Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: lQXAJPu0zoHw4H5TNghwcm/LScyKbt/hMdyEmsP4NoI=
Subject key identifier: 05:ED:C8:EC:4B:B8:4C:A1:39:C7:31:3E:CE:37:FC:B7:A1:1F:3C:6A
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019A71B918B0BD714EABB3073A3DCD35A25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 05D9
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: ORp37+cjV273ZLCIRdNx2RAdvW5CtPLUakCQjzEiQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:18:b0:bd:71:4e:ab:b3:07:3a:3d:cd:35:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=05edc8ec4bb84ca139c7313ece37fcb7a11f3c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:27:2e:cf:b9:ab:cb:f4:75:d9:f7:9d:d5:
6a:57:91:4e:12:a6:9e:1e:9e:a0:e3:b3:43:a4:0e:
41:78:66:dc:30:34:96:22:1c:36:b3:7d:f0:0c:32:
1f:23:5f:4f:2b:21:cb:66:de:66:1b:f1:f2:26:80:
f3:6a:31:1d:8f:77:91:19:52:dc:a9:0c:a0:0b:41:
1c:e2:05:11:b0:e7:60:c4:53:4b:77:c6:8e:08:b6:
27:6d:6a:37:bd:1d:a0:67:fb:35:7a:45:4e:63:d9:
1c:f7:41:e3:fa:37:75:1f:92:48:ea:cc:92:51:1b:
66:18:cf:92:e1:5c:e1:bb:1d:e4:df:38:6b:69:b4:
c7:c3:ea:c2:c7:da:4b:7d:0e:8a:f5:3d:a7:71:85:
8b:52:03:6f:0f:f0:3a:87:ea:6b:fe:e7:00:da:0b:
84:72:41:97:a7:06:3d:ff:04:37:c2:d2:25:17:79:
1a:79:2b:99:30:08:8a:d5:80:39:91:83:73:7d:8d:
d2:45:6f:b7:70:c9:d9:c7:58:8a:d4:ed:26:79:e8:
4b:a6:94:11:69:ab:d8:ae:e7:ce:20:69:bb:c6:c1:
18:66:d4:13:48:b1:17:f5:f1:ca:6d:62:5a:b6:02:
d0:e5:18:a8:c4:89:46:07:84:26:2d:cb:ef:fc:66:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:C8:EC:4B:B8:4C:A1:39:C7:31:3E:CE:37:FC:B7:A1:1F:3C:6A
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:02:82:45:aa:ea:dc:ad:58:7a:e9:50:b4:eb:b5:0c:f3:
dd:4f:23:70:4e:89:f1:3a:11:93:d5:49:47:41:0c:ac:3a:03:
37:ab:3d:b0:36:a1:79:06:9c:f8:ca:f2:56:e7:ee:06:18:44:
12:3a:0d:94:8f:74:f7:b2:60:25:60:b8:5b:a2:26:ae:aa:fe:
a4:13:b4:87:2d:7c:3c:f3:a8:6c:42:14:d9:a2:8a:31:84:88:
c1:27:1d:07:fe:7c:67:08:b8:93:56:0f:c2:1a:de:cb:cd:26:
48:9c:0d:02:e4:75:e2:20:34:30:46:1e:bd:b2:22:2d:ba:0f:
cf:1d:ab:19:ae:d8:d5:a6:4e:eb:67:e1:03:86:60:30:26:a0:
d6:0d:bc:fd:dd:f3:2b:e2:86:23:9d:d3:1d:94:81:62:f1:db:
01:18:68:96:38:b2:8b:be:66:0e:5e:57:df:9d:12:09:f8:04:
57:0a:cc:67:36:b9:f6:bf:90:0d:d5:86:51:ea:0b:21:c6:08:
2f:86:7b:3d:04:e5:90:1c:a7:fb:a3:50:28:97:79:f5:ff:8f:
81:31:2e:7f:80:3a:32:c1:d6:0c:08:63:96:69:ab:cd:25:7f:
46:d8:70:d9:77:92:21:ff:5b:9b:c1:26:4f:24:ec:42:8e:67:
36:86:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:44 2025 by rpki-client