Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier: 6/9eBMpKPCE4F7PLoHxjGdCbV4dG3Sn0z4pCz9DooQw=
Subject key identifier: 82:40:06:E8:3E:A6:39:DA:17:4D:BC:52:2C:F6:B2:91:D2:B7:C1:17
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial: 0199FFC85AB3EA9E43EBE6B65773F45B7CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number: 02E9
Signing time: Mon 20 Oct 2025 04:02:24 +0000
Manifest this update: Mon 20 Oct 2025 04:02:24 +0000
Manifest next update: Tue 21 Oct 2025 04:02:24 +0000
Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: RdTnzrj/f2yIbg2WQS+mRWjPOhjzPEBRcYTh58omhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:5a:b3:ea:9e:43:eb:e6:b6:57:73:f4:5b:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Validity
Not Before: Oct 20 04:02:24 2025 GMT
Not After : Oct 21 04:02:24 2025 GMT
Subject: CN=824006e83ea639da174dbc522cf6b291d2b7c117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:46:f0:c8:e6:de:57:c0:13:8e:c5:34:53:
ce:6a:c1:21:5d:1a:4d:b8:65:25:06:95:a7:41:7a:
52:0e:ef:8b:fe:e6:2f:de:15:8b:37:de:69:75:fd:
2b:f9:0e:f8:3f:07:39:77:e8:09:5f:ab:26:15:87:
72:31:85:37:ba:e7:dd:5b:d8:af:02:ce:d0:f0:7b:
df:1e:86:d3:d8:c6:5b:06:06:5d:b8:e7:d5:01:c3:
cb:0b:d5:c1:db:6c:ec:f0:7e:a5:76:e7:f3:b2:99:
8a:98:02:81:ab:41:e3:fa:4e:2b:3c:3a:2c:4a:02:
e9:6c:0f:1f:86:55:4a:41:31:54:4b:c5:0b:11:42:
7c:ca:c5:a3:9d:2d:4a:9d:0f:1f:98:51:3f:85:45:
97:ef:2d:47:e6:7b:09:f1:39:d5:6a:af:05:72:08:
61:a5:da:4d:10:80:60:d0:72:d0:bd:cc:14:6a:cb:
ad:a1:3e:f8:77:2e:46:d6:d4:59:93:69:87:7d:14:
85:60:b1:cd:18:8e:9f:90:e0:53:b4:a2:52:a2:45:
81:c6:57:a9:2f:84:07:08:9b:14:ed:dc:8b:bf:a3:
17:e4:0d:4d:2a:55:7c:19:e8:b3:7b:13:cd:90:5f:
d2:58:d8:8b:db:8e:40:ba:44:84:60:30:7e:a1:ae:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:40:06:E8:3E:A6:39:DA:17:4D:BC:52:2C:F6:B2:91:D2:B7:C1:17
X509v3 Authority Key Identifier:
keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:78:98:a0:92:8a:a3:19:96:69:bd:d8:49:00:d6:16:b3:
a5:42:f1:11:05:be:9d:9d:bf:a7:de:33:31:2f:e1:a2:ef:28:
76:db:ce:af:09:ca:1d:bd:8b:86:e3:05:9d:ef:9f:84:cc:52:
0f:9b:7b:af:36:ee:c2:54:9b:4e:ce:89:24:9d:0c:f4:54:cf:
09:97:50:41:b2:ad:09:c0:2b:ed:41:2e:e3:73:a7:32:50:e1:
cb:f3:8f:97:1b:89:bc:be:87:ed:ce:39:ac:ee:17:46:ae:b8:
e9:cd:48:92:55:09:d7:16:b7:27:4a:f4:ee:73:4d:be:d4:7a:
da:45:44:61:1e:14:4d:db:bc:fb:e3:43:d9:0c:19:5a:b9:e9:
9c:dd:58:64:bd:21:be:c0:36:cb:5b:6e:56:53:5a:1f:20:cb:
71:4e:ad:95:00:86:6b:87:5a:2e:52:ed:fc:86:15:6c:75:48:
9d:eb:27:aa:e5:03:57:e0:a9:9e:c5:03:9b:42:7c:66:22:80:
f8:46:68:fc:22:3c:71:21:ee:c0:d5:ee:e5:39:91:c8:84:16:
c5:cb:c9:6a:bc:24:80:9f:41:64:2c:4e:36:e1:6b:43:11:b6:
71:79:82:3d:fc:f6:03:0d:e6:a6:d8:c8:35:81:76:fb:6c:13:
a8:15:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:45 2025 by rpki-client