Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: sQAua8oEqIFNFJUw91saYFkkhPSC/h45VD5ooC6PNaU=
Subject key identifier: AC:9C:53:56:C6:24:83:D3:90:FE:62:7A:69:B5:FE:35:79:D4:72:EC
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019A4F98F7B8CA1DF5514D1080F0FD9E5480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: Vk2WhQednh7qMK5Bczz2kBn19V6y1lEmZSPQwZn1u40=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f7:b8:ca:1d:f5:51:4d:10:80:f0:fd:9e:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=ac9c5356c62483d390fe627a69b5fe3579d472ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:05:6b:c2:41:dc:23:52:ee:97:7a:d8:f6:
08:80:7c:5b:e2:4b:b2:87:47:04:e7:09:3d:89:af:
8b:2e:5a:c4:29:93:63:ed:ee:1d:09:c3:0d:43:09:
6c:d3:2a:66:07:57:dd:b5:4d:af:d7:2f:fd:d9:4c:
c9:d9:9a:83:23:7d:ee:42:f9:e4:09:51:e1:7e:b1:
a9:cf:f6:5b:5c:7e:01:99:84:0f:0e:65:a7:15:1d:
2e:81:d0:7b:ab:21:06:c5:61:fa:dd:28:a3:fa:6f:
64:78:55:2d:73:62:1a:da:4d:9d:c6:85:8d:6c:7f:
5c:45:15:2f:a1:f4:ca:48:3e:a0:a1:6b:38:e3:4c:
a9:0c:9a:56:51:bc:93:30:0e:8d:e1:48:4b:e8:b0:
09:d1:83:02:38:d5:66:1f:91:b3:74:18:b1:a5:fd:
85:23:1d:d9:c8:3b:7d:c1:e9:f4:23:86:46:c1:7f:
b1:cd:52:9e:97:eb:54:b9:90:13:04:57:86:bf:98:
3c:f7:46:b0:53:fe:fd:ab:22:ba:1b:db:ab:56:75:
cf:1f:69:e7:4d:9a:04:2f:0a:f9:70:7a:9e:3b:78:
bd:48:a4:c4:da:fe:09:1d:11:19:e2:cc:12:47:20:
9d:77:4d:06:75:7e:72:78:8e:71:f9:6e:84:8f:09:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:53:56:C6:24:83:D3:90:FE:62:7A:69:B5:FE:35:79:D4:72:EC
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:31:2a:79:2e:65:0b:cf:bd:6e:29:bf:25:c0:ef:53:51:
81:fe:a2:2f:2c:7c:a4:e9:59:39:32:c7:cb:26:f6:68:4e:2c:
c2:b9:3d:4c:21:64:03:9f:df:ca:c4:10:0c:31:e0:4c:54:07:
d0:2a:44:80:46:8f:6e:5b:8d:3e:bb:8c:32:4e:8b:06:19:2e:
5f:88:14:aa:5a:34:a1:6b:9a:95:0d:1c:e0:77:07:10:e0:2b:
7a:19:6e:e4:d8:65:12:61:80:f3:dc:93:83:05:9a:fa:16:16:
eb:c9:de:6d:46:84:43:0b:e6:11:50:35:da:6d:45:c2:4c:5e:
c7:c4:1d:f9:6f:76:93:3e:29:7e:90:86:b1:07:f1:ae:25:28:
d8:fc:62:06:d0:58:93:09:30:a0:90:dc:a0:13:e0:60:e8:2b:
f8:97:c5:c9:03:f1:43:17:f3:bf:5b:8b:bc:f3:34:25:42:9a:
f4:6b:56:5a:76:76:37:5e:b6:57:18:fd:85:f1:8a:67:07:90:
f4:7c:b7:0a:2f:2f:24:79:93:c4:2c:1c:ff:85:f1:82:c3:3e:
30:78:73:86:84:69:8b:a5:b3:08:8f:8e:5b:6b:43:3b:ad:f1:
72:ef:d2:ab:91:87:0e:ae:ee:16:84:14:18:22:de:59:01:d1:
85:07:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client