Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: m1btiO/ffSzBdBH4XtkEEC8AFq2jDboBg7niC+YB9nE=
Subject key identifier: 37:F8:F0:EE:A0:FC:13:61:34:38:B9:5D:15:23:7A:D3:93:22:42:A1
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 019A00DA440CA9EEABEF70CE2514F7824E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0D56
Signing time: Mon 20 Oct 2025 09:01:35 +0000
Manifest this update: Mon 20 Oct 2025 09:01:35 +0000
Manifest next update: Tue 21 Oct 2025 09:01:35 +0000
Files and hashes: 1: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: dvyNC402pWsFyJ5bzaY66xHK/kMfc5PFWEiwNLdkWvE=)
2: YNj6jBY1WWdwBM-l9h2oiKXTYmA.roa (hash: koHDOBOLhPLlqLo5UxyVmvsrhs2UPLUKAfoxF2eIjW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:44:0c:a9:ee:ab:ef:70:ce:25:14:f7:82:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Oct 20 09:01:35 2025 GMT
Not After : Oct 21 09:01:35 2025 GMT
Subject: CN=37f8f0eea0fc13613438b95d15237ad3932242a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:01:ea:c2:36:a1:d2:e9:ae:53:d8:b5:21:
e2:35:a6:c1:f8:d5:03:2b:e8:32:b6:06:43:92:d6:
f8:e8:e9:73:16:1b:f8:48:a9:77:cb:20:9f:1a:ac:
c2:35:bd:e0:d8:53:5e:d1:78:51:23:ab:fd:19:07:
6f:58:3e:c7:2e:51:59:40:c6:8b:55:27:f8:d2:4a:
c3:e9:f7:71:6b:8c:1f:38:8d:4d:02:63:1e:b3:0c:
5b:91:92:09:69:21:0b:9d:11:da:5f:17:52:f8:45:
a4:03:f9:b8:ad:95:78:eb:bf:7b:c4:ab:73:81:1c:
3c:2a:73:6e:28:0c:2d:aa:5b:24:e6:92:5d:1f:65:
c9:82:c6:50:37:06:83:75:78:f5:aa:7d:b5:d1:e4:
b0:28:c6:65:48:57:35:8c:06:91:5c:03:a7:c4:d1:
51:00:16:06:51:f1:bb:7d:e2:62:2c:a3:c4:ce:e8:
3c:a7:b7:f9:8e:a2:71:75:45:57:ec:56:d4:27:b3:
e0:a4:0f:0c:98:57:5b:b7:f6:40:30:83:79:c0:80:
cd:f0:1c:24:fd:e0:df:6f:2b:a1:81:b2:09:40:e4:
96:9e:71:82:bb:37:84:b2:c5:e7:2e:3e:53:83:dd:
35:bc:f5:f3:c7:a1:51:5a:07:aa:e9:d1:48:1d:3e:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:F0:EE:A0:FC:13:61:34:38:B9:5D:15:23:7A:D3:93:22:42:A1
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:5e:e0:13:86:8d:ba:35:f7:66:c2:3e:bd:35:7f:f2:ea:
ec:63:d4:ba:73:cf:09:72:8f:3f:75:c6:fc:be:f2:46:21:d2:
8a:f9:7c:1b:8b:5f:a0:97:cd:f5:e5:52:e4:24:05:a1:18:b3:
f5:18:9d:21:75:ac:1c:45:32:60:fc:37:09:e7:6b:0e:fc:a6:
cb:8e:bf:25:d0:8d:e6:f5:08:55:3a:84:c6:4a:cb:65:48:90:
8a:3c:a1:2d:e4:d7:3b:01:ab:4d:25:bb:73:8c:93:e6:b4:70:
ed:26:da:cc:ca:60:bb:28:05:38:74:a8:82:01:bc:65:7b:8b:
b3:77:54:94:39:7c:45:a9:58:e5:ec:38:ef:14:6e:24:be:7d:
61:95:b6:6c:90:d6:e1:d2:a0:19:7e:57:38:ee:47:36:0f:30:
5c:e3:d1:f1:02:34:49:08:83:7e:31:05:b7:c7:6b:15:ee:b9:
d4:74:f8:3b:78:47:d0:60:98:0d:30:8f:72:3d:24:1b:a4:b6:
b2:f4:91:9e:a3:d1:4f:ac:64:68:5e:b6:c2:b6:0d:15:62:33:
d3:c6:03:81:44:49:f7:db:0f:5a:2b:15:6a:35:fc:8a:8a:70:
d8:b0:b4:cb:74:85:91:57:a7:db:28:02:58:14:f9:c9:00:a5:
5d:fe:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:05 2025 by rpki-client