Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File: 6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier: ilZ3p10yx+e1CGW+hHLQKEuJWMpV9zrSTnilvkURK4s=
Subject key identifier: 8E:1D:2A:03:34:52:3B:B0:7A:75:D9:91:1C:77:B3:A8:B0:5D:1B:18
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer: /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial: 019A71808CC0F9693996BDA51AB2E3AB88AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number: 1334
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: jldmAitw+yfIwYbnzJOG5JWl5YsLsEtLqt3TleC0PM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8c:c0:f9:69:39:96:bd:a5:1a:b2:e3:ab:88:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=8e1d2a0334523bb07a75d9911c77b3a8b05d1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:10:93:33:0a:44:95:33:10:71:23:b7:61:
39:ca:62:49:a2:a2:9c:aa:c3:68:62:eb:e5:a8:ee:
14:9c:3e:b7:02:81:52:23:da:c9:20:9e:05:30:0b:
c4:04:64:0b:da:e2:cd:dc:8c:92:55:7c:2b:13:60:
44:9e:3a:48:55:93:2f:b4:bd:7d:ec:45:75:e8:10:
98:df:01:0c:c1:7f:65:6f:cf:ea:90:96:64:af:06:
0a:02:d8:f0:b0:28:8c:32:53:d1:02:fa:02:eb:de:
70:72:a5:84:82:4c:35:d0:7f:0c:13:aa:89:4d:e5:
af:3e:3c:43:17:22:88:e0:2e:e8:49:79:28:98:d8:
25:6f:58:6a:fd:c5:60:24:10:c2:80:55:2b:47:39:
7d:bb:3b:1f:1c:7d:70:12:d9:7f:a6:c1:69:c7:7e:
68:14:d2:13:bd:f3:8d:35:63:81:f6:ed:44:d6:af:
63:b1:da:4b:12:0b:fc:b5:0c:cc:d2:01:0d:b3:42:
ef:af:84:5f:47:94:fb:be:6d:b3:f3:a9:a0:00:e6:
a8:85:67:75:20:6b:84:6d:7c:a6:76:b2:14:83:18:
6c:a6:fb:47:ed:e0:30:d1:9f:8c:29:96:64:55:50:
87:f0:c9:73:d4:f6:ee:21:d8:3b:b2:bc:61:8a:f2:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:2A:03:34:52:3B:B0:7A:75:D9:91:1C:77:B3:A8:B0:5D:1B:18
X509v3 Authority Key Identifier:
keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:3a:79:8e:76:4d:dd:2c:6d:e0:52:5d:db:c8:50:a9:29:
55:a5:18:97:36:b6:03:12:37:d5:86:a5:a3:68:e0:9a:bc:b4:
55:ae:a8:ff:cb:a1:4d:49:a0:01:58:1e:50:66:79:36:15:9e:
42:80:3f:01:7f:39:bd:bf:b8:63:24:05:10:34:c2:23:58:86:
13:78:1d:ee:c4:a9:8d:eb:18:c2:e2:aa:15:22:3e:ed:53:4e:
2b:66:64:8b:d5:24:d4:73:95:03:e4:a7:09:b5:a8:d4:1c:4f:
5d:0a:0a:d9:e7:ab:53:3c:52:07:b1:ed:89:da:51:a5:91:98:
70:b5:03:f6:fe:7b:d5:ac:1e:ee:dc:5d:65:18:d1:d5:51:c7:
75:f0:4a:47:a2:04:c2:4e:ee:35:81:1b:48:1b:46:9b:c1:2e:
6d:93:52:2d:ca:ae:12:86:f8:19:96:04:7a:b3:1a:c9:03:41:
e8:bc:02:c0:c6:41:74:77:a4:98:fd:97:9c:9d:b1:19:b3:17:
2c:d9:8a:75:7d:cb:83:fd:a1:9b:4d:4c:01:40:28:dc:d6:cc:
22:40:d6:eb:c8:99:17:fb:53:ed:04:77:32:bb:45:a3:11:f8:
6b:a9:f2:7e:01:e5:d1:f5:64:7c:8d:e0:1f:d7:55:a0:9c:fa:
c2:a1:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:51 2025 by rpki-client