Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: AskZiMLPtFamvEwQYtIcpJYt0OPPZ4bq0cRqVub00hg=
Subject key identifier: D1:DE:DF:94:B3:A8:06:B3:37:71:9D:D1:64:D9:5C:60:44:43:EA:EB
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 019A51F5424D8483748595970482E626ED16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:00:18 +0000
Manifest this update: Wed 05 Nov 2025 03:00:18 +0000
Manifest next update: Thu 06 Nov 2025 03:00:18 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: CCg+u281CK4x3IMjhcG3NyaIDNpdlvoyD6e0C/nhi20=)
2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:42:4d:84:83:74:85:95:97:04:82:e6:26:ed:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Nov 5 03:00:18 2025 GMT
Not After : Nov 6 03:00:18 2025 GMT
Subject: CN=d1dedf94b3a806b337719dd164d95c604443eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:4d:ed:7b:08:c4:a8:13:47:4e:3b:0b:a6:
a7:73:77:7a:cd:19:56:2c:3f:e8:74:b3:dd:80:27:
e2:5b:eb:0d:e2:64:88:dd:fc:11:16:d7:f8:ad:b6:
45:c3:c1:eb:b8:29:8c:f2:fa:0b:34:1a:a0:0f:49:
70:35:82:88:e4:fd:92:93:1b:9b:37:a8:a4:c0:45:
0d:91:4f:7f:e3:e9:62:42:d8:0d:ba:b3:80:93:f0:
0f:3f:70:c8:06:9a:ac:c8:4d:6c:0d:9a:2d:92:ae:
6e:f0:39:44:c4:49:fc:4f:4a:2b:94:fb:ca:ab:fe:
f4:55:af:2b:01:a4:63:9e:8c:ae:c2:80:f9:03:5b:
2b:8c:40:3e:1d:97:3c:37:e5:fa:2a:c5:c4:c1:f8:
1b:af:f9:a9:8a:63:24:76:7d:55:d5:27:d5:fd:b5:
2f:4e:29:04:2f:30:0a:11:5f:fd:57:b4:12:43:56:
ce:a8:d6:ba:06:56:11:d7:11:03:a2:99:85:6a:08:
67:a9:f4:dc:63:38:8f:91:54:04:29:c0:e2:41:67:
ba:44:03:9e:ce:f5:48:47:7a:19:0b:55:3c:0f:28:
f9:f5:1b:1e:06:5c:90:9b:57:2d:16:e8:81:bb:5e:
32:46:bc:66:6b:e0:7c:bd:51:6c:db:06:2a:30:6e:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:DF:94:B3:A8:06:B3:37:71:9D:D1:64:D9:5C:60:44:43:EA:EB
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:24:07:2c:f4:9e:f4:0b:4c:d8:fc:99:ec:57:62:b9:d2:dd:
cd:09:de:a8:56:b0:f3:0c:f5:25:2e:c7:67:0c:cc:6c:f9:70:
dc:73:92:89:19:74:27:93:ee:9c:75:dc:e0:e9:44:d5:08:0d:
bb:b6:7a:77:1d:bc:97:9e:99:9d:a4:6a:00:e4:03:ae:07:d1:
ef:2f:96:72:6d:26:44:93:65:56:6c:01:31:39:fd:5f:7b:8b:
39:1f:34:06:2f:ba:c2:88:81:4b:00:61:d2:a6:8c:1f:03:2d:
9b:dc:93:e9:73:31:08:a5:96:94:f3:63:e7:b2:e0:c4:59:3c:
81:3d:c0:8e:05:04:e0:2f:5f:39:27:c1:dc:41:08:b0:89:55:
5b:36:49:16:75:10:6d:8a:29:5f:81:3b:59:03:d4:97:b8:c1:
db:bd:9f:7d:eb:75:f5:e4:d5:c9:5a:25:81:d2:73:02:6e:86:
1a:59:bb:e3:a7:f8:47:a6:ae:50:6d:89:1d:c0:d0:67:6d:43:
e7:e4:02:70:c1:2b:21:7e:06:4c:8a:c8:10:b8:f0:e9:ef:6e:
ee:bb:89:d6:ce:4e:4a:74:0a:46:3e:69:e6:5f:8c:45:68:1d:
f1:94:b6:2e:eb:b7:9f:75:fa:fc:18:14:08:c8:f7:7a:19:03:
30:04:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:45 2025 by rpki-client