Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier: KH3IoU41z91ZqGSEtMRAr2mADVSerblQZZnYRPUxJbw=
Subject key identifier: 7B:88:76:F2:DE:FE:AE:D7:D5:D6:B5:83:3A:FB:E0:13:78:9B:6C:6C
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial: 019A4E5004D706335313540CEFBD4CDA41FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number: 0DEC
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: X7ua6CW8LIqAl33xNv1RWs/o5hpc+p6nQoQV+jJAZGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:04:d7:06:33:53:13:54:0c:ef:bd:4c:da:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=7b8876f2defeaed7d5d6b5833afbe013789b6c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:25:bf:48:1f:50:a9:f6:84:b0:51:f8:59:
1f:2c:bd:49:89:2a:27:71:50:38:2f:b3:32:47:96:
6c:8c:1c:15:a5:16:83:06:b4:d5:a2:58:9c:e5:ac:
95:1c:9a:ce:70:08:ae:ea:9c:ea:2f:9f:18:77:93:
e4:b5:80:2c:ee:66:47:13:d9:f6:3d:b6:7d:02:d2:
ff:1c:bc:05:1d:70:99:5a:bd:5c:7e:ce:5e:16:81:
0c:eb:c0:60:e0:e4:eb:13:e9:23:ae:e1:50:7a:86:
2c:be:06:a4:a2:d0:c3:56:01:df:e0:6b:ba:8e:08:
91:9a:0c:97:a2:29:45:28:84:1d:cd:49:3e:89:ac:
4b:e9:bb:44:3a:97:ca:b3:73:42:ac:ed:2e:ea:e0:
03:21:ef:9f:21:bb:ff:dc:fb:f5:91:ad:7c:08:25:
54:c2:dc:27:2c:ae:45:ea:5a:a9:65:66:4e:28:e4:
39:ad:e4:f5:50:24:27:10:60:50:6a:db:ab:d5:ba:
eb:dd:9d:8a:db:b7:ab:25:63:c8:6e:c9:41:f3:ec:
e3:ad:a9:5c:d7:3a:57:6e:7f:7f:65:c5:f4:bc:00:
28:b8:98:94:53:67:58:fe:e1:08:72:f1:d3:1c:85:
f1:c9:1d:ce:69:2c:b0:bf:14:2d:72:8a:5c:da:8f:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:76:F2:DE:FE:AE:D7:D5:D6:B5:83:3A:FB:E0:13:78:9B:6C:6C
X509v3 Authority Key Identifier:
keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:39:dd:19:c7:75:2b:bb:a4:d3:d1:83:f1:eb:1f:fd:1e:
ea:38:5c:17:40:b4:a8:30:4c:8a:17:a2:c4:e1:19:4e:62:e5:
04:77:92:08:2f:9d:4b:8d:f1:42:db:ed:a7:7b:c3:f6:ae:cb:
12:2d:e9:26:b4:5c:3a:e2:bd:c1:0e:58:b5:0f:1c:8c:e5:39:
71:78:ae:c8:84:aa:85:1d:19:13:e8:7c:89:84:99:f4:3b:0e:
8f:4f:26:85:7d:31:2c:f4:44:04:95:d1:6d:f6:98:5f:a4:60:
0a:90:1f:ea:ff:9f:a3:ab:d4:87:dd:75:02:5a:55:89:d9:b4:
c6:93:ba:59:97:45:a4:c9:64:a1:36:d6:60:63:e7:b5:b4:39:
ce:a2:ab:65:8e:ae:86:89:0c:d0:fe:3e:b4:3b:ad:e4:9d:16:
c9:b0:fd:4a:c3:25:6d:17:75:f7:50:91:86:4f:4e:30:9c:97:
83:fe:85:19:15:c8:44:11:47:3f:6d:fe:cc:ec:75:1c:51:26:
f5:39:ff:11:85:21:7e:5b:fd:0b:40:8d:82:7f:61:d9:b8:1c:
6d:e9:62:f8:af:cf:95:5c:fd:88:e5:72:c8:3e:d2:8e:e1:56:
e1:d2:52:8e:64:c9:8e:66:5e:2f:e1:ec:bc:7e:09:41:c1:85:
cf:3c:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:17 2025 by rpki-client