
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: 5ISnqMD7ROfZSURNf4HSqZnE+NIR+FP09NZhQCxWWZ8=
Subject key identifier: B6:86:A1:EF:07:65:16:4D:1A:BA:B7:AB:F1:FC:46:EC:E3:F1:30:B7
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 0199FBEB7F257F97669529AC8F4FC921EDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 1046
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: q3k5yawnen/NoQdaTrRuMzrKwTueQtRTqSRBws7Rd5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:25:7f:97:66:95:29:ac:8f:4f:c9:21:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=b686a1ef0765164d1abab7abf1fc46ece3f130b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:33:7b:5c:05:cb:3c:5f:d0:f2:7c:d9:53:
fe:b2:59:75:fc:d3:7e:e3:c2:8e:b4:27:49:91:5f:
22:e9:4f:30:33:d1:de:d6:9f:d4:85:75:55:d4:48:
d7:9e:da:a0:24:59:28:f8:4e:24:79:ec:ea:bb:f4:
ce:71:bf:b8:b0:89:73:95:f5:4d:85:a4:14:e1:27:
44:52:1a:68:e1:a7:80:f2:cb:42:9d:c4:22:d9:29:
b9:60:04:55:a3:25:4b:6f:68:38:57:c9:ac:c8:5d:
65:64:c6:c4:56:c5:dd:94:d8:79:73:12:e7:32:93:
57:52:ee:b7:3b:f8:4d:70:51:dc:81:9d:30:fe:8e:
c7:85:1d:2c:0b:0d:3c:ba:a7:4f:01:9f:42:04:41:
a6:b9:59:d1:b6:01:7b:2e:8d:a4:d0:2e:85:76:33:
b4:15:93:75:20:26:07:9d:21:f0:93:6c:9b:25:67:
31:44:4a:f7:5c:dd:74:a0:6b:41:a3:34:e7:a0:20:
68:f0:2d:6a:7f:a7:e7:ba:8e:27:ad:65:5b:f8:37:
4c:c8:63:ce:85:15:b8:0b:56:00:b6:f5:25:67:50:
2c:bf:50:e1:85:a7:b2:f1:8b:b9:79:b8:a6:4f:87:
e6:e8:61:3a:1f:fe:7f:9c:59:4d:6e:5e:5d:a4:e5:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:A1:EF:07:65:16:4D:1A:BA:B7:AB:F1:FC:46:EC:E3:F1:30:B7
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:d7:81:75:1b:3a:9f:c5:df:de:5d:6f:ba:37:b5:9e:31:
b5:bf:e1:ee:86:29:cf:ad:7f:c6:2e:d9:f5:c7:cb:6a:11:d1:
d3:8f:54:24:63:5f:e8:f1:88:92:9e:12:ea:7e:be:f5:db:2a:
f9:f1:1a:b6:d9:f0:d6:d4:63:04:59:c6:99:01:7c:17:11:18:
9e:0b:84:03:70:fa:5c:67:74:aa:17:ad:28:9b:ec:40:81:29:
e5:be:71:a2:53:1b:03:b3:bb:8c:bd:01:1f:c8:c5:a0:11:c9:
bc:76:b9:4d:6a:a5:56:dc:83:60:2b:8b:52:3e:97:81:3b:98:
55:63:ea:ec:fa:38:19:ae:b0:2a:91:e9:e5:62:0f:96:07:43:
c1:52:10:15:9f:cf:9d:10:ca:6f:2c:33:4f:b8:52:c8:3b:e4:
df:af:d5:b0:c1:35:0e:e9:9d:c8:34:79:ba:52:e5:de:4b:fb:
9f:37:aa:85:33:dd:eb:b0:8a:67:e5:1d:f9:91:91:46:7d:ae:
71:c7:6a:40:22:20:d2:32:5e:90:21:00:f5:34:fb:9a:c8:85:
dd:a7:e9:32:40:2f:06:36:50:e8:f8:7a:63:bf:c5:18:1a:91:
74:00:70:81:ee:50:84:07:57:53:15:50:af:76:b5:2b:fd:13:
88:f8:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:13 2025 by rpki-client