Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: N8Giuxn9eimHQmiii/NhKDEskofmstBuOqNXsitp/hI=
Subject key identifier: 86:5A:75:09:31:7F:88:1C:6B:F9:BB:93:D4:EA:B5:08:A4:0D:E8:D6
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019A52D279EC6521D9D9DB3A4C0DEAAF0436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0F12
Signing time: Wed 05 Nov 2025 07:01:56 +0000
Manifest this update: Wed 05 Nov 2025 07:01:56 +0000
Manifest next update: Thu 06 Nov 2025 07:01:56 +0000
Files and hashes: 1: 1caWY1h99shWYECynlPTo8_1vrA.roa (hash: Aon6FQO3a7yW1GjMXQDU5WdJ0X3x57CSJl9oOPxCpMk=)
2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: tiqx8QbmIejWwPke+GLhL9IduZ/MKMAGpyWQiLwOXTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:79:ec:65:21:d9:d9:db:3a:4c:0d:ea:af:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Nov 5 07:01:56 2025 GMT
Not After : Nov 6 07:01:56 2025 GMT
Subject: CN=865a7509317f881c6bf9bb93d4eab508a40de8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:9c:ec:be:8a:31:93:f0:b1:2d:21:37:3e:
2c:90:05:39:df:cf:96:69:ac:1a:d9:7f:77:f9:f3:
aa:07:69:34:2b:01:c5:db:d5:7c:26:94:bc:0e:91:
52:bb:03:b8:97:77:95:56:56:fa:57:d6:69:39:cc:
76:ee:c4:31:8d:f5:aa:00:27:f7:b3:59:4e:bd:33:
8a:fb:36:99:a7:0a:88:21:a1:4b:51:e2:a9:40:2b:
92:47:60:d7:a3:31:69:6c:45:f6:67:4e:b4:7f:21:
47:01:e1:df:47:8a:f1:d2:c2:e6:b1:c9:b0:bd:5f:
a7:f7:c5:6a:fe:35:e1:4e:f7:38:c2:36:26:ee:1b:
1d:62:4e:8d:f2:f7:fb:59:4c:af:7b:85:e0:b3:a9:
94:c0:68:71:15:fe:3b:29:a7:e3:2e:6a:b3:62:6f:
ac:97:70:30:55:68:a1:65:5d:03:c9:5e:3e:4f:36:
ec:28:dc:3a:1d:b6:ee:6e:25:02:11:5c:6d:28:bf:
4a:31:52:ac:6b:90:d6:c1:de:66:b7:31:e8:70:5b:
2c:80:1a:88:5e:b0:aa:17:be:56:0c:6f:f8:12:10:
cc:92:64:5e:33:f5:f9:04:90:7b:92:17:e0:ce:5b:
fe:74:cc:24:6e:56:d8:b7:8c:9c:53:6f:fc:a4:01:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:75:09:31:7F:88:1C:6B:F9:BB:93:D4:EA:B5:08:A4:0D:E8:D6
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:85:87:10:93:87:44:32:22:48:9e:d8:94:a4:5c:4d:da:
9f:58:01:97:c1:27:15:f2:77:55:1a:56:62:41:e0:08:39:4d:
e6:61:7a:ed:71:d4:90:30:97:90:af:ec:e6:50:8a:93:64:9b:
9f:7d:5e:54:d0:f7:e4:98:dc:8a:5c:6b:11:4e:fc:5c:10:16:
91:1a:d8:9b:68:75:8e:8a:bd:05:17:82:0f:a2:ba:70:b8:a8:
97:b7:34:46:53:75:12:d0:cf:ae:51:04:ab:e6:15:f3:fa:52:
1c:9e:34:50:52:68:81:04:84:64:59:13:97:75:46:8d:3c:1a:
75:0f:16:7e:61:65:93:7a:3f:d4:b3:dc:73:66:9f:30:8e:5a:
4d:e3:a1:d1:0b:ae:9a:d9:52:8b:a3:3d:73:26:9d:cc:a4:d0:
a2:c3:81:32:ad:05:6b:70:6f:d9:98:47:af:ea:ca:ba:be:f7:
37:46:16:33:60:16:97:a2:27:62:67:bd:38:ce:c2:eb:36:c0:
18:30:cf:73:21:82:b2:f6:bb:70:c4:17:fe:00:78:35:3d:0e:
bc:03:fd:23:63:5b:9c:fb:bb:32:8a:7d:ca:03:51:78:3f:75:
40:96:88:f8:d2:88:c3:23:cc:1f:7e:20:3c:42:d2:25:9d:96:
b6:56:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:48:05 2025 by rpki-client