Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: ST06UUq+3NKhlTIGZ2cGgZpzLFf5Sz1CtRthH/a+H3E=
Subject key identifier: 16:7A:FD:4F:83:89:B9:C3:5C:B3:37:5B:9C:00:07:4F:01:7F:8D:F2
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019A71B8F68DFF802016B6207B4CDF7BBC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0B86
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: KyRhryx1XxhAhGdksVdvsr38FSZ9jwqO0kC6x9Rb6Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f6:8d:ff:80:20:16:b6:20:7b:4c:df:7b:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=167afd4f8389b9c35cb3375b9c00074f017f8df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:84:2f:fe:c4:72:56:24:e5:b0:dc:23:cc:
d3:ee:4f:e0:86:f7:e2:b6:b1:28:a5:2d:21:59:8b:
d2:11:9f:a2:88:49:d3:fd:03:ff:ad:d9:de:f6:85:
66:93:f6:28:7a:1e:e4:06:44:3c:4d:4e:0c:bd:5a:
94:de:d5:49:2d:57:75:bf:3a:0d:b5:e9:3b:0b:b7:
31:91:10:60:ba:1d:3c:b7:d8:3e:2c:47:40:69:f5:
a6:a8:f8:4a:5e:86:5d:1c:6f:cb:f7:d4:11:23:e0:
f2:2a:7d:7e:26:93:50:89:42:92:80:f8:5e:13:9a:
2f:bd:fe:ca:6e:25:40:bc:87:4c:eb:f3:04:95:14:
92:fb:a1:3c:d9:94:2b:55:38:fa:25:ad:11:dc:de:
68:8e:48:5d:0d:0a:65:27:ce:ed:d2:76:39:71:e9:
6f:90:69:10:bd:a0:aa:1e:02:b3:f6:b9:36:05:45:
6a:a4:73:1e:98:d9:87:5a:c5:1d:83:c9:36:0d:1d:
49:24:45:95:0f:3f:ca:c1:db:65:fc:6d:6b:8f:ed:
95:53:79:d9:36:a4:3c:80:4b:98:d5:05:94:97:0f:
8c:4e:c7:d5:b2:4a:8f:ac:9b:88:36:2f:a1:49:04:
67:32:b3:56:b0:0d:cb:05:eb:16:48:21:b3:52:9f:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:FD:4F:83:89:B9:C3:5C:B3:37:5B:9C:00:07:4F:01:7F:8D:F2
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:68:45:a2:a6:f6:72:06:e3:cc:fe:dc:e8:a0:f8:43:e0:
53:4b:61:4c:8b:55:a4:0c:99:8f:c1:0f:7e:68:ad:86:a0:4c:
97:38:82:c5:b5:49:d2:50:e1:8c:14:30:d3:99:52:0a:d0:29:
b2:b5:ae:a8:13:18:26:57:8e:f4:21:b7:b5:c1:ed:33:93:ac:
c4:94:05:89:32:ef:ff:aa:29:07:4a:ec:20:44:98:3e:55:bc:
8a:ba:31:f7:57:d9:41:bf:e7:36:7d:71:19:bc:69:58:dc:c4:
c3:e9:38:41:1b:81:7c:66:a0:ff:a7:c0:86:d3:e5:67:6c:e2:
3d:0a:20:63:81:43:f8:75:75:c9:b4:6f:14:cc:7e:8f:b1:27:
16:9d:ec:37:b1:4d:80:6f:99:2f:28:13:61:d7:48:27:ce:3a:
bb:be:fd:bb:66:51:ee:b0:ad:49:da:1a:cc:69:00:81:f1:b6:
6e:ee:f4:c5:24:0a:56:d1:79:79:8f:e6:83:84:72:ec:bc:e4:
41:57:c6:de:45:0d:f0:ba:23:52:8c:e8:fa:80:fc:5c:3c:51:
fe:c4:42:3d:a4:f0:be:e0:25:65:e0:5d:89:98:d8:35:4f:56:
1b:b8:56:22:b1:4d:ae:e9:d8:63:7a:a3:a4:38:f2:a2:aa:ea:
b1:5f:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:56 2025 by rpki-client