Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier: B+ctOb8hfpjIIlA0jeEiWmDJ5yxa56ttWYKtPGb/kfc=
Subject key identifier: C6:30:34:60:E3:BB:C8:1C:61:76:77:A4:0E:96:83:E6:5E:19:D5:22
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 019A533EA59D13BE65F6587C8C7C68AFE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 09:00:05 +0000
Manifest this update: Wed 05 Nov 2025 09:00:05 +0000
Manifest next update: Thu 06 Nov 2025 09:00:05 +0000
Files and hashes: 1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: nleaHEckbReejYsEE7six6Q7+l0ZW+1sMC5SemuInoY=)
2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:a5:9d:13:be:65:f6:58:7c:8c:7c:68:af:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Nov 5 09:00:05 2025 GMT
Not After : Nov 6 09:00:05 2025 GMT
Subject: CN=c6303460e3bbc81c617677a40e9683e65e19d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:28:b5:cd:04:e2:74:b7:0a:2c:9c:0f:29:
6c:4f:62:61:84:a0:4d:b7:8d:2f:c6:d5:5f:8b:cb:
79:ec:d1:4a:d7:fd:95:98:10:5f:b8:00:53:f6:21:
db:7b:be:0c:6b:c8:5d:0c:c3:b3:cb:4d:0f:05:f3:
40:01:f2:1f:87:74:cf:74:bf:2f:56:fc:4e:66:83:
41:76:c7:68:16:d6:26:12:11:d6:b1:af:d2:3d:21:
62:7c:c3:81:11:6a:33:38:f0:50:90:49:ad:cf:3f:
61:7a:bc:b7:22:8b:da:50:d6:3e:c9:f3:fc:2e:a7:
55:4a:8a:7a:9c:78:c6:95:8d:76:5b:6e:e9:30:f0:
ed:9d:20:5d:dc:33:f0:04:2f:2f:3c:d0:7c:f7:1a:
b0:32:98:96:37:c5:01:a8:a1:02:43:42:a8:5c:8b:
75:5a:47:d6:47:d5:98:a3:bb:cb:27:4b:82:91:c5:
54:1b:4f:61:c2:88:79:8a:ec:bd:9e:af:cd:c0:09:
2c:74:77:3b:d2:df:f5:ef:5d:59:88:d0:90:94:08:
80:01:99:bb:82:e6:cd:16:70:97:03:75:4c:86:9b:
61:b4:26:a0:dd:89:5f:2a:0d:87:e9:71:45:60:8e:
5f:1f:40:3f:a4:fa:52:40:83:c5:78:1c:4b:7e:b8:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:34:60:E3:BB:C8:1C:61:76:77:A4:0E:96:83:E6:5E:19:D5:22
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:95:44:69:ca:3e:95:d5:fe:8c:ff:4d:ea:44:b1:db:01:2a:
f6:b5:ad:93:3f:d1:92:a1:eb:dd:4c:4a:5b:1f:fc:f0:58:92:
42:aa:d9:a1:48:c7:11:29:91:a2:79:60:ab:14:82:95:c9:d9:
65:0e:75:5f:ae:ae:71:27:66:a5:54:c4:2e:15:3b:d6:b0:23:
c4:98:56:e1:ab:a5:a8:a1:cb:e2:03:77:87:06:db:aa:ef:ae:
0f:a0:ba:5d:0f:ed:1e:57:a8:a3:f9:59:16:3d:34:af:5e:27:
e2:7e:ab:1c:73:24:95:e6:67:48:a2:e5:88:bb:7a:fe:78:1c:
cf:e7:e3:dc:4c:9f:00:63:1b:1d:97:4a:0e:56:2d:cc:1c:00:
c2:bf:60:7d:7d:5c:c2:e7:77:f4:55:77:47:a4:04:d5:7f:37:
24:20:84:7b:e0:49:52:d4:aa:b9:bf:91:55:0a:9a:28:05:a0:
f8:73:ac:42:bb:95:a1:90:09:5b:05:f8:4b:5c:a1:70:61:87:
3c:cf:50:11:c5:9f:2b:50:73:22:9d:84:5f:59:f9:25:33:94:
13:ca:e8:e5:71:6c:21:0d:32:f2:d8:3d:90:1e:a3:0c:ce:a4:
92:58:dc:a0:77:49:f2:e7:af:b0:03:cf:0b:a4:bd:6d:3d:fc:
4a:a4:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:42 2025 by rpki-client