
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier: 19N5JPRhPE+BbW1nZ+No1t/nztV3gdEU2o2KI22YLGU=
Subject key identifier: B4:08:57:46:4F:CD:9B:86:83:34:B1:8A:50:F3:02:BB:B1:E5:FA:58
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial: 0199FB0EF44AD24B0AB234865C8F4AC01441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number: 6A
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: E8pvddw8WLj6mFSIxy3CdZ0szxEeccWf+Vu9wZvn7T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f4:4a:d2:4b:0a:b2:34:86:5c:8f:4a:c0:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=b40857464fcd9b868334b18a50f302bbb1e5fa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:66:87:71:4c:f2:d0:c3:71:c9:63:40:10:
6c:df:3f:ad:81:e3:a9:0d:41:75:b7:a2:7c:84:ea:
d4:dd:76:bd:af:51:dc:b1:68:07:83:e7:63:89:df:
0d:63:57:bd:0e:fd:a5:1a:fe:b9:b0:1c:4b:0f:73:
1f:0c:97:30:b4:3c:14:82:97:96:2b:95:16:17:43:
b4:e5:02:5c:42:e3:36:91:c2:b4:f6:38:e9:5e:40:
2d:44:aa:79:0e:c0:2f:52:0c:df:d9:48:b8:f9:48:
68:20:05:09:21:0e:08:92:a6:4a:26:32:99:1c:95:
82:b4:d1:e2:f4:78:e0:54:c0:31:a9:16:a5:e9:7a:
f3:bd:d2:44:3e:7c:33:9d:13:83:7f:00:22:5e:cb:
1c:a3:e1:d1:0a:bc:35:92:6e:05:f7:f6:8d:6f:89:
75:35:6f:e3:19:ea:cc:a6:d1:43:f4:d0:9a:88:a6:
d2:4a:b0:74:52:6f:ca:3a:31:27:21:66:38:af:9f:
b0:29:c9:d4:88:7d:c0:a5:07:cb:b5:2c:51:a6:03:
2f:84:cf:23:e1:f9:d2:aa:a8:d0:65:28:58:25:99:
97:cb:1c:0c:10:a1:26:c4:0d:56:be:fd:d3:f3:b5:
b4:2c:a3:d7:ed:fa:39:92:f3:fd:95:60:d4:c7:19:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:57:46:4F:CD:9B:86:83:34:B1:8A:50:F3:02:BB:B1:E5:FA:58
X509v3 Authority Key Identifier:
keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:de:61:fa:b6:b6:6c:36:fd:d8:25:15:64:88:84:56:64:
cf:10:a9:62:dd:8c:c8:43:a3:6a:6b:4c:c8:b0:54:33:15:1b:
89:5e:15:e1:d0:9a:d9:37:18:08:1c:ea:29:0b:b4:35:a3:e8:
f5:5b:4a:85:94:47:bf:ec:4d:2c:59:07:1b:f2:95:76:1c:3f:
a9:4c:4a:c2:7a:c6:27:14:87:26:c6:8e:40:22:ca:bd:5f:5a:
50:97:e3:bf:96:c5:6e:03:37:ff:1d:8b:05:2f:d3:a4:f2:34:
a9:8c:d6:4e:b3:92:c1:1f:6f:76:9e:f3:f3:7d:62:d2:c7:0c:
e1:6b:99:98:67:f0:d5:0e:d1:84:55:5a:8d:df:7c:44:a0:5f:
32:b8:fc:1a:f5:c4:bf:a6:7a:0c:5c:d5:b6:8c:00:4d:e4:29:
e6:ad:00:c0:47:21:29:3c:f3:0d:50:8d:eb:07:5f:5e:1e:27:
a3:ef:06:79:84:07:61:96:b4:81:fb:51:c2:3d:46:27:c7:72:
8c:0e:fe:7f:06:a4:bf:21:a4:43:12:c6:30:93:3f:1b:ec:ea:
4b:88:9d:a9:a7:af:d4:a6:71:f6:21:2f:af:b3:ee:ab:28:5f:
7e:5e:ca:19:03:20:9a:33:85:b2:24:1f:ff:14:08:9d:a6:2f:
86:51:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:18 2025 by rpki-client