Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: O1O/Lu2dovtSrZ3ExvqTKcieAj3narrUVEzjtOLO+i4=
Subject key identifier: B3:80:A5:27:1B:57:24:8F:80:36:9B:98:48:EF:A8:45:03:A9:7D:6D
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 0199FBEBEB97F9D3748F2970A1BEC8E7D2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0B49
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: XoQ8xACSppPPZ8crna+pwM8K5CLVWPwzoQUU201SYyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:eb:97:f9:d3:74:8f:29:70:a1:be:c8:e7:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=b380a5271b57248f80369b9848efa84503a97d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:e8:48:bf:4b:67:0e:b8:94:b7:b0:f2:8d:
d3:ef:d9:c1:62:0a:0b:ef:a9:de:5b:57:d3:b0:f9:
08:cb:41:eb:fc:16:9b:eb:6f:f3:bb:72:67:98:dc:
e0:21:cf:ca:b0:b2:08:41:29:a2:0e:24:a2:0b:e2:
63:50:91:27:ee:a4:cd:54:bc:32:90:17:90:ba:00:
df:0f:52:50:2c:28:3d:04:cc:a2:77:20:c0:3c:91:
2e:70:8b:ef:45:5f:af:c5:1b:49:89:cf:de:6c:20:
44:ab:4f:6d:42:d9:11:bd:ef:6e:29:7b:32:96:71:
11:30:ac:d6:0e:98:3a:a5:c0:2d:d6:97:4c:83:78:
6b:06:80:45:4d:6b:11:33:9e:9a:b8:10:c4:aa:76:
a7:4e:58:99:42:ba:b4:51:ab:3a:14:c9:67:5c:48:
4c:0d:cb:49:e1:84:07:e0:6b:16:60:08:4e:e1:ee:
3d:b3:f8:2e:de:3a:17:f1:4d:f6:cb:69:44:76:6c:
84:2f:60:62:58:77:8a:45:3b:69:8b:f8:67:86:ef:
71:03:b3:77:3d:ac:9f:97:80:12:b8:17:de:f2:cd:
e2:7a:42:bc:a9:4e:9f:10:10:cd:76:bb:b3:ea:9b:
da:be:6a:6b:07:46:f7:a8:3c:b3:79:f4:24:a1:f0:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:A5:27:1B:57:24:8F:80:36:9B:98:48:EF:A8:45:03:A9:7D:6D
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1c:89:e1:34:49:c3:ff:a3:62:fb:4a:08:bc:78:83:5e:0b:
1c:0b:ab:60:0b:cf:4f:20:42:be:20:71:95:8b:e5:96:3b:d1:
23:b7:2f:91:a9:0f:be:a9:c8:d4:48:93:a6:0c:93:87:f1:3f:
01:b6:cf:00:a1:d5:c9:94:75:79:71:92:26:98:0a:26:8b:aa:
2b:4c:69:38:89:b6:a2:2e:42:b7:3d:c7:c1:b7:eb:76:d3:52:
2f:55:a0:10:b2:d7:7d:ea:b8:1c:d4:8e:a1:20:46:34:74:84:
38:ac:fb:bc:57:ba:bf:cc:a0:90:50:c4:ef:32:49:6d:5c:83:
35:f7:df:ac:df:1a:06:b6:22:dd:00:95:4d:f0:54:54:6e:40:
b6:14:e7:d3:ef:6a:c8:03:f6:96:e6:43:f0:d2:c4:0f:c2:c0:
09:5b:cd:9c:53:15:3f:88:f4:df:75:a1:b5:d0:ac:6d:3f:ee:
de:7c:a2:fc:7a:5a:19:65:04:62:20:1d:3f:76:6a:4c:46:fd:
cf:32:30:65:6a:af:78:78:9d:06:84:06:d5:fd:d9:0f:57:bc:
fd:4b:d5:8c:e1:4a:9c:65:5f:a2:cb:6e:82:e9:e6:c8:e2:84:
e3:f1:5f:cd:f8:21:a8:87:5f:59:52:a1:5c:20:b3:32:6b:70:
e2:ef:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:35 2025 by rpki-client