Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: Okd0BhGFgW2FTt75FGegnkla7ZUOQiTCi89ovk1JtgY=
Subject key identifier: CB:12:97:0B:C6:38:26:7B:93:0B:B6:09:07:6C:29:13:18:3F:E3:EE
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019A4D3CD1AD628FB9B732C0F46474E0B9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: eE8dhwfYrE1WZcfbdm6xmOT80dBlUIqLAR9C0BXyhY8=)
3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d1:ad:62:8f:b9:b7:32:c0:f4:64:74:e0:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=cb12970bc638267b930bb609076c2913183fe3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:6c:74:72:e7:de:a8:4a:6f:f5:26:fb:93:
92:87:75:05:4f:83:e9:84:c8:45:35:f5:6c:ae:17:
20:ea:12:47:5d:b7:3b:36:fa:ab:2b:a0:a4:b6:05:
09:2a:b1:67:08:3d:94:61:58:03:74:cf:80:79:42:
35:ae:eb:f8:68:dd:57:0e:cf:bc:c1:e2:50:1e:92:
36:e3:ca:6a:cf:50:d9:d6:06:1c:16:87:de:27:e2:
05:50:37:7e:57:a3:bb:e6:ed:58:b1:86:b7:50:4b:
f0:6d:08:fd:c9:df:7a:76:10:5a:df:9d:90:93:16:
29:5a:a3:65:21:ed:86:8e:8d:da:71:fa:9e:15:0f:
57:1e:c4:5f:13:30:19:2b:e7:45:e7:97:b2:8b:1b:
a9:05:6e:2e:a5:0e:37:9d:08:0e:1f:0e:71:a5:33:
3e:eb:6c:b8:0e:72:f3:e5:69:72:12:07:d7:dc:16:
2b:bf:8e:4e:f2:03:28:64:e2:43:a6:60:86:33:1f:
4d:5c:ed:36:eb:4b:0d:68:2f:7e:79:f3:7f:68:8b:
9e:b4:1d:4a:96:c2:cd:44:fa:2c:52:8e:c7:de:73:
5e:1f:96:6f:ac:d9:c3:6a:5a:18:c2:9c:ac:57:dc:
24:b4:da:47:7a:ae:3d:c0:aa:2f:7b:1f:61:36:84:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:97:0B:C6:38:26:7B:93:0B:B6:09:07:6C:29:13:18:3F:E3:EE
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:50:4b:4c:a6:a8:c6:09:af:ab:7b:8b:48:8a:b4:07:b7:b2:
21:63:0f:b8:8a:49:a6:e1:4c:ac:e1:d9:a2:bb:9c:66:e8:6c:
7c:3a:44:aa:34:6b:05:88:d4:83:57:9f:fd:52:51:92:7e:e2:
ac:c4:8f:7d:18:d3:68:9b:71:22:96:83:66:83:71:db:3f:2f:
40:aa:fd:fa:82:a6:25:0d:99:95:df:06:12:bf:1a:0d:3e:67:
b4:da:31:ab:32:c7:9d:62:8b:aa:fc:51:a7:a6:d3:ac:86:02:
4c:e0:34:3a:65:2e:f3:7d:e3:2b:06:5d:a8:91:e5:53:80:ac:
90:56:a2:b2:c6:4b:88:9f:7f:fb:13:4a:91:f1:21:90:88:8e:
79:e7:eb:87:55:6d:67:ac:06:ef:02:8b:8e:e5:e2:e9:2c:90:
93:a5:f4:d4:0a:0d:ec:f9:1f:07:d9:75:3c:cc:d2:d2:88:b1:
74:92:53:f4:bc:76:0b:56:93:b8:f6:cc:af:00:71:f1:e3:94:
30:4e:10:67:41:85:a8:f0:1f:e4:36:80:3b:bf:f3:a0:27:8c:
38:3c:11:1b:8f:41:c1:aa:18:34:aa:72:73:04:36:60:db:41:
18:d7:a2:d8:7f:a2:60:50:77:58:58:b2:3c:e6:28:27:29:ac:
44:ac:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:00 2025 by rpki-client