Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: UEElFxGmTBZCdy0yX2JSZ3swCzMXzr0zRKkjtsJ18lU=
Subject key identifier: C0:1C:29:4F:24:51:41:DE:42:4E:0F:49:25:6B:15:3E:E1:17:34:DE
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 0199FBEB0D72C1BEAA28F874579ADF314547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 0709
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: N+6i7V/DUV6h3z+YccG9b9fSOm362uyu8hVWYyp8EG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:72:c1:be:aa:28:f8:74:57:9a:df:31:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=c01c294f245141de424e0f49256b153ee11734de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:9e:97:41:0e:53:8b:1f:ee:39:fa:d9:a8:
96:33:59:6d:56:d5:c6:52:ef:57:16:bc:a8:7a:d5:
a4:76:c3:c9:9f:94:bb:ee:2d:1d:34:a8:14:86:be:
2b:44:92:49:a3:55:1a:2f:04:7b:83:49:fe:5a:de:
3d:86:ce:2a:da:04:f4:e7:85:c8:7d:e0:c4:3a:f1:
e5:bc:ed:df:b1:71:58:8c:ca:dc:81:30:a4:17:d1:
5e:f4:9a:a9:42:21:b2:d1:96:4e:62:51:33:50:29:
b6:7e:5f:19:72:a6:07:6f:35:b9:3d:6b:e4:e9:d3:
7e:66:23:49:6f:5a:22:36:60:f4:2e:1b:3b:bd:c1:
31:50:c4:7f:7e:bc:d1:b6:89:ba:c6:af:8b:2f:54:
6d:bd:d8:1a:8d:1a:2d:f2:72:e3:96:b2:13:bb:6a:
dc:4f:e3:a8:c9:7a:8e:d6:92:cb:8d:88:a0:d1:7c:
54:47:e4:7a:e9:12:d8:7e:0c:ea:07:07:40:4c:93:
8d:23:2c:e3:3c:0d:22:b2:87:7b:9a:37:3d:a3:d9:
5f:b4:33:79:50:f3:1c:ca:46:1e:76:02:25:0d:db:
7b:5d:94:8c:04:b6:4d:1a:ac:a3:b1:28:6d:be:fc:
b5:cd:a6:2b:80:54:e0:1c:8a:e8:b9:a2:24:44:04:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:29:4F:24:51:41:DE:42:4E:0F:49:25:6B:15:3E:E1:17:34:DE
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:41:6d:50:a1:b4:5b:7f:59:c7:ac:c5:bd:02:1e:96:24:
19:dd:8d:32:5b:92:8c:d9:4a:39:b7:ed:bb:fe:da:86:3f:50:
40:de:77:b4:3d:3a:cb:e2:f8:98:95:ba:d3:b4:40:f4:35:48:
d4:d0:21:41:89:b4:f7:f9:67:14:b6:77:fa:a8:c1:d8:72:61:
3b:2f:27:7f:da:19:ab:2f:5d:ac:06:bf:5a:f5:37:de:70:06:
ea:0e:58:a8:07:8c:25:98:53:1f:8c:5d:c1:38:31:2b:81:8f:
b0:33:64:f0:d3:92:87:fc:11:04:48:b2:e5:01:f4:7b:fd:08:
2d:da:16:32:26:aa:a5:cd:8b:bd:49:02:67:59:1a:d1:7b:ac:
74:dd:13:d1:1b:ff:2e:1c:40:74:21:54:df:3a:57:6b:58:cc:
72:21:84:37:07:05:2f:9e:fd:ed:59:ce:25:97:fe:bd:82:be:
17:49:05:d6:6e:d4:c6:35:ed:01:f9:9e:24:69:aa:7f:f0:77:
40:aa:ec:2f:03:eb:e8:88:8a:43:17:4c:f8:20:e1:74:25:88:
36:14:ea:7e:ad:66:93:52:17:eb:6b:69:b6:d0:b5:1e:c5:9e:
1e:81:d2:b3:d8:0a:c0:3e:14:a0:aa:44:50:2a:74:25:d2:18:
d8:e0:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:23 2025 by rpki-client