
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: F7OnMKsEl18/5oJECKpRwwlZKP27nqOIIoDk1OoxlAY=
Subject key identifier: C3:71:9D:90:DE:D7:FD:86:16:1E:AA:D3:7D:38:2B:A3:79:41:83:D8
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 0199FDDA60BCD8FDE011386146B88D6862FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 11C3
Signing time: Sun 19 Oct 2025 19:02:51 +0000
Manifest this update: Sun 19 Oct 2025 19:02:51 +0000
Manifest next update: Mon 20 Oct 2025 19:02:51 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: QBPu/GBELVhRcJish6E+5idcnt1iD6ZttsF4K/4mm2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:60:bc:d8:fd:e0:11:38:61:46:b8:8d:68:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Oct 19 19:02:51 2025 GMT
Not After : Oct 20 19:02:51 2025 GMT
Subject: CN=c3719d90ded7fd86161eaad37d382ba3794183d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:06:b3:30:82:f7:31:96:6a:ee:96:72:12:
57:ec:17:de:3d:c1:ef:6d:de:0a:8e:55:c4:2a:09:
eb:f2:38:61:ce:6f:3d:d4:cb:97:eb:32:41:fc:42:
10:97:e3:a7:ec:2b:0a:ba:26:17:49:83:c7:b1:15:
60:49:30:ae:99:47:4d:bf:ce:47:ea:3d:95:34:07:
15:da:5e:e7:7c:62:e8:6c:63:da:45:ee:e5:b2:52:
e5:c0:91:66:d4:ef:8a:33:75:bc:70:00:85:0e:87:
a2:eb:ab:e1:45:39:d7:6f:9d:5e:e3:e4:7a:45:91:
41:27:b5:5e:d9:60:45:ba:80:d6:f7:88:63:07:3b:
fe:72:cb:85:64:2b:5f:cd:7b:63:6a:43:1d:57:a8:
b7:c4:8e:16:50:de:bf:7d:cb:23:a0:95:14:e7:4d:
36:40:a3:34:f4:e8:a8:ef:10:bf:e7:63:c6:81:40:
cd:f6:aa:3e:1f:9d:86:67:9e:13:48:24:b8:90:03:
db:5e:76:e5:24:e8:02:a4:20:80:aa:a0:77:19:15:
3e:7b:c1:3b:04:cc:51:1c:74:f5:3c:84:fa:bf:de:
2b:e6:bb:ab:95:f6:68:7c:3c:0a:14:fa:de:4a:f8:
76:d8:8d:82:98:0e:b4:a9:0d:dd:79:b7:e0:e7:a1:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:9D:90:DE:D7:FD:86:16:1E:AA:D3:7D:38:2B:A3:79:41:83:D8
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0c:17:16:30:b6:c3:a9:7c:76:01:ad:21:f2:3b:07:62:66:
1b:14:44:fb:58:c0:bc:38:98:e8:04:e9:5b:65:ae:8b:68:dd:
a6:05:c3:3f:06:27:9e:ff:11:b0:39:6e:cf:52:c8:2f:a0:85:
29:7f:50:9a:cc:56:c3:0b:bd:d3:ca:68:39:52:a1:f8:22:f0:
2f:13:a8:34:a5:49:be:78:b9:aa:62:20:a6:63:0d:5c:6b:04:
cd:09:d3:07:16:b2:d3:4b:f9:bb:81:41:4c:60:2d:81:50:78:
4b:21:59:5b:db:f5:8f:d9:1a:ab:af:dd:48:65:ac:6b:b3:8b:
b7:e4:72:13:20:20:af:66:12:73:2e:64:76:8c:7c:81:62:37:
b0:28:b9:24:e1:d6:96:9e:e4:9a:d0:61:78:6c:f7:37:c3:cb:
8f:9c:43:bb:ee:a9:6e:d6:76:ae:73:32:7c:b2:1f:2f:d2:3e:
3f:93:ef:f8:1d:13:7a:6d:81:92:09:2a:5e:20:7a:71:0c:16:
a2:08:72:48:95:28:9c:5b:df:b2:c6:16:a2:09:05:2c:eb:9b:
99:c1:3a:0a:60:e5:7f:8a:ed:37:f3:ce:8a:3e:03:38:a5:d4:
d9:71:ae:35:21:26:0f:70:2b:31:04:71:39:75:1d:af:45:b5:
93:d3:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:33 2025 by rpki-client