Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: 7QkO6rHy6PFZBrP6zl7dmEjtXo3Av1jthupEWPjh8fQ=
Subject key identifier: 39:06:78:EF:4A:50:FE:A1:E1:E5:94:03:BA:A7:AD:D4:B5:54:98:20
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 019A706DF5949BC837D2DB6B4DDEE679BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 15D1
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: a/qRkQlLpXKJ9nY1Ns1GcHSfYkfaMVH1wUUm7jiR4SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f5:94:9b:c8:37:d2:db:6b:4d:de:e6:79:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=390678ef4a50fea1e1e59403baa7add4b5549820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:b0:2f:67:ec:d5:37:63:c8:1d:35:9f:7d:
99:45:51:52:88:f8:8a:ae:b4:49:8d:d1:0a:29:d8:
86:b2:79:7f:21:f4:3f:a7:42:74:2a:92:74:60:32:
2e:35:77:72:e0:87:8d:95:1a:a8:d2:86:2a:f7:27:
a5:ba:a1:b0:3f:27:7c:23:0b:b5:11:af:9e:f1:02:
8c:b0:ff:d2:5f:da:78:e6:6e:c7:dc:65:6e:60:e8:
15:e4:69:e9:3d:de:9e:b7:10:a2:14:cd:bf:cd:df:
e0:34:7a:4b:ce:f2:2f:2c:1f:f3:8d:e3:a0:e8:03:
c1:ca:ef:ec:f0:31:88:9f:eb:cb:47:41:bd:a6:8b:
eb:13:a4:47:d6:e2:35:63:8f:9c:ec:1e:f4:14:86:
80:f0:b0:b6:87:e8:c1:5e:aa:11:f9:6f:ab:d4:59:
4d:ae:50:0e:68:85:d8:8f:81:5a:18:5d:f3:02:e7:
2d:86:1f:81:1c:cb:5e:a0:4a:f9:6d:29:77:eb:50:
d5:46:93:03:d5:9f:41:d1:ca:0d:43:57:7e:7b:4e:
0e:42:ce:84:78:ce:35:17:d5:e3:37:31:5d:e8:2e:
2a:e3:bf:4d:54:c7:f8:44:26:3e:1e:81:fb:17:0a:
da:9a:c7:e6:91:10:82:1b:8b:d1:7d:9e:b5:49:89:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:78:EF:4A:50:FE:A1:E1:E5:94:03:BA:A7:AD:D4:B5:54:98:20
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:96:10:26:52:5c:cb:d9:f3:fa:4e:af:6f:74:5c:93:47:
17:01:c1:48:2a:b6:22:63:0a:a0:a0:d9:74:fb:55:1f:f0:72:
89:fc:7c:13:94:8e:8b:d8:bb:f8:40:0e:a3:be:00:a0:71:89:
88:bf:8b:4a:24:a7:ec:38:71:4d:00:d7:c8:76:51:af:7c:fe:
ce:ec:4e:0e:2e:78:75:a8:2e:6f:6f:3a:2a:03:b9:04:22:d7:
53:49:30:f1:3a:4b:82:b6:81:cd:7e:1e:c3:fe:78:5c:c2:b1:
0a:95:88:d3:b4:5f:8c:a3:e0:d0:16:72:02:12:56:dd:30:40:
d4:f4:8a:3a:65:a8:95:e6:80:de:f6:36:e0:c0:0f:09:1c:c1:
a3:15:6e:81:48:86:52:b6:65:07:1e:e4:11:bc:2a:34:c3:09:
c3:d1:12:99:ed:99:b6:32:c3:26:ab:80:e2:c5:53:23:91:7a:
c4:72:92:90:c1:13:b4:cd:af:b5:30:57:d6:c4:6e:5d:cf:8e:
90:07:52:08:df:03:a0:f6:55:23:d6:a3:f0:3a:1f:b0:67:09:
17:66:4d:33:56:70:af:1d:ba:6d:7e:89:12:12:17:88:c8:f1:
74:2d:0a:88:59:bc:f2:7c:45:ba:16:e7:6b:85:70:8b:21:68:
fa:2e:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client