Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: XdsRIKaE4mNgNuScuHaPzixWV/Ipc33Ro19FOOUlJjI=
Subject key identifier: B7:1A:7D:9C:1A:EE:99:37:95:1B:10:0E:ED:29:04:90:71:F2:F6:97
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 0199FBEC18D4809EF9C3CEF1AA7102B90478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 041C
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: OfgjMGsY+rVVf05g4Nozb1QF44an9julTZX1AwWAp0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:d4:80:9e:f9:c3:ce:f1:aa:71:02:b9:04:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=b71a7d9c1aee9937951b100eed29049071f2f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:3d:b6:f0:49:8b:a2:17:32:e8:ea:34:63:
a1:ba:3c:d6:1b:c1:ad:fc:30:68:d6:aa:b5:7d:12:
1c:d6:be:a3:9b:c7:b8:5b:03:a6:fc:9e:13:d9:50:
be:24:d9:33:bc:17:0c:e3:c1:3c:99:b9:6f:dc:16:
0a:f0:4b:1a:97:08:d5:90:bb:89:51:8a:59:f1:31:
80:56:73:a0:fc:bc:48:09:31:c8:c5:ee:7c:b9:2a:
78:dc:9c:00:21:a1:7b:c0:bb:fb:46:2b:22:9e:25:
cc:5f:1f:f8:51:cd:35:7f:bf:e1:43:f7:39:72:0f:
95:25:6d:c1:01:a6:74:96:20:99:0e:c1:3a:c5:6d:
f3:20:ad:8f:6f:a8:81:1f:da:ca:05:f6:73:5c:ae:
a2:34:bd:8c:88:65:62:59:cb:91:76:60:73:bf:2b:
31:18:b7:98:ea:10:6d:20:b7:a1:36:5f:27:46:7b:
aa:ba:33:59:e8:6e:f1:7e:b0:60:71:97:bf:6f:a2:
79:4e:49:63:71:cc:d0:0f:d3:b8:ca:76:49:4d:f9:
28:cf:29:dd:72:f4:93:bc:f8:f2:27:f8:53:0f:f1:
40:17:60:79:92:10:02:91:3d:47:31:88:e4:7e:98:
da:e2:6d:23:31:cb:c5:a7:56:66:b7:f1:08:b1:8a:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:7D:9C:1A:EE:99:37:95:1B:10:0E:ED:29:04:90:71:F2:F6:97
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:af:15:6d:ff:93:a0:e6:2e:98:0a:7b:37:97:3c:78:f9:
d8:ad:96:ce:27:d2:47:5d:f2:4f:4d:eb:4e:89:14:2e:98:8c:
c1:71:7e:38:4f:cc:f2:e5:cc:ae:c2:e4:89:63:18:90:10:09:
ba:b9:dd:bd:20:92:0b:92:45:c8:03:c8:29:63:06:3d:38:d2:
59:ea:44:a4:5d:4a:98:d0:c5:c0:c9:3c:ec:8f:bf:f2:a0:54:
3a:53:5c:df:ea:7d:c6:7d:48:bb:32:1e:10:92:10:ab:ea:a2:
3d:c3:58:12:a4:dc:96:cd:59:51:89:7b:61:89:78:26:e6:7d:
c8:81:69:04:4c:14:a4:cc:90:9f:aa:87:fc:f2:1a:f6:08:e8:
74:3e:40:39:e4:15:b8:b5:db:3d:17:1a:59:d9:ab:25:d7:3f:
f4:45:da:32:99:67:e7:7c:63:7a:ad:34:23:ee:e8:c0:fd:39:
d1:3c:20:85:42:b7:11:c6:44:bb:53:98:8a:56:33:dc:ee:3f:
11:6b:39:91:3a:b7:85:06:f8:d8:db:d4:43:eb:10:09:47:14:
56:33:b2:79:c3:c7:97:a0:8e:5c:b3:84:cd:5b:fb:2d:fb:88:
3c:fb:39:2f:fe:a7:3c:27:b3:7a:5f:df:ef:ea:71:db:03:4e:
b3:06:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:39 2025 by rpki-client