Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: TpnhAQAbc5yPv9QgjP40KLqsJTzPg3EPM9WKcKAeN+o=
Subject key identifier: 36:35:CF:62:09:22:4C:3F:DC:CE:3F:78:C3:92:1C:24:02:F8:59:D3
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019A4EF46DE8B664B32CD7DA8BA3E16B82FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 05C7
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: DDtMK0yNfdubc8wCH6XJXeFZoNJtxXVEIWpQi6vs7l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6d:e8:b6:64:b3:2c:d7:da:8b:a3:e1:6b:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=3635cf6209224c3fdcce3f78c3921c2402f859d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:5a:51:c7:f9:0a:1e:e1:89:49:43:8f:44:
c0:92:40:99:2d:39:02:bc:61:a8:29:a1:96:91:3d:
aa:6e:4d:27:5d:38:67:9e:ac:9b:b0:a9:6f:ae:2b:
2a:b2:30:e6:4b:f7:e9:0f:a9:34:a6:a7:89:b6:60:
fd:b6:72:d2:1c:a1:2a:65:91:74:51:3f:f9:bd:c3:
dc:89:0f:a3:5d:da:82:f9:af:9e:b8:93:b3:0e:d9:
39:af:37:42:59:7e:68:44:dd:a2:bc:09:6e:b2:8e:
f8:59:00:39:5f:b6:6c:06:b1:da:f2:2f:ac:6f:43:
2a:da:85:4b:82:0b:33:c3:1d:e2:44:10:57:00:27:
73:87:7a:d4:d8:d7:e4:cb:a6:36:92:0c:ba:ef:2a:
83:71:80:a0:af:2a:db:cb:6b:1d:60:bb:99:89:cf:
2f:60:5c:19:db:06:b7:78:bc:9d:78:6d:9f:a9:5e:
d5:84:5f:c3:02:c0:a8:dd:60:80:3b:91:bc:48:70:
1d:92:d9:65:5a:d3:c5:ce:00:3d:cb:33:2c:1d:7d:
66:a6:a7:6b:df:38:e8:4c:f5:19:ce:2c:0a:eb:e1:
b5:74:69:1f:36:4b:cd:96:ce:6c:07:29:ee:ec:67:
9a:e3:8d:39:ed:f4:7e:13:80:eb:4d:98:bb:1b:31:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:CF:62:09:22:4C:3F:DC:CE:3F:78:C3:92:1C:24:02:F8:59:D3
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:03:24:82:b3:39:8c:46:bd:ed:c0:a4:fc:cf:63:19:62:0e:
96:37:0b:fd:8e:68:72:40:4f:d4:b9:35:9c:c6:26:cc:5e:2b:
c3:7a:a3:65:e4:ba:cb:ec:cc:6b:3e:98:2a:a9:ba:86:c4:f3:
e1:07:e5:56:7b:dd:b0:eb:69:cc:8b:18:82:04:8b:c4:dc:7d:
99:02:65:50:d3:2b:88:c6:61:ef:4b:36:03:6d:f4:81:5e:26:
e6:a3:fc:de:61:e9:12:d1:e2:78:ee:b2:a0:a2:b0:ef:61:61:
57:24:08:40:ae:7d:56:b0:b5:66:cc:5b:17:d4:b7:b7:0f:08:
0c:74:23:75:60:d2:32:a1:d5:bc:09:e5:10:b9:8c:5b:63:53:
69:05:71:d0:84:36:2b:9c:1b:db:b1:7b:ae:0c:b5:4a:f0:e1:
2d:f4:cc:7c:86:00:e9:ea:0c:6c:6c:0e:e1:fb:ef:20:bf:61:
cc:ca:17:a5:5d:57:c6:7d:2d:9e:56:38:97:fb:64:4a:58:64:
3f:4e:81:21:00:af:1b:24:f9:4b:8c:20:34:84:dc:9b:a1:71:
41:0d:ae:96:83:ec:0f:94:45:eb:b5:66:6a:92:72:db:0f:4e:
ce:54:e5:b0:79:c5:25:61:0c:4a:16:3a:e2:53:11:64:51:8a:
3a:21:11:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:48 2025 by rpki-client