Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: G2M0UM8KwQ2XypWziW0svvCaxjQK1jgu5sJXTzCGqDs=
Subject key identifier: F5:EF:0D:E4:91:4A:FF:D1:38:F7:8B:0B:86:D9:13:F1:28:19:FD:D0
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 019A503DEFBE450A42928432C04F5277987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 05E5
Signing time: Tue 04 Nov 2025 19:00:27 +0000
Manifest this update: Tue 04 Nov 2025 19:00:27 +0000
Manifest next update: Wed 05 Nov 2025 19:00:27 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: tTlnQZdHgLLN/o7Un9ggUX15m1rdzHfNgsNGLnlpI4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ef:be:45:0a:42:92:84:32:c0:4f:52:77:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Nov 4 19:00:27 2025 GMT
Not After : Nov 5 19:00:27 2025 GMT
Subject: CN=f5ef0de4914affd138f78b0b86d913f12819fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:c1:bd:67:10:c4:25:99:11:98:f2:4b:e0:
7f:b9:ef:68:6d:71:f0:b4:57:fb:41:c5:11:7d:91:
f5:2d:26:85:10:66:d9:db:9d:93:09:b7:75:cb:45:
de:0d:ae:d4:f1:6f:4b:30:e7:d6:6f:f3:e8:c1:ab:
a7:64:f4:4e:00:0c:0a:6d:dc:71:4f:ae:c2:0b:b3:
e6:24:2d:22:f6:a5:47:82:bd:9e:a0:4f:cc:aa:60:
b7:2d:73:b6:67:af:82:4b:66:c7:10:cb:9a:a9:1a:
33:09:84:59:1b:64:e7:bf:a3:06:00:2b:da:6a:97:
ed:1a:12:d2:db:6c:eb:c4:c9:58:63:80:c0:2c:6e:
4d:77:fa:9e:8c:8c:ab:02:0b:73:06:c3:29:6b:60:
39:77:bb:56:5d:f8:0d:ff:65:b6:7f:59:08:79:f4:
33:6e:88:3c:53:9f:88:93:38:d5:e0:72:e4:1b:39:
ef:5b:a5:e9:20:47:69:b4:ab:8d:13:76:f1:71:00:
73:c9:d2:2d:4f:49:86:f7:01:bb:53:5e:25:f5:b1:
2a:90:3a:be:c5:2c:ee:a2:f3:9f:fa:57:e5:79:11:
cf:ad:25:c3:c9:eb:15:91:ce:4e:f5:4b:cf:a7:4c:
4e:21:eb:9e:7a:aa:2d:e4:98:d6:e9:48:c0:ca:ac:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EF:0D:E4:91:4A:FF:D1:38:F7:8B:0B:86:D9:13:F1:28:19:FD:D0
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:2b:c2:8a:30:66:76:e8:bc:37:09:46:c8:a6:a5:10:20:
7c:07:e7:b2:d5:ec:9e:c6:16:38:b4:0c:20:97:36:7a:7f:37:
9f:f5:e0:db:a8:74:62:8e:50:84:5d:65:de:d9:16:c9:70:7e:
ec:3b:3a:4e:d0:85:cf:7f:cb:f1:e5:ad:86:23:d8:fd:e1:e7:
09:1b:2d:c9:a0:8e:6c:20:72:39:4d:2e:05:b9:80:bf:e3:fb:
57:c2:3c:d0:95:4b:9c:c0:4e:9f:b2:d7:55:07:5d:13:40:fb:
72:a6:43:67:a6:9f:70:6a:22:f9:89:8b:9d:e9:03:76:2e:b8:
9a:8c:81:79:32:29:28:0c:4d:6d:50:96:84:a1:45:05:34:f5:
50:fe:cd:ac:91:68:6f:85:bd:e4:eb:d6:ef:15:ea:19:0f:04:
88:ac:1c:95:1c:f0:d7:78:90:a4:e1:1d:17:ec:28:cb:61:f6:
69:5b:b8:66:68:4f:42:f6:66:cd:1c:87:02:4d:e7:72:f8:ce:
f6:24:2d:ac:8b:ad:5e:28:99:c6:d0:9e:42:c8:5c:a6:66:3f:
5d:6b:53:92:2e:dc:c0:f8:05:57:4d:d3:59:9d:37:be:96:10:
25:7c:3e:29:28:48:fe:f5:38:08:b7:be:db:cb:53:6f:b0:40:
3f:18:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:40:46 2025 by rpki-client