Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier: ZUYAIdvUt+IC9JvYYoEl3SNB0P424VRW9g/UFOl9PlU=
Subject key identifier: 03:89:8E:B0:CD:B9:7B:A8:6A:52:5F:DD:2E:21:18:96:4D:70:94:DA
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial: 019A4E18AF96868FF86EA8ED8D2EF20A1594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number: 049C
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: tJUt0IvLsHqxgqaNFa1bVjnVOMcB30rLFcx2WjKxycw=)
2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:af:96:86:8f:f8:6e:a8:ed:8d:2e:f2:0a:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e847e88749704294552fef54886111ed0586ec24
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=03898eb0cdb97ba86a525fdd2e2118964d7094da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:da:73:30:fc:d7:f2:75:03:18:b5:50:9c:
25:4e:02:d8:70:17:8f:27:7d:b8:c5:51:fb:4b:36:
46:22:8f:a9:cc:10:8b:ab:ad:36:9a:fb:ce:81:0d:
95:4b:9d:da:b3:ba:fd:23:42:d3:74:ba:86:1a:c2:
c0:68:68:cd:2c:55:02:64:e7:2b:b9:85:a2:49:67:
b8:82:93:18:eb:73:13:da:55:86:1e:c4:e9:d2:7a:
d5:28:84:fe:61:45:06:fa:95:b3:1a:eb:68:05:37:
aa:aa:bd:32:70:0e:87:c7:e0:50:a6:cb:c0:69:1b:
c8:71:ee:4a:e0:68:b2:0c:7c:e1:eb:45:82:34:ed:
6d:f1:3f:13:9f:50:41:a4:e0:99:11:44:c4:35:31:
ba:8c:0b:3c:69:da:6b:3c:8c:20:e4:f0:8c:fa:c3:
2e:38:61:7c:59:4c:b5:33:ca:87:12:91:99:40:77:
d7:4f:94:14:a7:b7:36:c9:e0:38:86:ec:3b:bf:73:
10:22:1c:ea:25:b0:b9:fa:f7:60:b3:b5:d0:42:8d:
8f:d1:f2:f7:7f:04:5d:b2:45:71:ab:5f:45:c1:84:
b4:a4:df:3c:26:42:2a:9c:be:0a:2d:8b:21:b1:d7:
f4:d7:f0:ea:12:f6:e4:fe:c3:65:d6:20:2f:bf:b9:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:8E:B0:CD:B9:7B:A8:6A:52:5F:DD:2E:21:18:96:4D:70:94:DA
X509v3 Authority Key Identifier:
keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:9f:26:73:b1:42:1a:7b:01:27:3d:ce:a7:8a:82:ef:57:
93:2c:fd:62:22:3c:23:1b:79:26:80:d3:d4:a9:e4:4a:91:59:
ec:69:7c:49:5d:99:23:21:80:07:17:25:f4:1e:c2:47:67:2d:
6c:f6:fe:d1:c8:c9:b6:d4:a5:16:6b:b5:de:9b:1c:38:47:d7:
37:0c:6f:fd:51:6d:fd:66:b9:10:16:46:bd:46:9c:f3:0a:88:
40:b8:4b:23:d0:8d:28:09:05:24:59:45:c9:df:41:34:c4:8a:
c5:b4:06:ea:8e:99:84:ba:4c:d5:ef:e6:d9:2a:6e:e3:3d:f1:
d8:05:3b:53:7b:67:5a:9a:98:03:bf:69:9a:bc:d1:8f:32:e9:
95:ff:63:dd:a8:ad:a5:c1:f2:bf:7f:b5:61:60:cf:ee:76:fd:
3b:99:64:2f:34:18:99:59:18:ac:ea:81:45:27:95:f7:1d:f3:
33:46:52:d1:f0:a1:81:5b:b3:21:d3:d2:29:16:99:f5:8c:79:
98:6d:5a:e4:d4:0b:1e:49:a9:aa:88:93:18:6d:1a:28:37:b5:
d5:ee:df:bf:12:53:a6:ea:18:40:6b:a0:3e:5c:11:4b:31:ff:
50:9d:57:11:27:c9:52:59:02:f2:64:3c:6b:36:8f:7a:0a:0d:
7f:f4:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:24 2025 by rpki-client