Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: 70oHBmuwsCuxO7HfptR9lmcgTjGQk46xoXCVns5dP24=
Subject key identifier: C6:FE:EA:6A:0A:EF:56:6A:D3:95:22:E7:A7:04:04:CC:F1:37:25:74
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 0199FF22493D8D03E615EBEA0D37C32AE2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: wV2SWsCrrbrPLx0uIZsHLKITXdBGR2tTBm54l7cwnFA=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:49:3d:8d:03:e6:15:eb:ea:0d:37:c3:2a:e2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=c6feea6a0aef566ad39522e7a70404ccf1372574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:3f:fa:26:8b:a9:4d:50:bc:c4:c4:d3:43:
ea:19:50:32:b1:0b:24:b9:02:56:97:1b:76:d0:38:
45:0d:ad:d8:02:fb:f2:50:9e:ea:d3:02:03:f9:7f:
29:52:af:55:64:a8:43:ef:2d:ec:a9:a7:82:ac:29:
55:07:15:46:65:4e:bb:d4:70:64:5c:41:48:9a:1d:
a9:2c:ff:ca:d9:d0:3d:b8:af:23:1a:01:97:d5:89:
e9:0a:6c:88:41:c9:a7:69:d3:7a:d9:01:35:05:50:
41:6b:70:5f:09:02:f7:08:d5:a7:86:80:24:0d:a9:
ef:2e:06:51:12:31:11:8c:93:19:b5:57:c3:32:fb:
11:cc:7c:74:f0:9c:50:0f:3c:b6:f8:08:e2:25:71:
02:8c:c1:80:e3:ee:cc:6c:d9:a0:b7:eb:d8:26:0f:
88:54:b5:a6:9c:a7:a5:28:4a:72:16:d5:1f:a1:4f:
a5:ea:87:d2:7c:a5:b0:23:c3:75:e3:f7:e8:b0:56:
72:e2:6b:1c:7b:48:41:a6:29:f2:59:82:c4:26:9f:
32:90:17:5d:ee:19:77:5c:6d:b3:c5:d7:85:41:c0:
64:11:48:3f:cf:c6:fe:d9:32:e4:c5:08:a5:42:e1:
f6:34:d2:f5:d2:34:b2:da:24:a0:d3:62:9c:94:70:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:EA:6A:0A:EF:56:6A:D3:95:22:E7:A7:04:04:CC:F1:37:25:74
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:b8:cf:05:4a:40:6f:45:76:22:93:4a:8b:e4:bb:ef:f9:
22:73:1b:68:a1:88:a1:42:6d:c1:85:6c:f9:50:ad:a0:73:30:
37:38:fc:30:54:71:bf:3c:f2:61:b7:d6:a1:bc:30:f0:ad:74:
ff:95:08:82:8c:c4:85:0e:43:88:d2:ae:b1:cc:9c:27:0f:8a:
11:f8:4a:e9:79:41:15:6d:89:05:f4:2d:e0:e2:f5:d9:a2:8b:
1e:20:03:19:0f:eb:1c:dd:98:6a:26:06:56:86:9c:03:82:14:
5b:c8:c6:37:91:e0:91:2a:16:95:6b:18:83:1f:23:fc:33:3e:
38:d3:2c:f6:b7:3f:80:be:cc:9c:d6:83:78:e9:48:98:85:71:
64:2e:45:d6:3d:33:7d:6d:07:94:62:51:78:d7:82:2c:3c:6d:
cc:a2:a2:4d:98:75:13:b7:e3:72:bb:03:ac:3e:c0:53:ee:29:
0a:6e:c0:f9:f7:15:13:7f:fb:62:cc:14:a3:01:f7:96:7b:b2:
b5:68:e2:20:b7:19:86:8e:d3:5f:b1:b3:2f:e8:ef:9a:7a:a8:
5a:1b:e2:3b:3c:a4:d4:11:79:4b:bd:29:05:85:d7:9c:18:8d:
32:1f:18:e2:47:d6:cb:18:6d:69:1d:f2:06:6f:d2:c5:23:3b:
72:1c:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:13 2025 by rpki-client