Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File: c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier: GnCommMtB2eT8aNKa9j4JMhwC8eZst56uyUlN7WGM6w=
Subject key identifier: 23:D1:9C:35:D0:EA:B5:2B:1F:F4:EA:A2:61:52:14:17:B6:75:EE:20
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial: 019A530867C873D0B293C971C0608A2A3973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 08:00:50 +0000
Manifest this update: Wed 05 Nov 2025 08:00:50 +0000
Manifest next update: Thu 06 Nov 2025 08:00:50 +0000
Files and hashes: 1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=)
2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: Sg76DMaX9QcUunjLOu9Rio2f8NuW6hD6YiYTjVc0Sgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:67:c8:73:d0:b2:93:c9:71:c0:60:8a:2a:39:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Validity
Not Before: Nov 5 08:00:50 2025 GMT
Not After : Nov 6 08:00:50 2025 GMT
Subject: CN=23d19c35d0eab52b1ff4eaa261521417b675ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:27:ae:79:bd:59:8d:a2:4a:77:36:91:a5:
ed:12:a8:02:df:79:89:e8:b2:5a:e5:87:b1:55:4d:
04:a6:bc:52:82:32:02:d4:d3:e5:08:f7:f1:ef:b5:
84:e1:f3:2d:62:4a:b6:64:8d:ba:54:9d:21:58:48:
85:68:9f:a1:84:26:7e:73:0f:ac:da:0f:65:81:57:
47:6f:11:51:86:6d:39:91:32:b5:4d:de:06:4e:e1:
04:9c:ad:88:9a:5f:57:bf:e5:88:b7:47:f1:6a:69:
64:d9:52:cc:e3:3f:ba:1c:09:2b:a5:5c:e8:7c:cf:
75:7b:a0:9c:44:1e:ba:82:d0:ad:cc:23:b9:b0:c2:
49:7d:74:71:d1:7c:76:2f:1a:83:2b:35:d5:c4:69:
82:e1:c5:82:3a:71:aa:52:c0:28:61:4f:33:5a:f3:
bb:20:20:14:16:f1:fb:4f:19:56:d5:69:b0:95:1a:
d4:1d:0d:46:1a:a5:64:56:ca:a9:eb:f5:19:ed:22:
2c:b5:fa:53:c3:60:73:c8:6d:f7:d1:dd:be:f1:fc:
d8:a3:5d:63:8c:50:95:32:4b:d6:ab:e1:d4:43:e7:
f4:3a:4c:62:2d:de:d4:a0:3b:24:6b:98:11:a7:63:
a7:68:3d:7a:f9:2e:15:09:e0:2f:df:33:3e:4e:38:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:9C:35:D0:EA:B5:2B:1F:F4:EA:A2:61:52:14:17:B6:75:EE:20
X509v3 Authority Key Identifier:
keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:64:ec:94:1a:9b:19:01:1a:ac:4e:23:de:12:35:c4:01:
5a:11:3e:ad:97:27:b3:bd:99:ba:37:13:8f:c1:78:90:17:93:
79:59:6a:f8:9c:f4:2f:b7:2a:e5:c0:53:05:08:87:9c:ba:f8:
0e:37:58:e3:76:94:7d:4c:ee:d8:07:ff:82:cb:5d:a0:e8:38:
ab:ec:7c:2c:c1:0c:fd:cc:ab:25:fc:82:7c:da:ad:de:1c:ed:
6d:26:2b:ca:c1:61:ba:29:a0:1c:75:bb:ce:d8:22:76:b1:a9:
e2:96:6e:c4:9d:47:a9:20:14:f9:d0:c1:0b:05:14:6c:0a:31:
87:86:22:49:bc:1e:af:4e:61:51:f5:82:d8:61:3e:27:e9:9b:
8c:28:5a:49:86:18:db:05:f1:e7:ac:1d:f2:1f:df:16:51:d9:
1a:3d:40:fb:90:c0:78:7b:70:63:bc:f8:e9:28:1e:6b:c0:5f:
4d:b2:d8:98:f8:4c:e0:32:e0:83:d4:27:05:e1:c7:95:ae:c8:
e5:ca:5c:b5:e1:2d:c8:a2:a7:de:e8:2e:f8:d9:67:da:d3:eb:
45:ff:5b:ee:c5:79:3f:27:ca:6a:a0:21:33:23:4b:ac:42:b6:
df:1d:2b:82:7c:7d:2b:fd:ed:26:f8:a7:71:e3:ed:4d:c2:e7:
ac:cb:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:44:46 2025 by rpki-client