Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: wgd0TI7Snw5h9wpCTys2puRKX/btxbjE3Ckj4zngPW4=
Subject key identifier: C7:AC:AA:4E:BA:42:5E:96:FF:84:DF:72:A4:5E:AB:73:7E:61:46:55
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019A714A31DB911B63344AC54EC014DCA707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0B07
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: dKtsJgOETWCiez4NJXTLj4BxFEFbCs6kafbpRfZ72fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:31:db:91:1b:63:34:4a:c5:4e:c0:14:dc:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=c7acaa4eba425e96ff84df72a45eab737e614655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:9b:ee:02:57:c9:e3:2c:a4:15:2e:d9:93:
bc:e4:4c:57:43:92:45:51:80:a4:a7:f9:5a:11:3e:
c2:4c:59:d5:7b:d1:42:db:e6:40:92:d0:ab:70:eb:
b4:d2:90:7a:6e:e4:ee:a9:7a:fc:0a:f5:5c:b7:44:
52:17:8b:4c:91:dc:df:e3:e6:ad:79:1f:63:c4:86:
05:1f:8d:89:bc:3b:04:25:ec:75:b6:58:1e:d3:5e:
90:31:83:bd:f9:fc:d5:c4:a4:37:5f:84:0c:7a:ee:
75:df:66:b0:56:a0:ea:6b:da:09:0b:01:ea:47:51:
1b:dd:80:46:86:b9:48:63:36:f6:56:8c:9f:e9:76:
42:df:e0:74:3a:9b:45:b2:8d:43:c7:f7:30:87:fc:
62:60:2b:75:50:45:20:ed:71:9b:20:92:a3:41:30:
05:66:41:bd:ad:9d:91:88:03:47:9c:f6:c5:a9:41:
81:b6:e1:36:39:c3:a3:a5:1c:73:b0:a9:4c:07:f7:
2c:a6:38:3e:3d:d1:96:8a:84:b3:1f:e8:e5:aa:16:
7d:b5:4e:94:ac:7b:7f:cc:48:54:d8:c8:8d:43:86:
61:62:b1:3d:9c:8d:71:bb:f7:11:41:9e:73:37:91:
54:b4:8a:c5:8b:fe:ba:f3:45:34:28:e8:b5:0a:2d:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:AA:4E:BA:42:5E:96:FF:84:DF:72:A4:5E:AB:73:7E:61:46:55
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:82:04:00:39:d1:9e:be:47:39:15:8a:a5:11:10:20:e1:fa:
b8:08:2b:41:1b:95:37:51:a4:f1:1e:7d:da:d7:1b:b1:3c:b4:
11:64:32:0d:27:ac:75:c7:df:e0:4e:7f:3b:d0:cf:8e:5d:f1:
9d:b1:5e:d2:2b:e7:22:38:e7:7f:8c:2b:dd:59:bf:d8:d7:1d:
65:e9:de:af:a6:b1:a2:4f:50:3f:cf:41:9b:86:e3:7b:0b:10:
f1:68:7e:7b:37:4b:b2:c5:0e:a9:59:77:e2:7e:3c:2a:76:54:
06:a1:4c:51:32:9a:98:19:5a:7b:cb:68:d6:62:c5:72:b0:fd:
b9:b4:35:97:d2:61:6a:89:72:de:35:2b:6f:2e:31:cc:23:0a:
31:e7:d7:02:fc:81:02:df:16:07:c1:99:a7:2b:42:12:a7:12:
9a:f7:82:98:cd:39:4b:ef:d6:97:ba:27:48:fd:ce:ce:d5:fb:
eb:37:16:2d:b4:d0:41:6e:76:5d:49:17:e3:f2:9b:42:0b:9b:
3e:08:86:03:a3:4d:53:0b:23:0c:cd:ba:cd:82:89:e6:f2:80:
f8:0a:9e:d8:cb:f8:a7:bb:3e:4e:81:f6:2b:d7:df:c0:4c:f8:
ce:40:50:c0:84:02:dd:37:8a:c5:4e:fa:6c:51:e3:18:a0:5c:
ca:31:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client