Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: WMBJjxbMvmqJ4RBRuEV7F2tomCTtVZLCWruC6MCYVi8=
Subject key identifier: B5:E4:C5:CD:2A:41:25:11:67:C2:87:73:C2:ED:4E:72:9D:14:C1:E7
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 019A4EF4A7EE23B92B86542423ACD8F310A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 0734
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 7jG7Zb038+NnZLr9do+HAJH6Bl1xFewgPVYbEfDTOhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a7:ee:23:b9:2b:86:54:24:23:ac:d8:f3:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=b5e4c5cd2a41251167c28773c2ed4e729d14c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:c8:9b:de:29:7e:24:1c:cc:72:b5:59:a7:
b4:50:a9:ab:d9:45:3c:28:01:31:f3:cd:cc:b9:49:
03:8d:9a:d5:ef:5c:19:3f:2d:2c:60:36:e1:ca:68:
3f:54:86:d7:79:da:59:3b:2c:d1:a2:13:1d:dd:6f:
1c:92:c7:98:cf:ee:5c:e8:68:da:37:69:57:a8:a2:
bc:b6:c0:0a:e0:4f:22:c8:48:5b:c5:8d:12:13:8f:
68:7c:7c:46:36:7d:5c:1c:f3:6b:d5:d9:70:2a:51:
bb:05:ae:a6:95:ec:af:a4:67:20:2d:16:38:a7:e4:
4b:db:6d:d8:cc:df:85:bb:0d:db:4c:2f:f3:4e:67:
a6:69:86:76:e3:c1:54:1e:6f:c5:45:3b:61:54:ad:
1a:1b:2c:4a:64:75:9e:8c:2b:90:83:19:4b:f2:99:
eb:7e:a4:b9:5b:0d:31:4b:81:5f:c6:df:4d:ff:fd:
54:63:f7:b0:d9:cf:0a:0c:41:e1:90:a5:95:78:dd:
0e:fd:36:9a:69:95:9e:fc:10:c7:31:cd:a2:f9:72:
a6:1a:45:ac:7a:51:c1:91:2e:a3:d3:a0:1e:4a:88:
4e:40:ac:02:b2:c0:01:bc:7f:dd:32:4c:56:49:a5:
e7:33:2b:e7:24:32:97:7c:43:c2:c3:62:b6:62:d0:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:C5:CD:2A:41:25:11:67:C2:87:73:C2:ED:4E:72:9D:14:C1:E7
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:47:86:4e:51:5d:6a:7a:d3:10:fe:f0:b2:5c:b1:46:62:
c2:b4:9c:f9:30:8d:60:69:45:88:39:c7:2c:60:de:bd:4b:ad:
0c:37:6c:27:21:a6:b6:a8:a7:9d:cf:24:80:8a:b5:d3:9a:5c:
5c:2d:fa:51:61:f9:30:ed:84:c9:53:15:93:2a:2d:95:4e:1c:
fa:1f:30:85:6c:bd:be:f6:4a:92:70:c1:44:bf:ab:5b:5e:87:
11:2f:1c:41:52:97:f6:ac:0a:f1:53:c8:66:48:fc:59:56:aa:
8c:aa:23:33:94:e1:bf:01:d0:9e:19:0d:a2:2e:b8:0b:0a:ea:
17:c7:cd:e2:2f:ef:5c:54:d3:e8:db:a9:84:f4:63:41:28:88:
c6:50:a0:35:18:be:05:4b:98:94:e5:64:f5:60:e8:5b:36:e5:
e4:68:b6:cf:ff:f0:fb:94:af:b7:c1:7f:42:0c:67:1a:8f:92:
56:e2:a6:31:f4:f7:af:98:21:b9:2b:9d:50:97:65:cf:1a:da:
a3:ba:79:e7:ad:37:b3:de:0c:fe:b6:b3:93:ea:2f:c9:da:33:
d5:c1:52:98:ea:d1:0f:d8:a4:ba:dc:8a:56:f2:7f:8a:25:26:
94:b4:36:2f:22:09:8d:92:aa:b4:45:36:2c:c4:24:ee:31:11:
7c:3e:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:25 2025 by rpki-client