Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: 7nrdxRTFjZEq3tB3TgR4gCSW4w6HXe1jNg4y2GeUsQo=
Subject key identifier: 38:F5:23:12:29:54:E2:C7:51:70:06:8D:D9:8B:B6:76:3A:C2:0E:CF
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 019A711368708B0B7AF983DAFC2D6B4FFE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 1428
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: z1OjBIalZhtfKD2gzN0dKLosA2p43rD9hGLwPRr5XW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:68:70:8b:0b:7a:f9:83:da:fc:2d:6b:4f:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=38f523122954e2c75170068dd98bb6763ac20ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:b6:a8:0c:ba:47:c3:38:aa:0e:f4:c2:aa:
ab:c0:27:35:7c:b3:92:76:1b:06:74:4b:28:e6:66:
fa:ef:45:c5:7c:6e:9b:00:68:7e:a2:15:1f:c5:e8:
c4:5a:f8:7e:e7:19:26:f7:31:56:38:90:73:03:d7:
c4:b9:c0:5b:97:bf:c5:37:61:9f:12:6d:93:9d:e5:
1a:86:ad:67:f0:6f:2b:c2:e7:36:83:6b:51:e8:71:
15:c0:d1:f5:f9:17:d4:bc:cb:2c:87:f9:e0:ff:4a:
d8:b1:7b:d0:8b:92:71:e4:1d:a6:f3:21:2e:58:c3:
58:0d:1e:ce:9c:37:c8:f7:1b:25:7c:66:cb:87:00:
77:31:11:5e:1d:4a:86:80:25:3e:ca:ee:c6:c2:75:
9c:6e:9f:3b:e8:98:f5:f9:87:a3:2d:30:1c:f3:55:
52:c1:5b:c2:9a:35:e7:9a:ce:a0:d2:58:87:8b:c8:
39:5f:27:aa:2e:ed:02:a6:e4:a3:89:2f:e9:20:b6:
fe:a7:2c:6b:cd:5d:e5:8c:73:cf:de:bb:d8:39:fd:
a5:d0:a3:89:59:b2:ce:97:dc:e3:69:63:b1:8e:94:
ea:27:ce:c0:07:ad:e1:3b:2b:1b:d6:70:6d:56:f8:
3b:81:c7:bc:11:c3:f2:7d:b6:5b:13:fe:b0:aa:11:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:23:12:29:54:E2:C7:51:70:06:8D:D9:8B:B6:76:3A:C2:0E:CF
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:3b:99:4e:84:26:91:c0:64:91:bc:b6:fc:be:08:26:bd:
c4:35:6b:17:a8:a2:42:4a:b1:e6:36:5c:78:fa:4d:37:15:7a:
fd:67:e8:3a:5f:0c:b4:2a:e6:ca:24:3f:3f:ef:7c:00:79:80:
ee:aa:1d:82:48:86:dc:31:5f:be:6b:45:1f:7a:35:f3:ad:74:
65:26:eb:a6:da:31:4e:cc:ef:65:f4:e5:24:06:f6:0a:7d:32:
8c:14:14:60:5b:71:00:c9:16:5d:fe:6f:a2:46:d4:4d:a2:71:
4e:c0:fd:fc:51:b3:a9:a4:52:29:38:4f:90:eb:0a:18:ea:24:
c3:45:71:da:e9:25:4d:27:cc:8c:08:d4:19:9f:e3:05:5a:e6:
c4:18:69:2c:b2:24:76:2b:82:fa:f7:c1:e0:b8:98:02:e6:48:
3c:16:5c:12:25:25:58:95:81:b7:a6:d9:9d:8a:60:de:9f:3b:
5c:7b:d5:c2:0f:6e:b6:f1:09:c9:7a:68:a6:b6:ce:10:ca:1a:
9a:ca:99:0d:04:b0:7d:a2:69:98:8a:3f:8f:79:ed:9f:b1:b4:
9e:af:f4:b8:75:26:d4:c0:c9:5e:0e:b8:a7:f3:02:08:66:7c:
24:a4:71:2d:54:fa:bb:2e:17:bb:fe:9b:68:e7:c2:62:b5:43:
b6:2d:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:27 2025 by rpki-client