
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: 2cpJEvyIz+Q1SOxZEGsClQ0DuWdsvEOxolJr+4eMNRE=
Subject key identifier: 2D:05:1F:98:78:9D:F7:2E:C5:0B:40:D7:8F:6D:EB:03:29:E6:A0:C8
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 0199FBEB7FE6830F1FB451631E5AFF222240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 0769
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: Na7A3HapzckqrUGMmO4pdrjGfodu+16QhijfpUUCDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:e6:83:0f:1f:b4:51:63:1e:5a:ff:22:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=2d051f98789df72ec50b40d78f6deb0329e6a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:85:47:4a:5c:40:69:88:98:d3:93:fe:f5:
85:95:fe:59:e1:42:85:75:88:43:cd:59:14:0d:c9:
f4:02:7e:7a:80:bd:6f:22:00:f5:4c:56:c3:8c:71:
65:97:6a:10:ad:78:40:45:e5:56:32:17:c3:53:27:
1f:f1:f1:5d:88:5b:5f:ab:37:e5:ca:59:c4:1a:20:
14:a1:20:a3:88:7c:db:75:4a:a5:d7:d5:0f:82:02:
5e:a8:64:83:10:21:77:ff:ca:df:78:3e:fc:a9:8a:
7a:f5:2e:e2:3d:38:9b:b5:b5:c0:f4:79:0c:98:41:
78:7e:33:ac:fd:67:1e:4e:7c:57:33:13:e1:c3:01:
50:d6:78:63:f1:6f:e0:f2:4c:34:6f:4a:ca:24:a9:
4b:01:60:ad:b1:6d:2a:67:82:f4:f9:c4:4a:1c:d3:
66:90:7a:73:0d:72:4d:c5:89:b7:1f:d2:b7:72:e8:
17:c8:02:aa:49:2a:b7:0d:fa:05:f5:3d:3b:ed:cc:
ee:be:fc:20:28:3a:58:77:9d:04:75:bc:f6:d8:b3:
0c:ca:a4:ec:47:c9:d9:92:d0:8f:8b:b3:d3:77:02:
b7:7c:c2:ff:13:d4:f0:62:33:7a:a3:82:49:b9:c4:
71:93:e3:59:c7:66:a9:a0:1e:fc:18:25:5f:f6:8f:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:1F:98:78:9D:F7:2E:C5:0B:40:D7:8F:6D:EB:03:29:E6:A0:C8
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:42:8f:0a:d9:55:c3:2b:0d:8a:11:72:22:e4:6f:54:9d:
6d:b2:3f:e8:c8:ba:2a:7f:f8:fb:8c:05:a1:1f:84:ba:8a:dd:
87:58:cd:d3:51:0a:8d:be:62:65:2d:62:39:5f:5a:ce:76:f3:
14:da:3b:ab:28:0b:0e:25:a4:72:26:9d:23:6a:2a:fb:f9:da:
73:7c:1d:27:dc:b1:eb:09:f5:ad:b3:c7:13:ce:46:3f:25:45:
9c:55:fb:b0:c2:58:07:32:c9:c6:d9:bd:05:f6:6c:8b:4b:35:
43:a6:1b:77:61:16:e7:32:3a:46:6f:d6:9d:8b:c8:53:1a:69:
c1:cf:77:37:0f:e9:ea:b6:b5:1c:bb:fd:a0:70:22:f4:96:9f:
31:81:e4:71:2f:c4:38:4c:79:bf:a0:9d:4d:49:d8:da:25:2b:
ad:13:d7:1c:8d:d0:f4:3b:ac:88:af:57:13:b0:d7:d3:2f:76:
47:16:a7:58:d2:82:25:f4:e7:82:cd:ee:17:87:a3:30:70:fa:
d3:13:c4:b0:97:ca:e1:70:9b:05:e8:e4:2b:bd:e1:77:3d:01:
e2:9e:eb:9d:37:f5:07:c0:6d:83:7a:0e:e1:6f:94:66:d5:81:
08:76:71:45:27:15:40:9c:e6:f8:01:22:21:e9:6d:41:d1:c6:
9c:dc:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:00 2025 by rpki-client