Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier: /GQUH+QEDnZrMk7EOLQ0wrRMZgmV4GdiTy9w7+KRNjI=
Subject key identifier: 1E:0A:92:7E:5A:C1:67:DC:9A:48:BA:77:AC:83:DB:61:36:A3:84:DE
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 019A4E18B8554A46DE0F795ADA9D02AFB616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number: 0499
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: eniPp44mz5cV2dqmGmE4CcypTzGV/ej+qkT0i2IR/wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b8:55:4a:46:de:0f:79:5a:da:9d:02:af:b6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=1e0a927e5ac167dc9a48ba77ac83db6136a384de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:20:a9:6e:98:83:c0:50:2d:1d:53:75:20:
dd:3e:30:56:96:53:ff:df:65:ad:f2:8b:8c:eb:13:
1c:4c:d6:6b:23:10:25:e9:6f:24:68:b0:91:f3:c6:
28:12:fc:1b:f0:12:ff:ab:06:cd:c4:21:2f:28:fa:
fc:2b:b5:e1:45:6e:92:1d:b2:36:d2:e6:d7:4c:77:
3e:5a:1d:3b:a8:30:e5:b6:5a:5d:6e:dc:41:d8:c9:
a6:69:b6:0b:a8:87:70:67:44:f2:2d:6f:d9:3d:b0:
bc:3a:f5:9a:1b:f9:a3:61:6f:0a:2a:37:b4:f6:7a:
c6:63:14:cf:a8:a6:29:e6:38:c4:80:c4:b0:ec:d4:
81:b0:11:f9:a6:58:6e:de:e8:49:41:96:cd:26:c2:
f9:2e:45:39:aa:00:37:96:ee:39:43:76:f2:c0:8f:
f4:86:b1:94:df:44:9e:07:85:58:ea:10:19:76:6e:
78:fc:9e:56:c3:34:c9:2b:fc:65:d9:66:db:c2:01:
1f:8d:a2:da:db:74:5c:a1:c4:89:c0:e8:00:c0:17:
73:bd:c7:71:2b:d9:32:52:83:9d:90:0f:77:e7:d5:
01:36:5e:26:60:28:d6:a1:2d:2c:a9:d5:09:df:37:
de:91:ad:59:fe:26:65:eb:49:a6:e4:87:df:a6:10:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:92:7E:5A:C1:67:DC:9A:48:BA:77:AC:83:DB:61:36:A3:84:DE
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:3a:7a:27:b1:3d:04:6e:df:56:6d:7d:79:42:8e:a0:06:
fa:35:20:b2:3d:1e:d8:24:da:7f:a6:01:a4:ef:09:34:17:4c:
db:a9:32:4b:6c:75:68:58:01:e2:f9:08:bc:da:fc:03:fe:d3:
e7:6a:f7:38:aa:da:56:b1:f5:95:80:8a:7b:86:eb:9c:05:60:
68:9c:2e:3d:9a:35:5f:7f:b9:1c:f4:a6:31:2e:4f:9f:d1:f4:
70:61:49:e6:4e:2a:55:c0:61:54:4d:6f:ff:ea:1f:5c:6a:1d:
8f:f7:31:d3:3d:23:49:99:80:d7:e1:63:ca:8e:34:95:de:31:
70:e7:1f:bf:72:cc:9c:9a:8c:2c:c2:1e:71:3d:a0:f7:5d:26:
8b:7f:87:c8:8d:d6:65:6a:e6:48:d5:60:a3:a7:7c:8e:16:b9:
c9:39:fe:e1:85:2e:2c:84:ff:4a:39:6d:d2:75:23:31:6d:fb:
33:98:d5:0d:1d:e0:00:24:a0:d0:68:14:4b:b6:16:19:ca:0e:
dd:f2:ea:47:c9:6e:31:87:ae:92:fe:b4:62:0c:37:7a:5a:36:
88:e8:63:7f:6d:20:60:14:04:f6:9b:60:87:57:d5:cd:e1:fb:
20:c7:89:73:bc:d4:48:17:36:ce:1f:36:23:6f:22:aa:3d:7a:
d6:4f:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:33 2025 by rpki-client