b:45:
29:85:24:4e:81:bb:23:ad:c8:52:8d:ce:f5:2a:a8:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:2E:A5:87:C4:1B:C7:F0:86:BB:91:5D:C8:79:BB:E9:C3:F1:5C
X509v3 Authority Key Identifier:
keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:ba:1a:3f:bf:b2:d0:44:91:1d:0e:34:ed:11:66:f0:26:
e1:90:4d:64:de:04:e7:3b:2e:8a:e6:aa:bb:2a:89:b8:95:b9:
ac:4e:5f:75:7f:ef:d0:72:31:04:9b:38:a3:b3:96:ff:84:5a:
f2:fb:44:be:e3:d6:8f:18:68:73:13:d1:5e:3f:48:40:f6:15:
6b:56:ee:1b:cb:8b:71:d8:23:40:85:03:8d:f8:88:94:76:fa:
10:94:bd:d3:35:ff:3b:5f:70:6e:6a:7d:d0:53:8b:b9:5a:a1:
40:95:e5:d1:07:33:96:52:ff:1b:57:92:7e:a4:5c:b5:97:73:
a5:6d:2c:14:af:cd:26:51:1a:9b:8c:f1:25:e6:1c:0e:de:61:
74:36:13:43:c8:4b:a2:98:89:61:5f:a5:52:30:b7:da:98:2b:
64:ab:a2:54:42:66:1c:63:ae:7b:fc:c8:83:41:71:89:1d:72:
01:c3:d7:6d:c0:8f:d8:df:55:cd:65:56:7d:55:33:44:dd:c0:
f3:4d:bf:8d:ae:3a:df:0a:dc:cd:63:85:84:45:b4:00:5e:0b:
2b:dc:79:da:08:f0:ab:18:b9:c1:95:17:fd:9a:1a:5a:23:d1:
9c:c2:c1:f0:e0:3e:8f:0f:57:8a:3b:17:6b:ef:2b:41:62:38:
d6:f7:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:18 2025 by rpki-client