Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: xmwjcEAKxHx13CSP0Q+242JkuoCJHkecMKZXmrhJHHs=
Subject key identifier: 56:74:9A:C8:56:78:A9:2F:27:50:83:AB:EF:13:5C:4A:8F:87:30:45
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019A4D07A7AF2880412E28CA83E95AEF167A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 11B8
Signing time: Tue 04 Nov 2025 04:02:18 +0000
Manifest this update: Tue 04 Nov 2025 04:02:18 +0000
Manifest next update: Wed 05 Nov 2025 04:02:18 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: 7szfMHfXlFDhonRaQ7K0KMprwVZdGv6uxArUoR639xc=)
2: YgG0lEHEtjr1mC92HjSEXF6DaCY.roa (hash: U16htSk1oaeIqosXWc0EGaYjohQFI01/iP1fxjLlYZE=)
3: mF0VnTUC-VE7tOehsB99pmMnMp4.roa (hash: qBC6VjnyODjzw3i+7pIjQeMUTdYeihdx4axoA9L+eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a7:af:28:80:41:2e:28:ca:83:e9:5a:ef:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Nov 4 04:02:18 2025 GMT
Not After : Nov 5 04:02:18 2025 GMT
Subject: CN=56749ac85678a92f275083abef135c4a8f873045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:98:cc:5e:c6:96:a9:ba:71:59:44:f6:a6:
7e:8d:0f:f2:01:a0:fd:b9:4e:b5:7c:41:0b:0b:0c:
ed:bf:d0:76:fd:47:b7:62:f0:ae:96:f1:a7:e7:24:
de:0c:1c:4f:cb:85:02:41:13:89:9c:eb:49:67:fe:
f2:6c:fa:e1:f7:89:9a:07:3c:50:14:75:cd:3f:64:
47:64:13:af:19:f5:3c:72:d9:4c:8e:e1:7b:1f:19:
18:1e:2c:75:39:01:84:a3:a4:47:18:0a:8f:b6:a9:
fd:5c:40:d6:f3:5d:ae:b3:c6:61:1e:45:55:14:7e:
ec:b2:77:a4:c9:5b:43:f7:32:c4:a0:b1:07:a2:5c:
db:75:0f:35:1d:fb:1e:82:34:2d:97:dd:6d:e6:db:
b5:1f:a2:af:59:84:c3:5d:62:30:69:82:8e:5b:91:
19:4a:ab:7b:20:91:2e:0c:53:27:41:76:82:4e:c3:
cb:2f:d9:bf:5e:f8:84:10:b8:92:bb:83:76:27:4d:
aa:d4:f8:50:00:0d:c4:e2:04:7b:36:1d:1b:95:55:
23:6b:92:70:7e:71:11:12:3b:77:b9:e1:de:84:da:
fb:f3:2f:8d:fb:09:a8:b4:4b:a7:bb:64:e2:89:b7:
7e:d5:aa:b3:2a:6e:3f:e5:82:5e:ae:ec:00:ca:7e:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:9A:C8:56:78:A9:2F:27:50:83:AB:EF:13:5C:4A:8F:87:30:45
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:9a:c3:95:66:55:6e:38:71:43:d0:da:01:05:59:6b:9a:
45:86:19:f4:aa:66:f4:90:b4:d4:93:ce:b9:f2:f6:6a:3f:42:
7e:5a:ad:d7:e2:cf:0b:f2:bc:71:74:53:6a:4b:24:74:d4:ae:
58:3a:b9:d8:36:63:a9:14:8a:4e:6a:99:bf:21:54:ac:1b:24:
8b:78:52:2e:25:b8:01:15:8a:4a:b2:c9:ca:27:33:b6:92:79:
10:83:38:8d:c3:6d:0d:b0:4d:39:14:55:23:87:7e:2d:b8:aa:
f5:92:2b:2d:f2:6e:fb:cd:a6:fd:39:b1:9a:29:2e:2c:81:71:
8f:f2:d0:29:48:23:1c:ca:3f:38:68:a2:3f:da:18:87:03:9a:
1b:11:85:4d:a0:29:6a:e6:cc:ca:11:e9:23:38:53:ef:15:f2:
28:73:0b:17:47:0b:6d:6c:27:57:48:a2:e1:ce:8f:ab:f7:b2:
b7:5e:2b:93:94:e0:c8:3f:ed:01:34:b8:f2:5d:97:7d:59:81:
f7:5a:46:c4:43:8e:f2:9f:c9:39:3e:81:a8:cf:20:0c:8a:7f:
d4:10:2c:4f:a5:fe:ce:70:71:7e:e4:ea:15:40:9f:22:25:f7:
1b:28:22:cc:86:87:e9:1b:fc:36:ad:80:88:2e:2f:f5:ab:2b:
90:b0:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:10 2025 by rpki-client