Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier: CRdW245xyNfKyrGdR1t81n8QdK/VnGH/egD4Ac1EwFk=
Subject key identifier: 23:6D:5F:FA:E8:C2:15:3F:A6:C3:80:99:C8:6D:D1:F5:C2:33:64:D9
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial: 019A7225D5476419F41BCAD42FDF60CABE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number: 020B
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: kMFb6+Xqzo8fAjNQY15kD3Rs87MMugWx3c5eiM3f8Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d5:47:64:19:f4:1b:ca:d4:2f:df:60:ca:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=236d5ffae8c2153fa6c38099c86dd1f5c23364d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:48:05:f4:df:3f:fc:c1:05:db:41:a9:47:
7e:4c:5a:da:32:0f:43:d1:16:dc:9f:7a:05:44:65:
df:51:b0:f2:41:9b:c9:43:d9:df:e5:20:00:c0:99:
a6:8d:de:84:71:c3:18:ff:1d:ca:25:09:b3:f4:55:
49:16:b3:76:67:49:d3:f2:e5:ce:1d:73:8b:c2:e1:
2e:8f:0c:f8:7d:00:09:87:3b:90:70:c6:25:89:1f:
86:de:ae:43:0f:2e:ba:19:fb:53:76:b4:80:97:25:
3e:f6:c1:95:2d:93:29:4d:db:89:73:3b:8f:c9:f4:
57:21:c2:cb:71:c3:06:19:60:e8:80:07:a9:d6:24:
a5:ed:ef:24:cf:04:ce:b8:72:b6:da:94:87:1e:af:
62:8b:f2:35:a5:b1:f9:9d:e3:2a:01:f3:88:98:8d:
ab:19:32:4d:09:21:dc:35:bb:ea:f6:d5:de:81:68:
02:55:06:03:73:6d:78:22:15:08:b5:a0:2e:3c:17:
f6:21:17:43:53:a0:30:b5:36:a3:5d:16:58:c6:d1:
f8:e4:5c:34:b3:4e:27:05:2a:4d:bc:1c:47:1f:9b:
2c:52:91:cb:60:4b:9a:4a:6b:c3:fd:c5:cd:82:ff:
14:96:4a:96:27:0c:19:6c:7e:b6:d7:e0:a9:9f:a6:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6D:5F:FA:E8:C2:15:3F:A6:C3:80:99:C8:6D:D1:F5:C2:33:64:D9
X509v3 Authority Key Identifier:
keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:73:41:38:56:de:69:f1:1d:16:c3:11:01:e0:e7:34:a3:f6:
b0:71:45:26:fe:89:88:49:2e:43:f6:27:0c:7e:3f:66:e4:7e:
88:9c:44:53:f3:69:e5:80:fd:62:ef:8d:c6:4c:92:ed:dc:db:
fb:07:b0:d8:f1:d0:25:03:d8:40:46:8c:43:19:7c:fe:ff:3a:
f5:d3:9b:a7:d2:d6:e9:1e:fc:94:66:09:77:9d:4b:42:ca:26:
1f:94:bb:84:b3:41:2f:de:fe:4b:f6:c4:34:c5:65:e0:dc:2a:
34:22:1a:e3:ce:57:7b:93:ec:34:67:39:2a:f7:e1:b6:22:92:
d7:bb:77:a4:4d:b5:e6:02:71:aa:09:9f:84:b4:59:07:83:91:
34:e7:ad:3d:ec:57:0c:1d:19:70:09:e9:48:aa:b9:3b:19:0d:
bc:27:f5:53:b6:5d:f6:8d:82:fd:ae:b4:bb:57:66:b7:cf:56:
7c:a2:47:4c:c7:3c:49:bd:94:40:ca:7a:f1:b7:af:50:54:87:
73:d7:fb:98:52:3a:00:12:30:c9:1e:fe:12:1b:34:85:22:34:
05:c8:f1:07:ce:9a:cc:4c:93:d9:d3:0f:86:de:d9:3c:0e:88:
39:d3:e1:6e:09:9b:aa:48:14:7d:8e:e8:8f:cf:35:63:92:cd:
eb:7b:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:29:52 2025 by rpki-client