Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: JL77NdsjsQu/w8vEjCam+kaOQMWgNsytXJ3Nq6p+r4M=
Subject key identifier: 25:C8:A9:77:B0:3E:43:C9:CC:95:00:46:9D:70:08:55:5A:E1:4F:A6
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 019A522C4CB92AD9C41218733C829D0B7859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 1418
Signing time: Wed 05 Nov 2025 04:00:26 +0000
Manifest this update: Wed 05 Nov 2025 04:00:26 +0000
Manifest next update: Thu 06 Nov 2025 04:00:26 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: ZEZ2Saiflp+8Avc9531hoOIQxzXDElRnj8ZRNftvJk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4c:b9:2a:d9:c4:12:18:73:3c:82:9d:0b:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Nov 5 04:00:26 2025 GMT
Not After : Nov 6 04:00:26 2025 GMT
Subject: CN=25c8a977b03e43c9cc9500469d7008555ae14fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:10:42:c5:9a:68:5b:00:da:90:6a:57:65:
f9:e2:d8:87:e2:31:12:a5:be:ee:c3:19:fa:4d:67:
71:99:5c:c3:8a:59:a0:db:6e:3d:8f:dd:33:0d:08:
b3:f6:8e:53:cc:9a:73:e2:25:85:c2:c3:e9:43:3b:
62:48:88:f2:2b:88:13:4c:05:c3:64:08:ab:80:d8:
d7:b8:0a:a2:38:f8:e9:5b:dd:61:9e:82:73:cb:17:
32:e4:73:97:5e:a1:ce:39:64:63:c9:fe:a3:88:64:
84:8c:51:ed:74:74:58:b9:1a:f2:41:9e:e0:bf:00:
e9:5c:3d:e9:2c:6b:1a:5c:02:62:26:1d:bf:5d:5a:
00:9d:20:ca:97:0a:56:4e:fa:a2:3b:d9:28:9e:7e:
22:f8:5f:5e:39:6d:2d:18:b0:78:01:47:90:e6:dd:
92:d1:04:c9:ac:57:24:9d:79:d0:52:b8:19:b0:20:
db:8f:d5:6b:04:f8:d6:c6:0d:cf:09:48:c8:ae:1f:
62:51:c4:11:a3:51:ab:5b:c3:dd:05:93:36:3f:2e:
db:d2:0f:56:d9:96:36:a3:c9:6a:28:f2:dc:04:50:
02:9e:73:e1:02:99:dd:5a:63:95:b7:37:0f:45:bc:
e2:4d:35:c7:dd:5c:fd:3c:2a:5c:1e:75:39:78:9e:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:A9:77:B0:3E:43:C9:CC:95:00:46:9D:70:08:55:5A:E1:4F:A6
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:4a:1d:07:a2:03:d9:cc:f7:a3:4d:b5:49:75:02:de:09:
95:d9:70:66:96:9d:25:d1:f6:67:3c:a2:8a:86:2d:d2:53:d0:
58:f1:7c:ad:00:9b:30:c8:c5:4d:e6:56:dc:29:c6:7f:46:58:
45:8e:b2:af:aa:4e:c4:0b:cd:f4:e5:b4:55:5a:21:6f:e4:cc:
da:dd:e6:33:62:c5:90:c1:e1:b5:70:af:7c:41:c9:53:56:4b:
1b:0e:29:82:15:4c:7e:d8:3e:56:18:7e:86:10:37:21:b4:b1:
c1:08:1b:ca:7a:05:9c:c4:60:a1:c2:8c:26:30:e7:ad:2d:f7:
69:bc:85:1c:ec:ad:0a:0c:f8:fe:90:43:58:1d:ad:fc:39:11:
5c:31:92:98:3b:d2:22:71:28:68:23:45:26:9c:09:1f:16:c1:
b3:8b:2f:aa:7e:ca:0e:d7:c8:7b:eb:3b:a8:3c:ec:fe:20:7a:
49:94:46:2a:27:17:ef:81:d3:8c:ad:7a:cb:b1:32:11:5b:79:
de:39:7a:de:0f:f1:cf:55:b2:7b:cc:a2:16:db:8a:ac:a2:03:
0b:3c:41:fe:48:0b:f8:ab:ae:60:c4:82:61:9c:72:25:55:a2:
ef:60:79:72:5c:48:f5:61:46:fc:3c:29:f1:46:69:d8:75:ba:
04:fd:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:13 2025 by rpki-client