
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: pzFc9rY0f5Ql+JvU2+EHPWnFeh2RoGyhGxKytYoYdiM=
Subject key identifier: D6:48:48:24:99:90:AB:93:A9:06:81:FC:21:38:39:B1:3B:9A:E5:84
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 0198729843D910EED30D3E8C81CA8316CEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0981
Signing time: Mon 04 Aug 2025 01:00:37 +0000
Manifest this update: Mon 04 Aug 2025 01:00:37 +0000
Manifest next update: Tue 05 Aug 2025 01:00:37 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: RID3LrTY4rk7vVY3JmeBsYoJ+Qca16X1mJ7qD7f+zNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:43:d9:10:ee:d3:0d:3e:8c:81:ca:83:16:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Aug 4 01:00:37 2025 GMT
Not After : Aug 5 01:00:37 2025 GMT
Subject: CN=d64848249990ab93a90681fc213839b13b9ae584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:6e:17:2c:24:84:f4:f8:42:41:3f:89:d9:
5f:cb:ab:e9:91:04:aa:6a:99:0b:3f:8a:13:d0:25:
e3:13:c8:73:b5:57:52:b9:39:b2:04:20:cd:51:e6:
c3:70:2f:b8:a8:d4:3a:dd:70:71:4f:e8:8a:78:a9:
07:69:02:dc:41:42:b1:88:d1:9b:5d:4e:31:c1:01:
54:72:f3:c8:31:3c:f1:29:1a:e6:82:aa:ef:59:28:
ef:ee:00:2d:e7:d2:1e:43:91:ae:20:10:c2:be:37:
06:db:15:fd:f5:b6:0f:fa:5d:14:62:31:43:87:03:
32:e8:39:f4:70:79:82:7c:19:7d:c4:35:41:4c:35:
fd:31:5c:66:b6:9d:d1:a6:80:ab:c9:05:b9:39:4a:
2f:26:6d:c3:dd:6c:b1:19:fe:39:98:fa:bd:4e:32:
8e:da:97:1f:e8:1b:28:92:fe:50:27:e6:f5:05:b1:
e0:f4:65:c9:78:4e:ff:00:a6:8c:e1:a2:71:62:82:
97:3a:9c:f9:eb:de:d5:c7:0c:c9:6e:87:60:4e:7f:
fb:98:49:fe:7e:31:92:d3:b8:a0:2e:e9:3e:18:f9:
08:14:35:19:72:e2:fc:0c:8c:3f:12:4d:55:11:c1:
d3:3a:3e:f2:cb:cb:20:3d:9e:22:dc:74:2e:07:9a:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:48:24:99:90:AB:93:A9:06:81:FC:21:38:39:B1:3B:9A:E5:84
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:89:5d:ff:29:66:54:09:a8:a9:b3:28:9d:fb:65:8f:0b:c6:
73:15:aa:35:8b:3f:75:f8:3e:3e:b7:90:8d:66:ec:ca:9a:ee:
79:b6:fe:18:34:15:d9:f6:2f:38:cb:b6:45:27:e3:a7:55:d5:
9f:4b:74:b1:bc:8b:4e:fb:c4:b5:df:9f:4e:10:d3:43:13:f8:
ba:da:c5:3b:cf:c5:e6:ee:3a:07:c7:81:bc:46:b1:4e:90:30:
92:36:3c:ac:18:d7:54:a5:b3:06:d5:65:2f:10:dc:b5:1b:a8:
80:a0:99:ac:b9:96:ad:4e:92:6b:f1:7f:99:1d:af:01:30:99:
96:7f:93:9b:a3:38:52:f3:cd:ed:74:5f:f7:88:2f:94:d6:1a:
b0:00:d7:40:94:ea:c7:d6:8e:5f:c8:f4:27:16:2e:cb:24:60:
9c:84:cb:45:49:1c:b4:84:30:43:53:68:cd:35:6f:82:bb:35:
7c:f2:46:a5:cb:5e:14:26:c0:19:88:8b:e4:87:b9:47:e9:4f:
75:93:64:e2:0e:d5:88:de:48:92:7b:21:d9:d7:f0:56:d2:a3:
bc:c3:3a:9b:55:36:d1:dc:1b:de:97:15:61:0b:f9:22:c2:18:
aa:99:2c:f6:a4:5b:f2:b6:0a:48:51:64:a8:b6:cf:90:8a:5c:
d6:68:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:02 2025 by rpki-client