Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: NUgrEXfH4nnVThrP6Z300bF7EfQ4l6YRAmrtYS7gXTs=
Subject key identifier: 49:1B:0A:28:53:8A:3A:23:F1:B7:26:AE:3F:B1:08:D7:06:8B:A6:96
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019A4EF56E699FBF790E4437DBC26EA1CFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 0447
Signing time: Tue 04 Nov 2025 13:01:38 +0000
Manifest this update: Tue 04 Nov 2025 13:01:38 +0000
Manifest next update: Wed 05 Nov 2025 13:01:38 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: adCszh8uCTpRsGGMigr/NTbFObNgczGsO6Q8OMANtM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6e:69:9f:bf:79:0e:44:37:db:c2:6e:a1:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Nov 4 13:01:38 2025 GMT
Not After : Nov 5 13:01:38 2025 GMT
Subject: CN=491b0a28538a3a23f1b726ae3fb108d7068ba696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:4f:86:ec:e0:4c:81:be:c1:ad:17:a7:ef:
ea:c8:ed:75:92:4f:f3:83:15:53:2c:13:aa:00:f9:
59:66:18:5c:ee:2e:7f:e9:a6:34:97:cc:0c:2a:23:
a1:28:34:f8:4d:d1:c3:d1:18:73:bc:d4:aa:c1:c0:
c5:4e:07:64:64:63:8f:f8:7c:e1:ac:f7:af:48:fa:
9b:17:5c:b5:d0:19:df:4d:d6:46:21:8c:04:38:e8:
4d:f4:19:1c:2a:2c:86:ec:24:5f:b8:05:48:5a:54:
23:18:d6:92:a9:8a:30:96:40:2a:c2:4f:39:e4:d9:
a4:52:e5:7b:4c:be:53:d6:6e:fb:e8:31:69:fb:49:
12:11:69:2b:b6:ea:ab:c2:23:4a:8f:fd:98:d9:4e:
10:57:b4:9a:e3:72:59:ef:31:b4:ed:3d:61:a5:8b:
b1:9e:d1:9e:27:3b:1e:6b:77:15:74:82:82:a2:2a:
3a:ef:40:7c:e8:c8:26:6d:1f:ab:9d:de:6f:a4:fc:
42:e1:64:3b:70:1c:ab:fb:10:8c:7c:d1:d9:cd:51:
75:41:81:d8:a7:e8:d3:bf:8c:ab:6d:c2:83:9b:76:
c4:6c:e1:ce:27:13:94:89:a3:a6:14:10:f1:ae:43:
99:80:7d:13:8a:55:e8:3c:6a:ef:0a:63:dd:63:ef:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:0A:28:53:8A:3A:23:F1:B7:26:AE:3F:B1:08:D7:06:8B:A6:96
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:ce:d6:28:11:a5:90:30:0c:b7:2b:14:f2:76:ad:87:08:
e5:57:d9:89:b7:04:c7:3c:d4:00:ca:a1:e1:67:ca:5c:f2:3e:
fa:b3:b5:6c:ee:85:d5:5c:1d:ad:60:18:ab:15:c8:ca:db:39:
77:30:2c:9b:53:80:6d:43:cb:56:90:8c:20:30:2e:4f:df:9f:
1b:1e:13:71:50:b7:f0:13:8f:f6:b8:45:60:eb:8c:f3:17:5e:
d2:f2:88:5e:95:19:50:86:a0:6f:37:44:0d:7b:77:82:56:f1:
c7:da:33:26:14:40:6c:f2:25:c1:a3:83:74:45:00:21:81:bc:
ac:26:a0:cf:b9:85:6e:4d:a1:f2:ab:86:05:44:af:4b:8a:c2:
63:28:b6:36:d2:17:d9:5c:4b:3d:55:5b:ce:61:2d:d8:93:52:
a4:0d:0b:1f:6b:5e:7f:8d:7c:da:09:c6:2f:d2:72:49:3a:62:
b1:49:a9:ef:f3:34:14:18:60:6c:a5:db:06:63:9b:1e:80:89:
95:3b:55:ec:fd:75:ae:af:c1:f3:02:d0:21:28:00:0f:8b:53:
59:4c:87:a3:90:28:54:23:4a:ee:f5:20:13:3a:82:f4:bb:30:
e0:f2:c1:19:68:12:22:2c:33:ae:f7:36:0e:8f:8f:f9:eb:10:
76:df:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:16 2025 by rpki-client