
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File: 6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier: hoJPZzcPlNVWzTgiyi2/MwGPxg1w6fHlJI7vSPUKAqY=
Subject key identifier: 8D:2F:B5:12:B2:DB:5A:D9:44:3E:3C:81:B3:50:6C:ED:43:3A:7A:B9
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer: /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial: 0199FBEB7E47AF8E20E2C42FEE1511362CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number: 0A87
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: CiKDWIZAM02BykL6xqQNaJDEFmjtaRtfiMBXj/PU+oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7e:47:af:8e:20:e2:c4:2f:ee:15:11:36:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=8d2fb512b2db5ad9443e3c81b3506ced433a7ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:e9:86:dd:98:11:1e:35:b7:b5:08:3b:82:
b2:2e:e1:32:e7:4c:11:36:94:24:6e:77:ec:60:4e:
b4:80:73:1d:ce:ac:f8:ab:ee:e9:6e:fe:16:8d:07:
8c:fa:4e:af:6e:2d:36:c9:33:8e:ac:72:5f:22:a7:
12:e9:62:71:a2:87:aa:c8:e2:d4:0a:4b:31:82:a3:
1c:1b:32:08:ba:74:b0:aa:a3:03:ae:5d:5d:99:31:
7f:1a:ef:7c:be:12:39:7c:ae:62:0f:8a:cc:e2:4e:
3c:28:b4:5f:a9:4c:16:fd:8c:cd:a0:8f:91:b8:7b:
43:4b:65:8c:8f:d8:96:2d:76:ad:ab:09:82:d7:88:
64:51:76:5f:06:8b:70:93:dd:6c:0f:2a:a5:a7:eb:
08:cb:67:30:74:fb:c4:71:68:db:19:aa:d1:aa:af:
c9:1a:bf:48:7c:93:3d:cc:8b:31:e9:4b:97:39:f4:
4e:c9:c2:d7:4f:17:57:be:b4:e3:7f:b9:a2:51:14:
cc:1a:35:0e:35:d4:1d:9e:bf:8f:ac:5c:80:2f:77:
7d:d5:9d:ac:43:bb:50:e9:ff:59:2b:99:1b:b2:29:
3e:26:a2:98:9c:80:0b:cc:78:a2:db:5c:a4:27:91:
a0:cd:cb:17:70:d7:cf:ba:f3:a2:97:40:1c:c2:08:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:B5:12:B2:DB:5A:D9:44:3E:3C:81:B3:50:6C:ED:43:3A:7A:B9
X509v3 Authority Key Identifier:
keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a4:32:71:12:d6:67:f1:4e:83:11:02:99:99:cb:43:e0:56:
6b:29:69:4d:3d:11:85:d2:ac:a7:84:46:aa:e1:fa:e8:09:f7:
47:a8:43:f6:f0:21:33:3f:f7:34:40:70:b7:3c:c0:27:a4:9c:
15:ac:b5:00:30:b6:db:14:bb:77:f7:f2:c3:a5:8d:d3:3c:9f:
10:16:c1:a6:ec:84:4d:be:05:35:fa:2f:13:08:c6:40:d7:4f:
aa:e9:16:ce:81:52:8f:94:fd:7e:7b:fd:a5:90:00:d4:47:ed:
21:74:36:11:33:42:be:e8:85:1c:68:97:65:3f:4a:ad:6d:08:
87:80:df:d3:8e:a4:e1:ae:6f:aa:3f:59:a9:d3:b9:e5:b9:99:
47:2b:f9:27:aa:d8:5b:51:0e:bd:e4:95:73:82:7f:98:28:ee:
4d:15:fd:b4:a0:cf:c1:c2:10:be:34:17:47:65:25:29:17:81:
24:37:c2:c5:6a:63:26:21:bf:29:d8:fe:82:9b:56:cc:f2:db:
a0:af:9b:54:d7:d9:ee:87:e0:ac:69:bd:93:09:67:57:3c:fa:
bb:a7:ab:6a:49:0e:b0:74:36:12:7b:33:b9:0b:2d:d3:dc:2f:
2c:51:21:f5:54:3c:b5:95:13:b9:bb:de:00:6b:63:99:97:42:
2e:32:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:25 2025 by rpki-client