Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: BYb6ar5AlfXHsoheYg0ocMy1pm5vKJY0Sdw3gXPRqSk=
Subject key identifier: B1:E0:11:16:27:EE:61:0C:C6:A7:B8:47:AA:E9:5B:74:C0:23:28:43
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019A4E869D0C22FE6FBA8299E93D8841DBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0AF5
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: ZhF3BjdJHGT3OsDPOD1oLhqnRoRZsAGT3ncB+/wxUBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9d:0c:22:fe:6f:ba:82:99:e9:3d:88:41:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=b1e0111627ee610cc6a7b847aae95b74c0232843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:2f:f4:75:6f:c6:d5:1f:49:25:43:b0:49:
e2:5a:0b:01:27:49:3a:2c:73:c8:b0:ed:d2:3e:1a:
5d:8b:99:32:26:6b:a6:d5:68:ad:3d:26:ea:99:94:
61:39:07:f4:81:20:eb:59:70:b7:94:53:8e:c8:06:
0b:09:18:53:99:43:fc:c8:72:f1:7b:86:27:85:63:
2c:99:4a:2a:8f:21:c6:1d:8e:82:34:e3:3a:4e:2b:
9c:4c:c5:53:09:64:73:f1:28:e7:6a:dc:ab:ba:0b:
73:ee:3a:09:87:be:97:43:b6:1c:ea:f2:5b:74:08:
81:be:ff:32:63:1e:25:23:50:d4:2c:e5:9e:ff:95:
dd:66:0b:27:ba:0e:f9:92:2f:30:62:2c:0d:87:2a:
05:9e:74:46:e9:05:c8:59:f9:58:39:12:af:49:ec:
08:49:3f:2b:fe:ed:0c:bd:45:19:70:23:81:a6:d9:
e7:8a:e8:57:8d:73:e0:05:e9:fc:76:6a:93:8b:32:
16:62:7d:d4:0a:11:b1:82:da:7b:95:1f:a1:42:a2:
e8:8f:55:fd:98:45:47:51:02:be:f7:c8:65:db:d0:
be:a8:46:a0:c5:9a:01:3c:6a:13:bc:87:fb:a6:c6:
eb:9f:04:18:5b:d5:93:9c:ba:d9:cc:c8:e1:d3:dd:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:11:16:27:EE:61:0C:C6:A7:B8:47:AA:E9:5B:74:C0:23:28:43
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bb:c4:4b:c5:ae:c9:2c:8f:57:ed:f7:6e:6a:2a:f4:e4:85:
7c:86:2a:f8:76:c5:e7:40:a3:c3:92:87:c7:2f:8f:89:0e:d4:
83:03:a2:46:1d:1c:0f:28:7e:5c:59:af:f3:a1:20:8e:f4:59:
b8:f2:49:11:a8:fe:8e:cd:82:bf:21:6a:0e:c4:7a:71:ec:97:
c1:8d:47:7c:7a:e7:52:8d:3a:c5:14:2e:cc:80:fd:c1:70:73:
10:8c:d4:4f:d2:51:90:eb:b2:a6:46:57:5d:66:63:73:bf:12:
72:3f:90:67:ef:04:72:45:82:e6:6d:9f:09:d3:a4:8a:70:dd:
9e:6d:ab:19:4f:73:0b:e8:c6:6f:d5:92:b1:87:25:32:59:d8:
a5:7d:a3:53:0f:a7:1c:33:d5:74:b1:0c:c9:d0:5a:8b:53:57:
ab:a6:fa:f8:c4:7c:02:62:1c:c5:46:69:b3:29:09:17:e3:07:
1a:be:2e:1c:23:98:55:23:bb:45:7a:2a:d9:ac:21:f3:83:3e:
61:a5:52:49:29:06:13:48:80:4a:53:4a:53:27:25:77:c1:26:
50:67:62:b5:38:d3:1f:72:a7:fd:37:24:7c:9a:1d:86:a3:a5:
44:67:c3:37:1b:30:2e:9a:5f:27:fe:6c:0b:26:ce:61:8e:c4:
84:8e:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:45 2025 by rpki-client