
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier: L+DbfLrN/RZJUcOWdq3Ag0+ba0/DtKPZwDpSBVxm4lk=
Subject key identifier: A5:0A:5D:05:9A:1D:EC:23:5D:FC:FF:73:95:C9:1D:07:2B:1A:26:C1
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial: 019A4E869706F52BCB6FA3DCC2F0F9A9EE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number: 0B70
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: 0z3XaS+oL0gLNoJsei/LGbCm+8TWuM2dpD/H4icCvf8=)
2: _T-vtGYkRfg0z_VEY1ujTV9wsKQ.roa (hash: 6bCPgaDCgJtCF9Wiux6xQrKawZrIY3ovPB6dkvGNia8=)
3: aOoYflX7uJIRHS-Vxicl6-foq_k.roa (hash: 3rCaBnosnTmAkm/S8jXALmR1BCxmxwNBGtyTjUO3JB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:97:06:f5:2b:cb:6f:a3:dc:c2:f0:f9:a9:ee:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=a50a5d059a1dec235dfcff7395c91d072b1a26c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:4f:31:47:3d:c1:2b:87:4b:d1:98:32:24:
39:bb:b1:d9:a2:f6:13:11:d0:d7:4f:7d:90:97:f6:
40:bb:f3:56:e9:3c:3e:04:e2:11:75:95:de:a3:ba:
75:9d:f0:83:d0:ac:93:33:b3:ca:98:e9:d0:a6:cc:
60:8e:36:a5:af:f1:bf:fd:7a:15:f6:be:e0:0e:55:
f6:8f:a9:f5:bc:9b:4e:3a:a0:5c:84:ce:d0:b2:a6:
c3:5a:3b:46:38:e0:bd:c8:c9:13:c5:e4:4a:f0:a7:
3d:09:22:c1:8c:52:58:b8:9e:e2:9f:e2:1d:b2:59:
7f:64:a6:8f:1a:d4:3a:e0:97:12:da:4f:dc:6b:6b:
88:09:ab:25:b9:4c:f5:2a:c4:fa:6e:3e:7a:80:fb:
bb:7c:0a:f4:4c:4b:f3:bf:08:da:8e:fa:5b:9a:c9:
74:78:26:ee:7d:e2:40:ef:88:e6:05:53:4b:bf:cc:
60:9f:c0:d6:e1:68:af:c1:b8:13:53:0e:8f:55:67:
63:b0:03:dc:76:68:aa:56:ff:e0:5b:29:6a:c6:d8:
28:28:d0:fa:a8:13:04:28:04:d8:a5:95:4f:d3:78:
89:f6:dc:7e:54:f4:2d:38:e9:5f:3b:b7:c9:f3:3e:
1d:2a:94:95:d0:80:ec:ce:71:3d:15:b4:dd:52:48:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:5D:05:9A:1D:EC:23:5D:FC:FF:73:95:C9:1D:07:2B:1A:26:C1
X509v3 Authority Key Identifier:
keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:28:e1:80:de:d8:8f:b9:8b:29:af:06:17:42:be:5e:80:
99:59:7c:67:a4:e6:62:77:60:fd:ac:82:3e:fb:db:3a:31:8f:
0e:d7:36:c3:d3:eb:b1:75:77:f2:2c:20:e4:55:0b:fc:48:d7:
62:a6:d3:2c:8b:44:dc:af:48:c0:63:05:f8:e6:28:1c:37:40:
68:46:15:6b:b7:46:0a:22:49:36:cd:22:b1:63:6d:9c:8c:a4:
97:94:67:23:97:0b:90:b2:c8:a5:a1:dc:ec:26:b8:92:4f:20:
29:1c:be:95:34:59:d7:c2:56:ad:36:9c:97:5b:4c:1e:82:3c:
a7:10:08:3b:ad:c5:8e:86:fe:20:24:5f:1b:bd:7d:3d:9d:02:
a1:95:47:7b:1a:3c:b7:d9:19:bb:23:2f:36:4a:20:3d:d3:ec:
5e:68:32:f1:f2:1e:c5:71:23:6c:d1:48:35:8c:3f:3e:bc:60:
ae:72:c0:8d:0d:7e:d5:de:76:d7:29:44:38:36:b8:e2:3c:04:
11:bf:c9:d0:9d:dc:8e:40:e7:bf:18:7c:73:0b:55:52:7a:99:
f5:91:a6:39:76:35:9a:3b:28:ee:1b:23:da:0a:b4:ac:2a:af:
11:38:3c:94:39:e0:14:65:33:32:65:62:d3:12:8a:51:4d:ea:
c8:c1:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:50 2025 by rpki-client