Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File: 6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier: LHPMj945CMhDv6tzX5Vfn983JXEcMs7eL8Gi177gDEI=
Subject key identifier: 4A:33:64:61:EA:0D:BB:58:C0:83:F0:1A:9F:76:B2:6E:F9:99:41:2F
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer: /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial: 019A4EF573A6A1167C9A3B01B02B5D81B457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number: 0A26
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: 0y3PKcMt8oSDgZuYNPuuKWNDzgLB3xwudO3GjmHiWGU=)
2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:a6:a1:16:7c:9a:3b:01:b0:2b:5d:81:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=4a336461ea0dbb58c083f01a9f76b26ef999412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:6d:ff:a5:8d:94:41:a9:00:35:a4:6f:8c:
9c:1f:1e:3f:42:cd:6b:bc:50:0d:d8:dd:5e:04:06:
bc:5e:a1:fc:b2:c5:95:74:1d:ac:c2:a9:f2:6d:be:
02:07:8c:d8:d5:50:6d:d3:aa:55:da:09:c8:3b:ee:
6a:a4:09:97:38:4d:4d:22:aa:89:0a:6f:83:28:45:
02:69:a7:3e:11:90:52:4d:26:d4:74:f4:11:f5:bb:
57:4e:b5:62:4e:b8:f4:1b:54:7b:b4:df:40:9b:e2:
58:48:62:36:a7:ef:8b:fb:dc:d4:12:41:49:4e:68:
9f:7f:58:a3:5b:eb:6e:b5:fa:27:74:18:3f:e3:b3:
75:d6:85:8d:a3:64:e2:6e:8c:e1:e7:d6:17:bc:37:
7e:9e:ed:41:62:5c:62:23:1a:3a:41:9f:75:d9:93:
0d:e9:2f:23:06:a0:39:a3:b3:0c:73:59:08:6d:df:
69:60:53:be:1b:bb:ee:bc:33:f3:b3:9a:dc:38:77:
20:5d:9e:4a:4d:0d:45:19:cc:7d:18:52:b4:af:a3:
34:40:6a:ff:56:27:8b:2d:48:39:4e:c3:19:5e:ad:
a2:3e:db:72:b3:34:46:7f:fa:a6:e7:d4:89:78:d7:
d4:20:d9:29:2a:b0:ec:70:50:c6:cc:a4:b1:44:7f:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:64:61:EA:0D:BB:58:C0:83:F0:1A:9F:76:B2:6E:F9:99:41:2F
X509v3 Authority Key Identifier:
keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:db:e2:62:1d:0d:f1:b3:ec:49:76:04:ee:fa:0f:76:f3:
35:67:8c:e2:f9:b3:fe:c8:af:69:ca:cb:2c:6a:6f:f5:90:3e:
3e:f0:3f:40:e1:ea:ae:46:1d:f3:87:fb:c2:6a:34:7d:43:d0:
72:b0:10:f9:ca:e0:11:f5:d4:32:0c:12:f2:ed:6f:29:60:b5:
da:9b:12:f2:f0:59:02:c8:4a:30:ff:07:7f:5a:56:5b:ec:c6:
2e:b5:a8:bc:33:3f:27:2a:c0:6b:eb:3a:80:4e:0a:ae:44:0e:
be:db:34:cf:99:2c:3f:15:a9:5c:d4:a7:25:02:48:b8:be:36:
74:3c:74:d2:00:54:c4:68:0c:30:6d:cb:c8:03:cd:06:39:75:
0d:15:49:63:55:e4:f3:79:e4:50:d8:4c:2d:47:9e:c9:33:06:
d0:97:2e:d2:e9:19:47:52:b9:48:a9:20:3d:61:c7:ea:00:6f:
98:80:d4:aa:e8:bd:e1:cc:3d:91:17:e8:fa:08:c5:f1:4c:e7:
4e:6c:30:5a:ff:6a:c6:48:8d:4e:c8:26:6d:00:3a:5b:01:1e:
64:53:08:10:56:78:1f:08:06:aa:43:2c:e8:25:97:e5:f9:8c:
cd:bf:70:bb:43:7e:0c:37:b3:e1:0d:58:99:ef:8b:47:b8:d4:
86:6a:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:58 2025 by rpki-client