Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File: 6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier: xTwy3yQmdUObQBCkAZ7FCJVj8f9mzg+cbMw1Gh57ijA=
Subject key identifier: 8D:F6:B5:1A:55:DA:FE:92:D0:8E:83:0F:C0:5A:DE:1D:23:B4:4D:EF
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer: /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial: 019A71B830940114D355D896845C7BA12467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number: 0AC4
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: 0CgtJQIrHf4am7hlD5sUjQkrSPkeZOlmfpeEI6peoRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:30:94:01:14:d3:55:d8:96:84:5c:7b:a1:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=8df6b51a55dafe92d08e830fc05ade1d23b44def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:0a:f8:c8:b1:23:06:cb:df:32:c1:c1:2c:
5c:e6:de:01:80:14:11:cd:f0:8e:2c:04:44:e8:1a:
b4:40:d8:71:81:e7:9e:79:2a:79:b9:ec:dc:54:82:
a2:16:eb:7b:86:04:4b:72:f8:5f:66:04:d7:19:15:
c8:f7:96:d6:a1:ce:9d:80:e3:92:88:22:04:86:41:
e2:bd:3b:37:ea:07:69:2b:dd:44:7e:9f:50:58:af:
1c:46:3f:4a:30:53:96:92:6f:fa:9f:da:4f:26:10:
86:8e:72:9e:d3:f0:c8:2d:52:b9:7c:53:ce:69:c7:
ad:7d:9f:d8:dd:2a:66:29:35:cf:f1:41:78:92:63:
c0:41:c6:73:6e:e3:d2:73:fb:13:10:54:25:8d:87:
65:6e:d0:64:cd:e6:4a:ff:ce:c1:f6:bd:12:01:e7:
9a:1d:a1:9f:b1:11:80:84:ed:21:b9:5a:9a:a9:bf:
f7:b6:28:be:1b:57:6f:44:9e:1b:9c:0f:14:2e:7f:
be:ee:91:c3:7d:f1:90:cb:51:6f:29:f8:ee:17:94:
94:69:79:e5:0a:99:72:5d:93:b7:dd:01:97:d2:90:
99:55:83:00:7c:6b:44:de:a1:8e:8f:5a:22:65:f9:
13:c1:b3:54:b2:c8:d1:ac:5d:aa:ea:1e:ef:4f:e0:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:B5:1A:55:DA:FE:92:D0:8E:83:0F:C0:5A:DE:1D:23:B4:4D:EF
X509v3 Authority Key Identifier:
keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:9f:f0:34:dc:33:d0:88:01:be:39:80:86:21:07:fd:62:
e8:b5:ba:4d:8a:91:aa:49:6d:0b:91:47:18:aa:59:f9:2a:cf:
e1:e2:d3:bc:57:1e:ff:ca:a5:7b:d2:8f:d8:fb:30:ba:db:75:
dd:04:3b:62:ce:0e:ef:d1:7c:61:d7:83:a4:5e:7f:40:e8:16:
f4:e8:b8:48:53:e6:a2:fb:32:2d:91:8b:4e:1a:25:b0:58:7a:
a0:aa:cc:e1:9a:18:6c:b6:49:6a:0c:d1:79:1a:2b:5d:f8:58:
05:f5:43:44:be:62:a3:f2:92:34:7b:3b:62:98:11:c3:d4:7c:
a5:d7:cb:94:2c:ad:b0:99:4e:82:b2:f2:65:73:72:b7:d5:05:
e4:47:ba:c9:3d:24:c6:c7:03:1b:fa:fc:f5:0a:85:3b:89:9d:
17:5e:f0:ab:4d:a2:a8:e0:a5:8b:f8:09:27:6c:86:d1:e8:50:
5b:44:51:45:74:0c:83:58:d3:79:9a:93:e9:2d:49:ef:89:aa:
fd:05:10:8c:2b:13:97:37:67:a7:c5:fb:96:bd:73:05:40:9f:
93:3e:e8:5f:94:6b:d7:90:4a:7e:c6:77:0e:84:ef:6e:b1:1b:
72:ad:0c:83:04:89:96:b4:54:17:a1:14:27:9b:5a:1d:c6:32:
a5:d4:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:33 2025 by rpki-client