Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: Nf/664ZJwealmxY9GaphUxmGeVkbOL0gMvCN7KoWtKM=
Subject key identifier: E0:A6:FA:30:44:6E:2B:0C:20:DE:44:FF:BE:52:14:D8:15:F8:B1:D7
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 0199FBEB9027B6AE46146F7F26F8D58FC481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 11BB
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: yzMu+42Hqh+daY1kmXW2KN0064dpJ/m5lqmopFrDVTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:90:27:b6:ae:46:14:6f:7f:26:f8:d5:8f:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=e0a6fa30446e2b0c20de44ffbe5214d815f8b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:9c:c6:3d:5b:2d:a1:bc:4b:a4:e8:e7:4b:
8d:35:2e:09:54:78:f8:a8:4d:7c:cf:d6:fa:33:5a:
1b:40:15:cf:f2:00:1e:c1:e3:48:2b:94:13:63:41:
fe:ca:fb:54:5e:ff:a8:4c:be:b2:05:f1:ad:39:5e:
8a:e9:dd:28:f5:80:99:76:92:59:d3:5d:1b:ea:9c:
10:86:c8:7b:cc:11:0c:44:04:49:79:b0:68:5c:ae:
ec:2e:b8:9b:b3:43:4d:12:b1:d3:61:18:ff:bc:68:
b1:52:26:0d:39:92:07:98:4d:35:54:91:30:7f:6e:
23:a8:7b:85:21:31:1e:04:8e:ed:8f:14:83:48:04:
8c:5f:a2:37:79:e0:97:bc:ed:04:58:43:a5:8d:42:
74:7f:76:5c:74:66:bf:82:e7:03:f5:b9:96:5f:9e:
10:c2:bb:d9:93:c7:96:1a:a8:16:74:b0:1c:df:e7:
c6:df:77:9a:b8:67:c5:a2:55:c9:87:78:30:39:6b:
62:85:6e:33:44:73:03:43:59:ea:32:33:de:e2:69:
7e:37:5d:42:e9:8f:17:4d:06:b2:8f:62:1e:57:ca:
6e:d0:99:17:18:42:0f:9b:b0:34:c5:46:5c:53:12:
14:ae:c0:a8:7c:ad:cc:24:99:99:37:48:6f:cd:b8:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:FA:30:44:6E:2B:0C:20:DE:44:FF:BE:52:14:D8:15:F8:B1:D7
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:42:c8:23:75:79:d1:fa:8e:8f:3f:20:aa:f6:e8:79:f2:35:
fa:af:09:7d:2a:f1:93:36:35:1d:0c:7b:d2:c2:a0:1f:8a:61:
d9:5e:72:c2:df:94:e3:94:04:23:4c:00:f0:fd:d6:9d:3b:e6:
91:e9:31:a5:01:f6:49:64:2a:e6:d5:66:10:a8:37:46:da:35:
d6:6c:dd:a3:50:af:78:d4:0e:b9:d1:1c:0a:18:8a:c0:72:71:
8d:9b:a1:23:16:f8:1d:7d:52:ac:cb:f1:fe:84:e1:dc:1b:5b:
bd:2d:5c:86:98:82:6a:8f:dd:11:95:5a:b8:57:84:59:fc:be:
cb:ee:13:91:fb:c7:e1:5d:bb:2b:ff:29:a2:2b:46:b7:f9:81:
82:44:93:a3:e7:09:d5:a5:11:23:74:d2:1d:40:39:3c:a0:b0:
64:a7:fa:79:53:ff:17:6a:a1:be:94:27:df:f9:5d:0b:8f:c9:
e5:d6:05:08:77:e7:53:29:1f:8b:a8:53:7b:f7:92:72:ac:28:
cc:f7:2a:11:88:ee:a8:80:2a:3b:40:95:7f:ba:77:66:15:3e:
3c:56:b0:0a:8f:69:44:3b:10:fb:b7:07:83:fe:be:4d:28:2d:
f4:f2:5d:ea:21:d9:8a:d7:e7:ef:ec:fc:a8:7f:ef:6f:57:a0:
fe:18:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:48 2025 by rpki-client