Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: xPSSFeqmEJOUDLYbzj+Bq47poz8VHFSQnlFt/ldY75c=
Subject key identifier: 3B:49:2B:F5:F6:AA:4F:7F:4C:29:8B:00:92:43:39:18:E1:23:EB:BE
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019A4EF488B68DD9ADA3993BD729A4636AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0B74
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: WrIIPZfCaZOSmeADUWMlwg/XLuj5RNHwyrqphoYCs6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:88:b6:8d:d9:ad:a3:99:3b:d7:29:a4:63:6a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=3b492bf5f6aa4f7f4c298b0092433918e123ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:80:6f:aa:95:b8:43:a5:7d:b5:43:39:4c:
3d:a7:d2:b3:d8:be:d1:a0:eb:60:bc:5d:d3:02:47:
5a:3b:bc:b4:fb:ea:8e:3c:75:df:07:a2:51:a6:e8:
92:b7:1d:f3:e2:42:12:fe:08:54:9e:26:14:ff:5f:
7f:56:f7:9f:3c:42:c5:1d:0b:bf:56:4f:d6:f3:1f:
14:9d:91:32:51:4a:fe:22:01:ef:92:c2:d8:59:0a:
3c:75:ca:2e:10:73:6e:55:c6:f4:60:e2:9d:33:26:
32:25:60:97:20:ac:52:27:61:55:66:bc:11:2c:c3:
b4:8a:7c:75:a6:8e:45:6e:67:0a:f5:c6:99:42:74:
5b:50:8d:89:5e:51:97:c3:b5:40:17:d2:c2:67:ab:
cd:1d:df:ca:bd:3d:ca:8c:38:f4:8c:42:42:b9:fd:
5e:4e:e5:d1:4d:62:57:51:8c:53:55:47:25:6d:52:
cc:80:85:fd:a2:02:2e:98:63:a9:f9:24:ce:86:bd:
8b:51:d5:a7:04:c7:f2:04:fa:37:05:19:2d:c0:bb:
de:d0:ab:cd:a8:80:1e:ab:b6:bf:e5:ca:7e:f8:98:
d3:64:cb:d5:94:14:71:c1:61:03:75:16:4c:c1:82:
ae:54:5a:33:9f:26:e2:00:a6:ef:dc:15:8a:d8:e7:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:2B:F5:F6:AA:4F:7F:4C:29:8B:00:92:43:39:18:E1:23:EB:BE
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:50:e0:99:f6:79:c4:30:48:cf:7a:3e:c0:05:65:c0:e7:79:
db:31:52:b4:e4:55:ac:9b:6d:c4:97:f6:0d:fe:0b:79:68:89:
d8:2c:bc:af:4f:08:7d:8d:c4:8b:c7:17:2e:5e:e3:eb:5c:37:
46:ed:7d:a9:ab:3f:c4:c5:22:0c:bf:46:40:69:ab:41:e5:2c:
72:c7:f7:4b:30:88:eb:72:84:f3:2b:dc:6a:ef:48:47:15:de:
b8:70:26:82:34:ef:33:a4:0d:d2:90:18:8b:a7:42:db:d7:8a:
c6:44:3b:33:32:3a:9a:2d:84:8d:b9:45:71:82:b9:c1:17:93:
7a:c0:5c:60:55:0a:1c:f6:df:f9:6d:92:cb:03:35:82:c6:dc:
6e:f0:54:a2:b4:ff:cf:21:b6:e8:9d:46:4a:5b:04:17:00:ef:
4d:fa:37:c7:df:67:b3:f7:5a:b6:91:eb:bd:7a:6a:59:26:44:
f7:05:e8:db:71:06:97:63:54:d1:b5:c5:26:bc:0c:1e:00:fa:
e9:3d:9a:c4:32:c0:d2:e4:b7:e6:41:64:88:af:c3:a8:bd:7c:
fc:c3:6c:db:d5:13:d2:ba:48:42:12:d3:e4:3f:7a:e0:f2:fd:
e4:a9:ec:55:ef:c7:c9:49:c1:b8:7c:4c:8e:4a:60:bb:4b:ae:
a1:ab:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client