Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: wOreNSUO3+KlYeIIEzDT0MjxaF6i3zc3XuC1RCF0CFM=
Subject key identifier: 47:6A:E5:A1:0E:43:FB:BF:C0:F6:19:D8:9A:25:5B:EF:E6:69:F9:41
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 019A71B82D522760C724C77AB655F426D007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 07A6
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: d8KcLftcsooqxKuPi0TksOU46rAr1beQUNn4s7lAzvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2d:52:27:60:c7:24:c7:7a:b6:55:f4:26:d0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=476ae5a10e43fbbfc0f619d89a255befe669f941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:31:6e:41:04:33:43:72:8a:4b:2d:9d:6f:
ff:a1:59:47:04:80:f0:8d:18:26:c3:2a:b0:a5:31:
6a:16:9a:60:3d:bf:b2:7e:fe:cb:9d:0a:99:15:e3:
3f:1d:4e:94:91:a2:48:ac:21:3c:14:fa:eb:2f:b1:
70:02:dd:66:6d:78:2d:99:bf:aa:98:cf:ee:9b:a8:
4f:02:88:12:1a:6e:ac:69:31:28:f8:25:f2:2c:00:
6a:bf:f9:f6:5e:49:3e:31:2e:4a:17:fe:80:ff:4c:
a4:2b:0d:86:a2:f0:95:5b:93:b5:ba:49:d2:16:37:
ff:a6:43:16:e9:b5:b7:dc:f4:60:39:4c:c1:dc:de:
eb:32:aa:f8:c3:67:88:2c:d5:b9:3b:af:59:d0:e1:
5e:5a:ba:d8:39:3c:f8:0e:89:34:29:42:ea:9d:6d:
8f:f9:6a:ee:76:5d:66:07:dc:f2:b1:60:ad:a1:58:
61:f5:38:fe:4a:d1:04:9b:f7:72:c0:01:15:5b:c2:
2d:04:05:0a:0d:83:0c:26:79:0b:1e:ae:4f:42:f2:
05:77:82:c6:1d:74:21:87:0c:e8:fc:b8:8b:08:36:
8b:d3:a2:c3:69:2d:5f:2d:7f:a2:07:4a:9f:6a:52:
ce:d2:f5:e7:2a:bd:f0:78:c9:78:9e:0e:c6:10:f1:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:E5:A1:0E:43:FB:BF:C0:F6:19:D8:9A:25:5B:EF:E6:69:F9:41
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:bb:b4:0f:ff:61:49:57:cf:59:8f:cb:82:63:ba:16:72:
77:fd:23:9b:3b:47:f9:78:43:21:4f:9d:f2:d7:21:40:6f:21:
11:01:d1:84:13:99:83:65:10:49:43:84:64:9b:2a:ed:53:8a:
40:05:c8:30:96:19:d6:33:b2:20:ed:e2:70:ab:e0:d9:8d:c6:
b8:55:1b:4d:5e:15:23:f7:5f:98:61:c4:b4:95:c4:41:66:31:
7d:1c:37:ce:d9:46:7b:d7:45:04:01:91:0c:33:4c:1e:fb:c8:
a2:ec:65:b7:a8:bf:53:2b:4d:d6:39:14:16:14:91:ab:20:3b:
e6:38:93:f3:3c:fb:71:a8:40:04:71:94:fd:36:d4:e4:a1:33:
06:41:25:6b:6f:82:19:e5:16:8f:66:63:34:40:4f:f8:fb:34:
23:d5:9e:4f:15:e1:a8:af:bf:41:b7:ca:58:bb:8f:b4:e2:22:
c2:08:ac:52:16:51:1a:14:0c:c7:10:93:d7:ac:2b:05:d0:f0:
cc:0f:15:50:73:ea:b6:f6:d2:d5:21:0e:dd:08:64:6a:2c:05:
0e:ee:09:0e:a1:8a:a0:17:a0:19:7b:70:a6:0e:eb:5d:65:dc:
fc:03:36:3f:a0:74:72:05:51:65:4e:5b:76:b7:c6:e1:ea:5c:
b3:3a:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:15 2025 by rpki-client