Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: ZkqTa6bL7VdgaHJYJOny7G+MbqlvWoU/qqRXDklqjfc=
Subject key identifier: 35:EF:89:09:8C:CB:6F:25:9B:56:86:7C:65:6D:D1:8E:AD:21:7B:4B
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 0199FC582C4ED107195E68EF9D9E79CB4CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 06C0
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: Nfn3f18e6UCPvxBhBQuMYCCQR5pLRgtfwKgEa8pULp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2c:4e:d1:07:19:5e:68:ef:9d:9e:79:cb:4c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=35ef89098ccb6f259b56867c656dd18ead217b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:75:9e:24:3e:a0:36:09:42:9c:3c:a0:62:
8d:2e:4a:44:d4:e7:00:91:0e:8c:e6:bf:26:30:09:
30:3f:22:36:b9:83:84:e2:13:ad:4f:ca:d4:75:31:
c4:a7:4e:25:c2:71:d4:75:ee:94:f3:0f:ba:10:98:
ca:34:1f:16:81:47:59:f4:50:82:34:32:0c:41:53:
6a:10:9d:03:5c:e2:13:4a:a7:41:da:a8:4c:7c:fd:
ec:b0:df:d8:4f:b5:60:06:eb:75:94:39:9a:0b:86:
5b:81:8d:72:b8:27:57:82:45:1e:21:a6:5d:f0:6d:
3f:4b:b0:cd:32:72:2d:bf:21:41:30:5c:94:c0:a4:
9a:a8:42:8a:f3:23:7a:e5:fd:cf:7c:16:9a:64:1c:
05:3a:49:16:46:cb:67:0c:50:7c:df:e5:4e:66:d5:
22:18:15:2a:ce:51:b3:44:f3:21:6e:47:a6:be:f6:
8f:27:48:db:2c:45:6e:67:27:f7:94:e9:9c:9e:b7:
a0:dd:e4:0d:33:34:83:46:99:ab:5e:0f:77:e0:f9:
43:bb:27:7a:0e:89:ca:17:27:32:b5:ef:eb:56:6e:
05:cb:b9:7c:42:72:17:2c:d4:91:da:e0:ec:14:87:
1b:fe:f2:c9:02:8b:8d:fe:16:36:1b:1a:97:7e:6b:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:89:09:8C:CB:6F:25:9B:56:86:7C:65:6D:D1:8E:AD:21:7B:4B
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5a:13:18:d2:9f:b4:b3:27:98:a0:4f:6e:e8:9d:a1:9c:48:
35:7d:14:44:cb:45:49:ef:f0:38:eb:a4:9a:cf:fa:e3:18:bd:
db:8e:27:dc:18:58:58:57:ed:80:a2:ae:3b:0c:fd:02:3d:3c:
a6:90:78:74:ab:aa:78:20:03:35:9b:a8:2f:fe:f0:62:cb:f1:
06:dd:b0:f1:40:56:d6:1b:9e:61:5e:33:c0:81:28:db:5b:1e:
46:76:42:f2:fd:b3:79:ca:db:d0:54:da:67:6d:ea:75:c5:fb:
56:33:78:a2:3f:63:6b:71:77:41:ed:64:05:38:9c:04:38:23:
7d:53:b3:a3:ea:24:27:01:41:f8:23:59:ba:21:3d:43:61:9f:
10:4d:ec:2e:a4:cb:1a:56:4a:98:2b:d5:66:6f:b3:42:73:c6:
54:b2:c6:62:e0:f4:19:1f:9a:b6:04:a2:c7:22:66:28:da:a1:
51:d9:d3:c4:ab:a5:ae:bf:58:62:e8:5c:b2:35:43:4b:52:20:
a1:85:ee:6e:88:97:71:3a:bd:53:57:69:d1:c3:08:9b:da:0e:
f8:63:e6:e0:b1:97:92:37:eb:74:32:b8:e9:39:c8:46:1c:62:
aa:66:28:1a:fa:80:56:35:15:e8:a4:96:b0:93:01:27:4d:46:
93:07:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:29 2025 by rpki-client