Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File: C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier: Os16N8izW4kqTqAiMiwRXeO6HVLv83zV1Z6fP7A+8u4=
Subject key identifier: 7B:A3:44:24:B8:9C:5F:E1:9A:B5:A2:97:F0:1D:FE:60:7E:84:61:D4
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer: /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial: 0199FD343AD51F8FDCB24A81D7880AD2712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number: 0CF5
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: T1cFZlkTCzyr/ngtDMTxXt0wLgsfgn7KuJk2sCiIk3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3a:d5:1f:8f:dc:b2:4a:81:d7:88:0a:d2:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=7ba34424b89c5fe19ab5a297f01dfe607e8461d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:f7:f4:8b:32:6c:81:17:cc:31:3a:de:f2:
7e:43:c5:6c:62:f6:01:48:25:19:5d:5d:8d:a8:17:
b8:81:62:88:47:10:af:81:93:ec:0d:3f:c1:a2:14:
e6:fe:4a:fb:a7:7a:76:e4:40:40:48:a0:81:98:ea:
40:af:45:25:f0:d7:53:5d:ea:a1:9c:1c:a4:72:8f:
63:44:a2:68:3d:ea:e7:28:37:6e:bb:99:26:94:04:
d1:15:f0:cd:9c:dc:ec:4a:48:8d:72:5a:ec:1a:6d:
f7:8b:c7:31:26:e8:9a:45:db:70:69:b5:de:b7:1d:
4e:1a:d5:65:8d:d2:e6:87:be:d0:79:44:cc:0a:61:
a1:23:9b:62:3f:fb:1b:36:08:df:36:d4:a8:45:0b:
17:bd:53:84:f2:77:00:52:dd:4a:c5:dd:79:56:a3:
8f:6d:04:76:17:68:c5:39:7b:2f:c1:4b:00:46:47:
6b:5c:b7:00:18:a7:c6:fe:42:15:69:44:c1:1b:f6:
c7:24:d2:ac:73:e7:63:5b:5c:83:f7:db:b3:67:11:
80:6d:99:e1:80:bb:a4:22:de:b2:d1:67:9c:00:67:
7a:2d:56:e2:fd:7c:bd:7b:24:20:fa:6f:0f:9c:9c:
e1:5f:6e:3d:08:a7:88:03:f6:fa:0c:f6:ee:cd:2c:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:44:24:B8:9C:5F:E1:9A:B5:A2:97:F0:1D:FE:60:7E:84:61:D4
X509v3 Authority Key Identifier:
keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:96:3d:bc:26:43:a5:cc:2f:d9:35:05:6a:2e:13:27:d4:
91:3d:d5:d0:bb:ea:89:7e:1a:c8:9b:de:b8:e6:5c:e6:f6:57:
1e:41:71:b3:2f:f6:ac:f1:58:8f:fb:32:66:47:03:80:67:78:
15:70:af:82:40:f1:17:eb:e1:88:b4:62:c4:b9:1b:a1:ec:79:
a2:e3:5b:ce:ff:02:d6:44:8e:e5:22:0a:ea:e8:c2:6e:96:73:
4b:ad:50:7e:a8:49:05:2b:64:45:bf:fa:82:b9:3a:8a:03:37:
1d:bd:6e:f7:b5:24:33:50:ef:a0:98:f3:84:d3:1b:43:41:6f:
d0:7c:fa:ce:c1:35:6c:c5:c8:d4:26:22:48:85:13:04:1c:d8:
56:5c:f4:9c:8d:c5:60:4a:9f:5b:55:6e:e8:a6:be:dc:4b:45:
51:0c:97:6c:64:dd:9e:7d:a3:92:99:2e:9f:07:af:b1:48:04:
0e:43:e2:5b:4c:2a:97:45:2b:d0:2f:19:ae:b7:da:49:7c:37:
7c:76:2a:d1:b2:5c:7c:55:9f:24:61:53:07:cb:be:74:a7:7e:
63:bc:fe:8f:24:30:92:43:5d:c1:cf:82:a8:6c:15:02:e7:b9:
5f:c7:9f:f8:f8:6b:4d:4e:ec:63:00:ba:70:97:30:98:e2:6a:
e7:e9:57:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDrVH4/cskqB14gK0nErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTY3MzlkNGFmMjA5ODU5NzE5MGFhMDkyODMwZGVhOWMx
N2E3MDAwHhcNMjUxMDE5MTYwMTIyWhcNMjUxMDIwMTYwMTIyWjAzMTEwLwYDVQQD
Eyg3YmEzNDQyNGI4OWM1ZmUxOWFiNWEyOTdmMDFkZmU2MDdlODQ2MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xf39IsybIEXzDE63vJ+Q8VsYvYB
SCUZXV2NqBe4gWKIRxCvgZPsDT/BohTm/kr7p3p25EBASKCBmOpAr0Ul8NdTXeqh
nBykco9jRKJoPernKDduu5kmlATRFfDNnNzsSkiNclrsGm33i8cxJuiaRdtwabXe
tx1OGtVljdLmh77QeUTMCmGhI5tiP/sbNgjfNtSoRQsXvVOE8ncAUt1Kxd15VqOP
bQR2F2jFOXsvwUsARkdrXLcAGKfG/kIVaUTBG/bHJNKsc+djW1yD99uzZxGAbZnh
gLukIt6y0WecAGd6LVbi/Xy9eyQg+m8PnJzhX249CKeIA/b6DPbuzSxzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHujRCS4nF/hmrWil/Ad/mB+hGHUMB8GA1UdIwQY
MBaAFAumc51K8gmFlxkKoJKDDeqcF6cAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYt
YTQzYWVjNjIzMmFhLzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYtYTQzYWVjNjIzMmFh
LzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrqWPbwm
Q6XML9k1BWouEyfUkT3V0LvqiX4ayJveuOZc5vZXHkFxsy/2rPFYj/syZkcDgGd4
FXCvgkDxF+vhiLRixLkboex5ouNbzv8C1kSO5SIK6ujCbpZzS61QfqhJBStkRb/6
grk6igM3Hb1u97UkM1DvoJjzhNMbQ0Fv0Hz6zsE1bMXI1CYiSIUTBBzYVlz0nI3F
YEqfW1Vu6Ka+3EtFUQyXbGTdnn2jkpkunwevsUgEDkPiW0wql0Ur0C8ZrrfaSXw3
fHYq0bJcfFWfJGFTB8u+dKd+Y7z+jyQwkkNdwc+CqGwVAue5X8ef+PhrTU7sYwC6
cJcwmOJq5+lXYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:02 2025 by rpki-client