Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: IO5nJS6fhkhtiiOWrvTTh53813Jn7cQWk68LjYhAweA=
Subject key identifier: 74:A9:8A:BE:85:EA:8E:6A:B3:3B:43:EE:D2:F1:81:11:DA:D9:04:9D
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 019A4F621FC69FDA8A3F2632A4DD15EA93DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 1286
Signing time: Tue 04 Nov 2025 15:00:21 +0000
Manifest this update: Tue 04 Nov 2025 15:00:21 +0000
Manifest next update: Wed 05 Nov 2025 15:00:21 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: WAQc59FBuM4nNt0BYivmAveSWxpAtBJPuB2Q62U6IXs=)
2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:1f:c6:9f:da:8a:3f:26:32:a4:dd:15:ea:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Nov 4 15:00:21 2025 GMT
Not After : Nov 5 15:00:21 2025 GMT
Subject: CN=74a98abe85ea8e6ab33b43eed2f18111dad9049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:ce:a4:1d:2c:ff:62:be:a0:fb:0b:6c:44:
3a:f6:07:d3:12:37:10:85:95:06:5d:2c:b9:a5:13:
e0:e3:1a:28:ea:28:cc:16:26:6b:2e:cc:a5:9d:6d:
5e:a7:5b:69:30:e7:09:af:ef:fb:94:c5:ad:b5:95:
d9:9f:a1:5c:ca:e8:c7:1a:78:72:a1:63:03:d3:9e:
a8:c8:bb:9e:c2:31:2f:1c:9f:23:69:64:12:26:a1:
1c:80:c5:5f:7f:2e:6d:ea:a9:73:bb:94:e9:cf:11:
f6:de:16:56:66:f8:a0:8b:ce:3c:3f:75:16:f5:f6:
8a:5d:5a:49:37:a0:40:66:15:27:f8:07:95:ef:3e:
e5:c7:ca:55:85:c4:b4:96:24:c2:c2:9d:0a:6f:63:
00:17:09:8e:98:2b:9c:a6:1d:70:07:dd:5d:65:1f:
d6:09:e6:e6:b2:1a:92:17:d8:88:1c:0f:ed:b6:67:
41:b2:41:f3:9c:ba:11:e6:c4:aa:e6:63:55:6b:bc:
8a:5b:49:fa:f3:29:e3:57:3d:79:b3:a8:6a:85:90:
45:e1:dd:00:f1:bc:bd:4c:30:c6:dc:52:dd:50:14:
00:8d:18:f0:e7:a1:31:fe:c6:51:1d:4b:0d:d1:9e:
2e:db:4a:33:6c:e8:ba:c0:ac:78:10:79:f6:a9:1c:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:8A:BE:85:EA:8E:6A:B3:3B:43:EE:D2:F1:81:11:DA:D9:04:9D
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:67:f6:26:75:e9:74:8f:08:47:e0:a9:35:45:75:59:b6:12:
5e:57:15:1c:d4:07:f4:6d:e8:4b:c2:a9:1e:ca:c5:ed:b1:88:
3d:6a:10:dc:17:6b:c5:7a:42:52:bb:c0:3c:fa:94:42:06:57:
6c:7c:e0:3c:32:2c:a3:84:77:01:3c:33:e0:0f:0b:94:c7:6c:
bf:1f:29:c5:a3:99:c3:39:33:b5:ff:38:e1:8b:72:83:c9:73:
44:23:83:0a:41:24:88:f6:4f:84:47:e9:00:8a:8f:e9:b7:c3:
92:98:1a:d5:46:af:69:2b:a2:32:44:0c:01:50:14:4f:8d:9f:
5f:e5:94:ef:7f:5b:6b:c9:8a:a7:e0:7a:fb:50:00:52:ce:9b:
06:8f:33:f7:6b:7d:3c:8d:c9:4b:87:ba:8c:de:f4:02:f4:85:
bc:82:a2:8c:45:00:f7:ec:0a:55:74:46:9c:f6:d2:c5:c0:a1:
c4:18:cd:d7:66:83:17:4d:08:d0:0b:6e:ff:4f:ba:76:b9:79:
77:8d:c4:a0:93:d8:ad:39:c5:a4:36:f0:72:06:21:7d:fe:0b:
c2:1c:bb:2c:30:6c:3e:df:8d:5c:95:2a:4a:05:6f:49:b4:ab:
b0:de:19:f9:27:91:34:7e:fe:a5:95:9c:e0:4e:4f:aa:36:41:
e1:af:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:21 2025 by rpki-client