Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: YRjgMGN4LtB+xv66uRVzmGq5oyVJ8pit4mLZh2VPd3Y=
Subject key identifier: AC:A9:3C:9E:1E:AE:32:AD:9C:9F:9B:CA:94:DB:DB:BD:20:EE:BC:F5
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019A50E4333AD14598931E52C36B9EA8ED65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 1072
Signing time: Tue 04 Nov 2025 22:02:03 +0000
Manifest this update: Tue 04 Nov 2025 22:02:03 +0000
Manifest next update: Wed 05 Nov 2025 22:02:03 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: UwgABr55EQ4fAEjczwmbp2AXHiZTVSHpsOhrYL9A3Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:33:3a:d1:45:98:93:1e:52:c3:6b:9e:a8:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Nov 4 22:02:03 2025 GMT
Not After : Nov 5 22:02:03 2025 GMT
Subject: CN=aca93c9e1eae32ad9c9f9bca94dbdbbd20eebcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:30:ce:f2:e9:3c:ae:19:9f:7b:67:a0:02:
c7:8f:15:a3:8c:38:e6:27:a0:33:f9:c4:b4:80:7f:
c1:88:30:90:34:89:0b:84:bd:4d:6e:23:3e:d7:4f:
8e:45:3e:60:5a:b4:ec:1e:20:50:f3:1a:64:45:19:
bf:00:28:fe:ba:4c:4c:a3:49:00:06:71:79:58:ad:
ab:99:22:8e:90:9b:23:aa:fa:f8:13:bc:65:09:6d:
13:f5:a4:79:60:13:19:5e:1b:7b:ec:bc:2d:d0:b3:
04:49:ab:e9:bc:28:69:fe:ac:a3:b0:33:63:62:82:
b4:2f:f2:13:d5:c4:ce:1a:82:a1:83:73:28:a2:b1:
43:c6:ed:f2:1b:d3:6d:2f:c4:ab:d6:c0:fc:0e:3b:
2c:67:c7:38:32:fd:b4:5e:d9:79:e5:f7:fa:c8:67:
2f:98:51:f8:30:ca:44:de:67:63:b6:68:b3:d7:12:
2a:27:fd:02:4e:35:5e:46:11:5b:d3:57:fa:a7:5e:
8a:1b:47:3e:ca:86:80:51:64:91:bb:7f:99:a3:47:
40:bb:b6:30:86:a5:68:1f:18:94:91:31:2a:d2:ff:
89:89:56:96:47:99:60:3a:21:93:5e:7b:7c:a5:2d:
97:a3:c8:71:e2:ea:d6:66:81:70:25:6e:98:b3:87:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:3C:9E:1E:AE:32:AD:9C:9F:9B:CA:94:DB:DB:BD:20:EE:BC:F5
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:d1:6b:1e:9e:87:6f:8b:af:a4:05:d7:62:45:dd:2d:de:
b5:c0:57:f9:3d:42:2b:46:a0:78:71:00:ee:26:1d:be:05:a7:
a9:31:6a:c0:99:35:4c:47:45:b0:d9:33:ec:ea:53:ce:c4:83:
61:ca:72:1e:12:1d:2f:e3:76:eb:4f:61:3d:eb:9a:6f:90:57:
cd:8a:a5:72:d7:f8:31:05:70:3b:07:ba:ad:a5:0f:14:d8:48:
66:5c:55:a2:82:db:33:71:dd:8e:d3:d8:9f:26:38:e9:09:34:
bb:4f:28:f5:8a:39:df:b4:a9:19:27:46:11:fd:eb:db:d6:31:
c4:2b:ba:c1:25:d7:9a:d7:c7:ae:1e:80:bb:28:80:7b:94:ae:
5a:0d:d9:e3:94:1b:96:65:9c:13:bd:eb:e7:95:fe:3a:6f:02:
7b:55:bc:90:fa:46:c6:18:0d:da:ca:a7:09:34:1e:f0:8a:31:
b1:77:a2:af:6b:eb:ae:ba:b8:55:f5:4a:ad:03:d4:4c:a1:85:
de:31:b2:92:9a:3f:e9:77:87:ae:9c:84:41:99:4d:72:b4:46:
2d:57:40:4e:fb:73:97:30:4b:0d:30:ff:68:ca:7b:09:1f:94:
3e:3c:5f:ea:6b:64:c5:f8:c2:77:42:0b:68:45:fb:7b:3d:65:
2e:0b:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:18 2025 by rpki-client