Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: YbzeSw1UPF1PTXBPUimKo9fEObjcB1D4ZMvqam1VRnk=
Subject key identifier: CD:30:A7:79:E3:85:9C:50:6A:69:0A:69:5A:1B:D8:FA:6F:AB:45:91
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 0199FBEB60095B98AC3C9A4B2D2D94805982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0DFF
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: LLh7wOxpCOAlAT/Kx9rcOgscozqmKQ8Ljq5Dagr0eDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:60:09:5b:98:ac:3c:9a:4b:2d:2d:94:80:59:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=cd30a779e3859c506a690a695a1bd8fa6fab4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:40:c1:e5:2e:f1:d0:5f:03:48:e7:5d:33:
c1:80:96:54:3f:e8:9a:ee:57:3a:73:7c:89:44:c2:
7a:e4:eb:67:49:9e:9f:45:87:11:f8:62:55:b0:72:
fc:d0:0d:bd:3d:05:2e:5f:11:bd:5b:2d:08:16:9c:
cc:85:14:b0:c1:12:86:45:c7:e0:db:b4:b6:90:47:
8c:c6:d2:26:1e:e6:ba:fe:d2:e3:21:45:56:11:18:
cf:0d:4e:25:f3:c0:94:5a:54:e6:4c:49:e1:c8:08:
ab:69:e9:90:14:9d:2e:dc:82:99:84:c0:23:60:29:
f0:3c:75:d9:72:e0:67:1f:1a:18:7d:b5:6b:6a:72:
ae:ef:c2:ad:35:25:7d:f2:84:37:64:e8:a8:48:fb:
5a:06:82:35:07:77:b1:f0:ec:c1:80:1e:26:d9:07:
74:3a:4c:1f:fb:a8:6d:ad:1d:1b:bc:dc:ce:5b:3b:
8d:c6:8d:1a:af:f2:97:67:b2:41:89:4d:de:ca:de:
b4:09:b5:dc:c5:fc:c0:17:3c:38:73:28:a8:31:a8:
3c:be:87:a7:db:cc:fa:ee:a5:72:9b:8e:86:d0:26:
d7:1e:55:8f:2c:11:cd:1e:01:6b:c4:c6:af:b9:30:
a8:9d:2f:73:67:af:44:84:42:96:54:fc:cb:ea:04:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:A7:79:E3:85:9C:50:6A:69:0A:69:5A:1B:D8:FA:6F:AB:45:91
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:81:f1:b2:e2:87:fa:ff:d3:47:c0:00:cd:33:89:dd:85:bc:
0f:2c:8d:cb:af:14:8f:e2:56:34:a9:63:e1:97:e5:6b:55:b0:
31:4c:d6:b9:74:82:05:ba:08:c9:da:e5:31:b1:97:47:49:99:
e1:42:61:1f:a1:19:e9:28:b4:eb:cb:22:4a:dc:54:45:5d:02:
21:4d:d1:cc:c5:94:fb:e2:cb:99:ec:6a:cc:d7:aa:5d:7c:e2:
7b:67:f4:2a:64:12:fc:b2:e1:d8:f5:fd:e9:cf:82:7b:cc:a4:
8e:99:9b:1f:6b:0b:87:7c:13:b4:9e:61:74:06:f1:99:57:d1:
54:de:eb:45:47:be:5a:47:07:5b:7f:c9:8c:dc:16:02:27:d7:
7a:07:bd:3d:a5:ee:1b:70:3d:4d:22:dc:c1:ed:c1:b8:f7:0c:
52:10:fb:cb:14:a9:1e:52:d7:9d:65:4c:58:97:25:59:c8:21:
64:36:30:d5:28:72:39:51:92:a7:4c:c1:cb:ad:05:7c:71:80:
a2:ed:3f:ba:5f:04:28:a1:b1:c5:01:0d:0d:85:67:92:30:06:
c3:b4:3d:9d:75:ed:45:15:d6:2d:e7:5e:c5:7e:4f:71:22:01:
7e:0a:e2:83:bb:b0:05:12:75:91:9d:71:b9:95:fb:c4:ac:6d:
21:a7:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:28 2025 by rpki-client