Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier: c6N/ISYj3AbUZzRH2v6g3QS0P7Pizz4zTuNxnorMSiY=
Subject key identifier: CD:3E:3B:D9:00:1C:84:AB:06:6B:05:AB:B0:2A:05:1A:93:87:8E:7C
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial: 019A7225ECCF7CD3301172742A44A4E56774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number: B8
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: fSL0DLxeC5L01uqRFWxbcTw3PQRjyiAUQcsbLgBPXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:cf:7c:d3:30:11:72:74:2a:44:a4:e5:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=cd3e3bd9001c84ab066b05abb02a051a93878e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:ca:b2:05:26:06:64:40:f9:f4:84:9a:dc:
fb:c6:e7:32:94:07:be:b8:b6:75:c4:c5:db:c0:0d:
81:65:54:08:12:5e:cc:a1:cb:68:d3:b2:61:3a:74:
c0:4c:cb:de:60:df:cc:e9:43:29:00:b7:ed:fb:95:
8b:86:7a:fa:66:f1:d9:99:5d:3d:ab:f2:a5:6a:02:
83:f6:e3:e5:c1:36:71:46:00:a8:e6:87:ea:74:10:
25:f9:1f:b4:8c:6c:21:2d:09:9f:f2:db:ac:36:32:
06:1f:30:99:1d:c0:79:12:13:2a:3e:cb:bf:bf:c8:
4b:cd:a4:c3:20:e5:2f:67:21:a6:0e:c0:f5:d1:32:
fc:6a:e2:84:32:a9:f9:92:2a:e6:b3:87:b9:ec:9a:
9c:85:24:ba:ed:48:28:2b:36:8d:45:98:d4:13:0e:
87:1e:64:0f:cf:a0:fb:31:8e:96:62:87:8c:3d:e1:
71:a0:35:2a:fa:11:14:a5:00:79:e8:e1:ed:7f:91:
7c:0d:0b:5d:2d:55:2f:ea:c2:9c:04:55:cf:98:49:
44:82:b4:6f:c2:8f:db:de:90:db:5a:7c:65:2d:b4:
f7:66:79:a3:cd:5a:29:98:0d:bf:63:92:71:62:b4:
9f:5b:53:bd:0f:22:96:06:39:80:0a:03:b9:f3:de:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:3B:D9:00:1C:84:AB:06:6B:05:AB:B0:2A:05:1A:93:87:8E:7C
X509v3 Authority Key Identifier:
keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:68:37:97:81:51:0d:c4:22:0e:fa:22:3c:c3:a0:7d:f5:7f:
97:bd:cb:db:cb:9d:bf:d4:c0:4d:f8:69:12:ed:6e:4b:6d:75:
75:d0:68:d4:ed:00:17:e2:74:93:ad:11:6b:3d:e8:64:29:c3:
f8:0a:9f:4e:5a:81:84:dd:be:58:fd:ad:81:ee:9b:31:f4:a5:
5c:04:7a:db:17:f9:a7:35:3d:b4:26:63:41:5e:dd:c3:55:9b:
8a:6c:ca:cc:58:74:af:14:1e:e9:c5:e1:6f:a0:1d:29:df:ab:
7c:49:09:46:33:b8:46:aa:c7:98:fb:57:66:64:67:bb:8b:c1:
75:59:1c:56:e5:92:4c:9c:d6:c4:4c:5a:ae:3a:0c:b6:8a:b6:
fe:db:40:2a:4f:5b:12:65:f4:d5:0d:11:52:93:e1:e5:0b:8d:
34:d9:ce:bc:3f:19:5d:12:8e:ca:2c:9e:31:aa:a3:f9:da:95:
07:35:fa:7b:ed:4c:fb:90:1f:ee:0f:9f:1b:24:e2:2d:f6:18:
f9:a3:c8:f2:2f:0e:02:26:7d:68:1b:87:d2:98:ed:1f:3f:3b:
91:22:bd:58:f5:9a:a8:3c:21:71:66:f5:e3:1f:ac:1f:c9:c2:
0a:0d:f2:65:ff:eb:b1:53:53:10:38:4c:97:1c:0b:e6:e6:29:
db:ef:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:24 2025 by rpki-client