Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: F4NRhpMFd7XXyKmGl6Hl8ZkzIY4kFsipbCw9+KcrvrQ=
Subject key identifier: 57:C2:64:EB:E0:4A:3F:C9:3B:4F:08:B3:AF:4D:33:7E:9D:C8:B8:E2
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 019A71B9527925131176449DC2183882AA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 0746
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 0sTl47KiyiL2sAFNjLemJe8NR2+NlS6EA/fINRek02s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:52:79:25:13:11:76:44:9d:c2:18:38:82:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=57c264ebe04a3fc93b4f08b3af4d337e9dc8b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:88:9d:6d:56:d3:eb:1a:e0:10:86:a7:f1:
55:93:b9:36:8d:b3:84:e7:e4:d4:ee:2e:2e:c5:43:
80:01:b5:cc:3e:ea:1f:55:d6:4a:a6:d3:06:11:b5:
fe:53:23:90:37:07:76:6b:5f:17:54:cc:ab:83:02:
12:65:f2:22:6e:6d:f2:dd:30:4c:90:64:02:0c:ed:
15:06:98:50:3f:f7:45:aa:22:54:9e:9f:1d:0d:ca:
1d:e0:eb:f3:9a:47:ed:2a:4a:e4:27:75:89:25:83:
70:c0:46:1e:e4:83:db:2f:7b:3b:c2:9d:23:18:01:
6b:03:b1:5b:c6:ee:48:7d:f4:a6:87:c5:c1:b9:23:
44:6e:77:8a:7a:45:5e:60:b2:87:e6:6a:93:28:d7:
dc:75:94:3c:e7:1d:27:6e:3c:81:6f:34:2e:57:5d:
fb:56:3a:94:b7:a0:0b:d0:cd:7d:48:c9:d5:59:99:
0a:7c:f0:f4:c8:e4:79:40:0f:4e:eb:a0:e2:40:e5:
d3:90:65:36:57:6c:97:37:99:6c:37:46:82:5d:da:
ed:5c:db:fe:67:8b:48:04:7b:23:86:22:a2:f3:a2:
d4:9f:32:be:8d:8d:ca:86:b1:74:a9:8a:35:fa:22:
02:6d:f1:a3:8c:d3:ff:c4:b6:69:a1:d2:02:f7:5b:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:64:EB:E0:4A:3F:C9:3B:4F:08:B3:AF:4D:33:7E:9D:C8:B8:E2
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cd:88:f9:d6:c6:75:eb:1c:3a:3c:bf:10:17:9e:e9:bf:52:
81:bb:27:63:ca:f3:2f:72:43:ff:53:27:a1:96:3d:f4:85:88:
d0:17:6d:e5:b7:92:45:2c:82:66:95:59:f4:ba:a1:bf:97:2b:
dd:f3:fc:b0:f6:4b:de:64:50:26:6c:d5:8c:e3:64:30:60:46:
8d:35:57:a1:0f:2f:ae:12:66:ec:bd:eb:48:8e:7d:17:1e:c0:
d3:47:2d:ee:ab:fb:bd:47:16:e5:70:7f:5e:26:0f:f9:62:a2:
fe:90:fd:37:ff:04:89:e6:85:1b:2b:c2:88:90:55:e7:dd:3c:
e1:ae:df:c0:d8:d1:67:cf:57:f3:0c:12:3f:77:cd:16:ae:d8:
0e:f0:47:ea:81:f1:42:68:56:7c:52:aa:dc:db:af:73:c9:5c:
9d:d7:82:8c:75:39:ad:24:17:03:ea:88:c1:ec:d4:27:6e:45:
17:c0:a3:d7:41:81:a1:10:39:20:d1:7d:fa:ed:91:07:a8:1f:
34:d1:72:51:1a:10:8c:9b:90:b8:96:dc:8d:5d:a9:aa:a4:d4:
b0:bf:92:87:9f:af:81:3e:46:b0:00:05:b4:51:94:d2:3f:25:
4b:42:8c:8f:74:82:0d:7c:22:74:26:99:ee:90:f3:ae:60:ad:
34:51:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client