Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: 59jhvWN8xOs/y9OzVuuLxcaxTmWqywTOS4ifsYK6qTg=
Subject key identifier: EC:CA:E2:E6:BA:35:2A:7B:4A:A3:A8:A4:53:13:4D:B3:DD:9B:1E:66
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 019A4DAACDCB612E93637632942516630684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0A77
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: DxjMJhzZLRIj/tWe1oaKP3JljggZiE37nVAv03z6QL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cd:cb:61:2e:93:63:76:32:94:25:16:63:06:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=eccae2e6ba352a7b4aa3a8a453134db3dd9b1e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:b8:2b:29:0c:d7:6c:19:27:18:a7:bd:43:
ca:8d:90:7a:24:dd:2e:d7:82:90:65:97:a8:1b:94:
ef:e1:3b:a5:39:61:cc:7a:52:f8:ab:a5:77:ba:0e:
2e:9d:b2:78:37:c2:dc:fd:42:44:31:c6:55:18:53:
37:c1:a9:54:ef:41:51:40:f4:88:af:22:83:0e:23:
72:ba:22:eb:1e:7f:4a:27:62:24:8a:ec:86:28:16:
2c:e9:4c:f6:55:e9:4f:68:32:9d:e0:fe:c9:b7:27:
c0:cb:d8:9d:8f:22:8f:ce:3c:65:c3:46:ab:43:59:
51:ae:b3:66:55:4f:4c:34:b9:f2:44:8f:c5:5e:ef:
c8:1e:eb:53:e3:80:39:43:91:0c:8d:31:6c:93:f3:
95:3f:79:ee:1d:c3:a2:b1:45:91:e9:5c:f6:ea:0f:
66:59:32:31:f9:ba:59:20:8e:19:9f:73:28:54:ac:
a3:50:40:b6:e0:39:51:d1:1a:6e:7a:ff:fb:ea:11:
fb:0b:f8:23:3e:f4:6e:b5:a3:75:9c:43:e2:2e:0b:
08:57:df:0a:9a:fa:9a:c3:b0:fa:40:42:cd:dd:27:
cf:e2:47:3a:36:eb:be:e9:38:4d:cc:1f:8c:c3:97:
5e:7c:ac:7d:4d:e9:17:bc:18:a2:e3:49:c8:3e:db:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:E2:E6:BA:35:2A:7B:4A:A3:A8:A4:53:13:4D:B3:DD:9B:1E:66
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:84:8a:95:33:71:63:1d:04:e6:14:28:8a:36:f4:25:a0:
51:50:b6:b7:94:b0:d6:ef:01:be:0f:bf:7e:b3:98:17:6f:ed:
17:09:1f:b7:2c:b1:59:cd:3a:65:0a:30:e6:73:7d:58:5d:a6:
2e:c9:bb:d0:b9:5d:8f:c4:cc:73:8b:33:28:42:2c:3c:b5:7c:
fd:aa:42:6c:0f:ac:d6:11:f4:6f:31:ca:87:6d:1b:05:af:ae:
48:be:6d:17:95:69:c4:cb:51:f4:db:bb:29:f6:e1:a2:0e:d8:
5b:5b:a3:cc:de:3d:55:a1:fa:a3:4d:1d:2c:6e:02:72:e7:69:
d6:79:ab:0c:a2:f2:c4:6a:3b:e4:3e:a0:cf:58:00:8d:d9:42:
e3:9a:b8:a0:09:b3:59:ee:ca:61:71:2b:81:5f:46:e3:ac:d2:
e9:17:94:40:1e:ed:3b:66:ac:75:d6:48:17:1a:b1:02:a6:1b:
ba:ee:e9:19:27:8d:9c:7f:99:85:29:97:85:00:b7:3a:0e:1f:
c3:1e:5e:6f:fd:51:9f:de:78:bd:3f:29:59:f8:ea:fd:39:11:
b1:ed:b0:3e:29:e7:75:9e:4f:43:1d:9d:6b:81:df:63:5e:ed:
77:42:c3:3b:36:7c:ec:1b:4d:b7:c1:09:47:a9:01:81:ea:bc:
fb:f2:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:52 2025 by rpki-client