
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: AdBd0RUvPY1W+rsv4ztsVm1R9kN8BLYIB7xLbWuJI+w=
Subject key identifier: 8F:2C:8C:5D:2E:40:FB:F9:F3:67:5D:B2:C0:2F:1C:DB:20:8B:21:D1
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 019A537652D1577C3B2E2D765CF4F91CA99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 15C2
Signing time: Wed 05 Nov 2025 10:00:54 +0000
Manifest this update: Wed 05 Nov 2025 10:00:54 +0000
Manifest next update: Thu 06 Nov 2025 10:00:54 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: c2BCcSpdSHUziEWSs6h4aJSKHlV18bUp77Q/qqdVthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:52:d1:57:7c:3b:2e:2d:76:5c:f4:f9:1c:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Nov 5 10:00:54 2025 GMT
Not After : Nov 6 10:00:54 2025 GMT
Subject: CN=8f2c8c5d2e40fbf9f3675db2c02f1cdb208b21d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:d9:4e:2e:a4:5a:74:f7:0f:bb:28:75:3a:
d2:b1:1d:cd:75:7c:ac:b9:19:f9:5b:ad:c9:8f:70:
b6:8f:11:3a:53:18:e9:1e:95:cc:58:cb:34:40:21:
21:44:35:f3:c7:0e:29:99:82:9e:80:a2:99:26:b7:
52:65:3d:54:24:ab:c9:5d:f9:e7:ec:03:d5:9d:1b:
fb:f8:8d:0e:21:35:f9:93:a0:21:6f:6b:3f:b8:76:
ef:32:95:c7:24:cd:37:46:28:8b:39:78:90:c6:52:
21:f2:b4:12:d6:0a:72:45:ca:ca:2e:12:55:73:c0:
77:75:e5:cd:83:87:40:fd:01:47:38:f5:43:c8:e7:
d0:f8:c8:58:81:e3:db:8e:9e:06:52:aa:9c:59:ac:
fe:ed:d4:1e:dc:94:e8:b3:83:36:65:cc:d3:58:39:
48:97:f8:f7:fc:ac:55:a6:44:54:5f:22:09:95:51:
b7:39:64:cf:61:b1:42:68:31:d3:bb:a7:9d:07:a5:
cf:ee:36:e5:8e:8b:96:f8:91:8c:a2:53:48:da:6f:
e5:5a:90:8e:cb:38:e4:12:80:8e:f0:53:0a:d7:61:
20:3c:ac:29:b7:c8:d2:be:d4:c7:4c:a1:80:ad:38:
db:56:21:ee:9b:51:c0:8c:74:1b:22:f0:08:da:81:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:8C:5D:2E:40:FB:F9:F3:67:5D:B2:C0:2F:1C:DB:20:8B:21:D1
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:84:3b:ba:49:14:01:78:0d:8d:f9:05:d5:23:c0:33:a2:
d1:9e:3a:b8:84:7b:ff:db:6a:af:43:bf:0a:13:e6:bf:1f:9e:
bd:17:0a:19:f2:95:fb:dd:1e:16:5d:ce:e4:9e:cb:57:69:57:
1d:a2:b4:f7:46:7e:4e:62:a9:eb:46:a4:f3:3f:4c:ad:71:a8:
52:af:2e:62:88:66:d0:c0:75:67:3b:e9:ac:bb:c7:64:a1:66:
51:6f:cc:81:eb:35:83:85:2a:40:ef:b7:c7:78:6b:50:2a:ea:
60:7d:9e:2d:79:84:53:e3:1c:0f:5c:c5:bf:c4:3a:60:c2:39:
3b:67:2f:85:6d:00:ef:d0:4f:63:69:33:46:c0:00:4f:6c:25:
24:4e:51:a5:01:d2:f8:76:62:80:d3:0e:0f:5c:41:55:69:b4:
12:7d:11:c5:6f:ef:59:57:e3:e9:29:d8:ee:ab:b5:6c:46:a4:
1b:d6:e0:bc:16:49:60:69:30:ec:6e:fc:49:38:ee:a8:80:22:
eb:dc:36:d7:a1:0d:f8:ad:47:47:6d:07:90:c6:5e:cd:3e:90:
83:2b:57:a6:2c:6d:48:90:89:b2:6d:4f:6a:4b:49:fe:99:41:
80:8b:26:c8:32:40:9b:bc:76:b0:8c:48:aa:af:aa:35:45:76:
57:50:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:12 2025 by rpki-client