Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: 7nUIPgfQ4NW02nhatbbxrYdiyCGl/oWT1aZkfXbJVrg=
Subject key identifier: CB:C9:0E:3E:5A:B5:F4:AB:4D:F6:E6:76:4D:A7:2A:8D:A3:DB:E9:47
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 0199FC8F37A940F487F681091A209B2EF5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 0A24
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: wyQNVYdZIViBlmxapgmBiEP6G8dr85xhBNiJh+2BGv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:37:a9:40:f4:87:f6:81:09:1a:20:9b:2e:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=cbc90e3e5ab5f4ab4df6e6764da72a8da3dbe947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:dc:21:10:08:be:3f:0b:c8:27:c0:d4:17:
35:dc:8d:ff:82:ef:b3:48:9c:6b:c0:69:7b:17:4c:
cf:0a:65:4f:95:ac:f1:bf:6f:42:f9:a0:b4:03:66:
98:8a:86:a1:e2:f8:5d:35:43:0d:92:9b:d7:fc:29:
6b:d0:90:ab:35:1a:c6:3c:77:ad:93:70:b9:72:c2:
77:03:dc:27:fd:49:08:a3:c2:4a:bc:24:bb:04:c5:
89:22:a5:78:1f:4b:78:6e:eb:d6:b7:1d:87:bf:a7:
2c:69:b6:4a:38:91:b2:e8:5c:f0:de:93:36:9e:43:
d5:66:82:1a:e0:f4:6b:97:b1:97:54:3e:05:0d:5a:
a6:7b:df:89:f4:8e:83:94:2f:53:68:b6:49:6a:09:
df:f8:40:bd:3f:7f:25:d7:bf:ec:e1:4c:e3:d2:88:
b1:59:b8:3a:ab:ab:6e:da:82:d8:15:a1:70:8e:8f:
1f:20:72:d0:de:9d:c9:71:89:13:af:42:be:85:df:
8f:ad:f1:78:b7:90:fa:92:93:6d:df:75:8c:02:3a:
a1:3d:c2:7c:b6:b1:4d:e0:97:32:04:1d:5f:2c:75:
bb:ac:05:96:08:a2:88:ff:ff:cc:84:5b:33:9b:2d:
dd:5b:84:65:a1:b0:56:89:04:98:f9:74:23:4f:bf:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:0E:3E:5A:B5:F4:AB:4D:F6:E6:76:4D:A7:2A:8D:A3:DB:E9:47
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:a4:7a:f8:6f:f7:09:1c:a8:9c:98:9e:cb:0d:62:ea:29:
ad:a6:57:cd:c5:21:93:5a:d2:1f:f2:70:ca:6b:87:41:2a:f6:
5e:c9:e6:d5:fc:54:7e:a9:da:91:29:64:7e:5f:b5:0b:a1:5d:
1f:df:14:ed:d3:75:5f:3f:ca:87:2e:72:5d:c6:e5:37:ba:2d:
a6:a3:ac:91:da:d9:0c:ff:ae:68:dc:0c:cb:87:58:9b:fd:b3:
be:6b:7b:65:97:c0:65:d4:31:40:4c:40:fa:22:de:45:4c:85:
be:be:5b:70:92:55:17:58:06:4a:c4:8f:4f:e9:ea:7d:25:92:
b6:1a:8e:41:42:d7:a4:68:03:04:b4:60:e5:a4:c5:5a:2c:de:
ca:a3:e0:fc:b7:09:47:0b:9d:10:9b:2d:e4:a5:aa:20:d8:c8:
92:f9:71:6d:ec:a1:d8:ab:75:ef:8a:51:84:ee:2c:6b:c3:2e:
5a:d6:d5:78:4e:53:dc:bf:cc:60:7a:e7:4b:ef:c9:82:6f:7b:
33:b6:f2:a2:2d:b4:f3:4c:43:fc:35:3d:23:13:bc:c9:76:b1:
b6:86:d5:5c:b1:56:4a:f8:ca:ab:7a:10:a0:ea:8a:4e:63:03:
1f:4d:d5:37:ac:88:58:5a:0f:66:5f:03:5b:a0:a5:ff:58:2a:
26:dc:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:07 2025 by rpki-client